Edit tour

Windows Analysis Report
https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b

Overview

General Information

Sample URL:	https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b
Analysis ID:	1546267
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Javascript uses Websockets

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4108 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Javascript uses Websockets

Source: about:blank

HTTP Parser: window.onerror = function g(e,t,n,o,r){r&&r.error&&(r=r.error),r&&r instanceof error||(r={}),r.stack=r.stack||"empty",r.message="bundle init error: "+e+" error.message: "+r.message,r.columnnumber=o,r.linenumber=n,r.url=t,window.parent.__jivoonerror(r)};window.base_langpack = {"botlistpickerblock":"use one of the buttons in chat to answer","bottransferchat":"agent was invited to the chat","businesscopyright":"business messenger by {0}","byyandex":"by yandex","callback_delayed_button_submit":"shedule a all","callback_delayed_period_as_possible":"as soon as possible","callback_delayed_period_delimiter":"at","callback_delayed_period_today":"today","callback_delayed_period_tomorrow":"tomorrow","callback_delayed_submit_fail":"unable to schedule a call for the specified time. please try again.","callback_delayed_submit_success":"thank you!\nwe'll give you a call at the specified time.","callback_delayed_title":"when should we call you back?","campaign_popup_timer_days":"days","campaign_popup_timer_hours":"hours","...

Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/403308866?random=1730391816185&cv=11&fst=1730391816185&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/403308866?random=1730391816204&cv=11&fst=1730391816204&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DNNJDFDB6T&gacid=1452859248.1730391815&gtm=45je4au0h2v876163893z8841780988za200zb841780988&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1049528559
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-270WFR6PS0&gacid=1452859248.1730391815&gtm=45je4as0v892578316za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1763909225
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/403308866?random=1730391816185&cv=11&fst=1730391816185&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/403308866?random=1730391816204&cv=11&fst=1730391816204&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-DNNJDFDB6T&gacid=1452859248.1730391815&gtm=45je4au0h2v876163893z8841780988za200zb841780988&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1049528559
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-270WFR6PS0&gacid=1452859248.1730391815&gtm=45je4as0v892578316za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1763909225
Source: https://travelbusinessclass.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ
Source: https://travelbusinessclass.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MQSGVHQ

Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No favicon
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No favicon
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No favicon
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No favicon

Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="author".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="author".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="author".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="author".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="author".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="author".. found
Source: https://travelbusinessclass.com/	HTTP Parser: No <meta name="author".. found
Source: https://travelbusinessclass.com/	HTTP Parser: No <meta name="author".. found

Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="copyright".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="copyright".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="copyright".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="copyright".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="copyright".. found
Source: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	HTTP Parser: No <meta name="copyright".. found
Source: https://travelbusinessclass.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://travelbusinessclass.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49719 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445 HTTP/1.1Host: travelbusinessclass.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/css/styles.7327c7dca1b0dc7d3971.css HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/fonts/b439f6e4.ttf HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://travelbusinessclass.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/fonts/5a4ed10e.ttf HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://travelbusinessclass.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/runtime.acf15c91d9fc5d0b2b25.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/runtime.acf15c91d9fc5d0b2b25.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/app.d1a1183ef278c4f9a168.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/trustpilot.1e3f9101852f0e7a5a8c.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /build/img/static/wlc-img.webp HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/svg/pattern-x.svg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/fumeie-home-page.webp HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-2.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-1.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/trustpilot.1e3f9101852f0e7a5a8c.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/svg/pattern-x.svg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-3.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-2.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-4.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-5.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/wlc-img.webp HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/fumeie-home-page.webp HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-1.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-3.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/img/flags/flags.png HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/svg/down-arrow-select.svg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/alpinejs.bdf191b9eca6a35ac57f.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/aos.b6c478a457c55ae32cb7.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/swiper.da46e2bb5a5b941c6f33.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/app.d1a1183ef278c4f9a168.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-4.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/img/static/user-5.jpg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/img/static/trustpilot-rating.png HTTP/1.1Host: travelbusinessclass.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/js/aos.b6c478a457c55ae32cb7.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/svg/down-arrow-select.svg HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon/tbc/favicon.ico HTTP/1.1Host: travelbusinessclass.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
Source: global traffic	HTTP traffic detected: GET /build/js/alpinejs.bdf191b9eca6a35ac57f.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/css/2.1cb30e7f.chunk.css HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/css/main.afd7172b.chunk.css HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/flags/flags.png HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/js/runtime-main.9d98dd33.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/js/swiper.da46e2bb5a5b941c6f33.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/js/2.14713378.chunk.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon/tbc/site.webmanifest HTTP/1.1Host: travelbusinessclass.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/static/trustpilot-rating.png HTTP/1.1Host: travelbusinessclass.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
Source: global traffic	HTTP traffic detected: GET /favicon/tbc/favicon.ico HTTP/1.1Host: travelbusinessclass.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/js/main.d24cded2.chunk.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /build/img/video/background.webm HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://travelbusinessclass.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/js/runtime-main.9d98dd33.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/js/main.d24cded2.chunk.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /build/dynamic/static/js/2.14713378.chunk.js HTTP/1.1Host: di7qaez2koc7r.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /widget/dwzeNfFJka HTTP/1.1Host: code-eu1.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /script/widget/config/dwzeNfFJka HTTP/1.1Host: code-eu1.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://travelbusinessclass.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/dwzeNfFJka HTTP/1.1Host: code-eu1.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /script/widget/config/dwzeNfFJka HTTP/1.1Host: code-eu1.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/status/1676623/dwzeNfFJka?rnd=0.3967468214786096 HTTP/1.1Host: node-ya-10.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://travelbusinessclass.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tag/ibhi9zl1ul HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/status/1676623/dwzeNfFJka?rnd=0.3967468214786096 HTTP/1.1Host: node-ya-10.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/site/1.0/b8661a8a142e5b88a17b164fcd5e8589/init?referrer=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445 HTTP/1.1Host: cloud.roistat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/bundle_en_US.js?rand=1729685307 HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/ibhi9zl1ul HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.49/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p/action/211036097.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /signals/config/4033617339993952?v=next&r=canary&domain=travelbusinessclass.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C44%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C169%2C142%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C5%2C90%2C81%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/403308866?random=1730391816185&cv=11&fst=1730391816185&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/403308866?random=1730391816204&cv=11&fst=1730391816204&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/site/1.0/b8661a8a142e5b88a17b164fcd5e8589/init?referrer=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445 HTTP/1.1Host: cloud.roistat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/403308866/?random=1730391816185&cv=11&fst=1730391816185&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-191980430-1&cid=1452859248.1730391815&jid=652950882&gjid=1557361127&_gid=13179984.1730391815&_u=YGBAiEABBAAAAGAAI~&z=1880446612 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-DNNJDFDB6T&gacid=1452859248.1730391815&gtm=45je4au0h2v876163893z8841780988za200zb841780988&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1049528559 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /action/0?ti=211036097&Ver=2&mid=d3a11cfc-d9c6-486c-995b-625f72950b8d&bo=1&sid=7b158e6097a411efa6a42592a528f679&vid=7b15b1e097a411ef929fbd58f1c9ef3b&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals,%20Airfares%20%26%20Flights%20to%20Worldwide&kw=business%20class,%20business%20class%20deals,%20business%20class%20flights&p=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&r=&lt=14130&evt=pageLoad&sv=1&cdb=AQAA&rn=193295 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tag/uet/211036097 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031; MUID=2502A4D2AD4269EC244DB1FBA942676D
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/403308866/?random=1733678224&cv=11&fst=1730391816204&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChEI8NWMuQYQ9YmGq9zkvMWAARIdABJqQ2hU8-ZuTz0wIlzCe_gFqyH3fv9z9iGNeQ8&pscrd=CL_Eq7v7lomeEiITCOeeru2DuYkDFVGMgwcdSY0l0jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjogaHR0cHM6Ly90cmF2ZWxidXNpbmVzc2NsYXNzLmNvbS9CV0NoRUk4TldNdVFZUXVyTGp0LUxZdHNQQ0FSSXNBR21NYnhIaVB4ZjBnV3dDWml4aXZhdFJjZkRJbFdvZWp0cUdNRVlRWWltaVFSMnMzQU9uLUVTWGJkcw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/403308866/?random=1730391816185&cv=11&fst=1730390400000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7doVjpUOAQdQab5b8zV4yOm6ONvrfyLw&random=4189256078&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391819727&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0.10000000000582077&uvpt=0.3000000000174623&ttf=30053.899999999994&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=627&estcl=6&iwlpcl=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391819727&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0.10000000000582077&uvpt=0.3000000000174623&ttf=30053.899999999994&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=627&estcl=6&iwlpcl=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/0.7.49/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031; MUID=2B1A544BC8346F7507AD4162C9BA6E00
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /css/d1dc0ec/widget.css HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-270WFR6PS0&gacid=1452859248.1730391815&gtm=45je4as0v892578316za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1763909225 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/403308866/?random=1733678224&cv=11&fst=1730391816204&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CL_Eq7v7lomeEiITCOeeru2DuYkDFVGMgwcdSY0l0jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjogaHR0cHM6Ly90cmF2ZWxidXNpbmVzc2NsYXNzLmNvbS9CV0NoRUk4TldNdVFZUXVyTGp0LUxZdHNQQ0FSSXNBR21NYnhIaVB4ZjBnV3dDWml4aXZhdFJjZkRJbFdvZWp0cUdNRVlRWWltaVFSMnMzQU9uLUVTWGJkcw&is_vtc=1&cid=CAQSKQCa7L7dlSqIu43vtGhe4KBCe6UcFZPmzT7-n4wjYqfrST2Qp-3qmug_&eitems=ChEI8NWMuQYQ9YmGq9zkvMWAARIdABJqQ2gCNSRQvH4qKJUtzF7G57L56_ANFB8Jyro&random=2695927095 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/1/sites/1676623/widgets/dwzeNfFJka/clients/0/telephony/callback HTTP/1.1Host: telephony.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://travelbusinessclass.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /p/action/211036097.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=1407EA0A8DE06A5B164AFF238C116B9A; MR=0
Source: global traffic	HTTP traffic detected: GET /tag/uet/211036097 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031; MUID=2B1A544BC8346F7507AD4162C9BA6E00
Source: global traffic	HTTP traffic detected: GET /dwzeNfFJka?ce68f8da3b934cc9 HTTP/1.1Host: vi-ya-6.jivosite.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://travelbusinessclass.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 4Ix8BYrd2D8/UDbi2CaEYA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /js/bundle_en_US.js?rand=1729685307 HTTP/1.1Host: code.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/403308866/?random=1730391816185&cv=11&fst=1730391816185&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmFq2TF8GYX9Bh94-E5s9uqZ-h4Hc39SsPniIXSF9YRIqBMAYHlUTYzxnPV
Source: global traffic	HTTP traffic detected: GET /signals/config/4033617339993952?v=next&r=canary&domain=travelbusinessclass.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C44%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C169%2C142%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C5%2C90%2C81%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1/sites/1676623/widgets/dwzeNfFJka/clients/0/telephony/callback HTTP/1.1Host: telephony.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391819727&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0.10000000000582077&uvpt=0.3000000000174623&ttf=30053.899999999994&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=627&estcl=6&iwlpcl=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/403308866/?random=1730391816185&cv=11&fst=1730390400000&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7doVjpUOAQdQab5b8zV4yOm6ONvrfyLw&random=4189256078&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391819727&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0.10000000000582077&uvpt=0.3000000000174623&ttf=30053.899999999994&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=627&estcl=6&iwlpcl=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/403308866/?random=1733678224&cv=11&fst=1730391816204&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CL_Eq7v7lomeEiITCOeeru2DuYkDFVGMgwcdSY0l0jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjogaHR0cHM6Ly90cmF2ZWxidXNpbmVzc2NsYXNzLmNvbS9CV0NoRUk4TldNdVFZUXVyTGp0LUxZdHNQQ0FSSXNBR21NYnhIaVB4ZjBnV3dDWml4aXZhdFJjZkRJbFdvZWp0cUdNRVlRWWltaVFSMnMzQU9uLUVTWGJkcw&is_vtc=1&cid=CAQSKQCa7L7dlSqIu43vtGhe4KBCe6UcFZPmzT7-n4wjYqfrST2Qp-3qmug_&eitems=ChEI8NWMuQYQ9YmGq9zkvMWAARIdABJqQ2gCNSRQvH4qKJUtzF7G57L56_ANFB8Jyro&random=2695927095 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /css/d1dc0ec/omnichannelMenu.widget.css HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/d1dc0ec/omnichannelMenu.js HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sounds/notification.mp3 HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://travelbusinessclass.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sounds/agent_message.mp3 HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://travelbusinessclass.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sounds/outgoing_message.mp3 HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://travelbusinessclass.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dwzeNfFJka?ce68f8da3b934cc9 HTTP/1.1Host: vi-ya-6.jivosite.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://travelbusinessclass.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: VoLEQ4cY9zxdHwnPEGR0nw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/d1dc0ec/omnichannelMenu.js HTTP/1.1Host: code.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /widget/status/1676623/dwzeNfFJka/ce68f8da3b934cc9? HTTP/1.1Host: node-ya-10.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://travelbusinessclass.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /widget/status/1676623/dwzeNfFJka/ce68f8da3b934cc9? HTTP/1.1Host: node-ya-10.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/?id=4033617339993952&ev=Jivo&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391838893&cd[content_name]=Proactive_invitation_shown&sw=1280&sh=1024&v=next&r=canary&ec=1&o=4126&fbp=fb.1.1730391819715.800126398351769817&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0&uvpt=0&ttf=49217.5&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/d1dc0ec/chatcontainer.widget.css HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=Jivo&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391838893&cd[content_name]=Proactive_invitation_shown&sw=1280&sh=1024&v=next&r=canary&ec=1&o=4126&fbp=fb.1.1730391819715.800126398351769817&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0&uvpt=0&ttf=49217.5&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/d1dc0ec/chatcontainer.js HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=Jivo&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391838893&cd[content_name]=Proactive_invitation_shown&sw=1280&sh=1024&v=next&r=canary&ec=1&o=4126&fbp=fb.1.1730391819715.800126398351769817&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0&uvpt=0&ttf=49217.5&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=4033617339993952&ev=Jivo&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391838893&cd[content_name]=Proactive_invitation_shown&sw=1280&sh=1024&v=next&r=canary&ec=1&o=4126&fbp=fb.1.1730391819715.800126398351769817&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0&uvpt=0&ttf=49217.5&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/pattern/11.svg HTTP/1.1Host: code.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/d1dc0ec/chatcontainer.js HTTP/1.1Host: code.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatars/1676623/65a6c11c8ad6f.jpg HTTP/1.1Host: files.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/pattern/11.svg HTTP/1.1Host: code.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatars/1676623/65a6c11c8ad6f.jpg HTTP/1.1Host: files.jivosite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dwzeNfFJka?ce68f8da3b934cc9 HTTP/1.1Host: vi-ya-6.jivosite.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://travelbusinessclass.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: rBFTFCxwlic1SCnJY99Wrw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: travelbusinessclass.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==; _gid=GA1.2.13179984.1730391815; _dc_gtm_UA-191980430-1=1; _gcl_au=1.1.1322061385.1730391816; _ga_DNNJDFDB6T=GS1.1.1730391816.1.0.1730391816.60.0.0; _ga=GA1.1.1452859248.1730391815; _uetsid=7b158e6097a411efa6a42592a528f679; _uetvid=7b15b1e097a411ef929fbd58f1c9ef3b; _clck=75xo8q%7C2%7Cfqh%7C0%7C1765; _fbp=fb.1.1730391819715.800126398351769817; _clsk=18mzc5h%7C1730391819906%7C1%7C1%7Ct.clarity.ms%2Fcollect; _ga_270WFR6PS0=GS1.2.1730391822.1.1.1730391838.44.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=4033617339993952&ev=SubscribedButtonClick&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391862434&cd[buttonFeatures]=%7B%22classList%22%3A%22nav__link%20--active%22%2C%22destination%22%3A%22https%3A%2F%2Ftravelbusinessclass.com%2F%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Home%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22a%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%7D&cd[buttonText]=Home&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide%22%7D&cd[parameters]=%5B%5D&sw=1280&sh=1024&v=next&r=canary&ec=2&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&es=automatic&tm=3&uppt=0&uvpt=0&ttf=72758.29999999999&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=SubscribedButtonClick&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391862434&cd[buttonFeatures]=%7B%22classList%22%3A%22nav__link%20--active%22%2C%22destination%22%3A%22https%3A%2F%2Ftravelbusinessclass.com%2F%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Home%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22a%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%7D&cd[buttonText]=Home&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide%22%7D&cd[parameters]=%5B%5D&sw=1280&sh=1024&v=next&r=canary&ec=2&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&es=automatic&tm=3&uppt=0&uvpt=0&ttf=72758.29999999999&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /widget/status/1676623/dwzeNfFJka?rnd=0.49709860039262166 HTTP/1.1Host: node-ya-10.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://travelbusinessclass.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/ibhi9zl1ul HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031; MUID=2B1A544BC8346F7507AD4162C9BA6E00
Source: global traffic	HTTP traffic detected: GET /api/site/1.0/b8661a8a142e5b88a17b164fcd5e8589/init?referrer=https%3A%2F%2Ftravelbusinessclass.com%2F HTTP/1.1Host: cloud.roistat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/403308866?random=1730391869408&cv=11&fst=1730391869408&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F&ref=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmFq2TF8GYX9Bh94-E5s9uqZ-h4Hc39SsPniIXSF9YRIqBMAYHlUTYzxnPV
Source: global traffic	HTTP traffic detected: GET /td/rul/403308866?random=1730391869449&cv=11&fst=1730391869449&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F&ref=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmFq2TF8GYX9Bh94-E5s9uqZ-h4Hc39SsPniIXSF9YRIqBMAYHlUTYzxnPV
Source: global traffic	HTTP traffic detected: GET /tag/ibhi9zl1ul HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031; MUID=2B1A544BC8346F7507AD4162C9BA6E00
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/403308866/?random=1730391869408&cv=11&fst=1730391869408&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F&ref=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmFq2TF8GYX9Bh94-E5s9uqZ-h4Hc39SsPniIXSF9YRIqBMAYHlUTYzxnPV
Source: global traffic	HTTP traffic detected: GET /tag/uet/211036097 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031; MUID=2B1A544BC8346F7507AD4162C9BA6E00
Source: global traffic	HTTP traffic detected: GET /action/0?ti=211036097&Ver=2&mid=fc6f019b-4ea6-405d-ab46-634192e6bbfc&bo=1&sid=7b158e6097a411efa6a42592a528f679&vid=7b15b1e097a411ef929fbd58f1c9ef3b&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals,%20Airfares%20%26%20Flights%20to%20Worldwide&kw=business%20class,%20business%20class%20deals,%20business%20class%20flights&p=https%3A%2F%2Ftravelbusinessclass.com%2F&r=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&lt=1780&evt=pageLoad&sv=1&cdb=AQAQ&rn=490486 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=1407EA0A8DE06A5B164AFF238C116B9A; MR=0; MSPTC=NXEWDEzcVcrHUyux-uS88txzBSzJ64AUTKcb6176Sh0
Source: global traffic	HTTP traffic detected: GET /tr/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F&rl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&if=false&ts=1730391870547&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391869572&coo=false&uppt=0&uvpt=0&ttf=8094.400000000023&bdt=100.89999999996508&bdsize=250870&btsize=250870&brbs=0&cdt=960.5999999999767&cdsize=78388&ctsize=78388&crbs=0&let=17.20000000001164&estcl=6&iwlpcl=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F&rl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&if=false&ts=1730391870547&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391869572&coo=false&uppt=0&uvpt=0&ttf=8094.400000000023&bdt=100.89999999996508&bdsize=250870&btsize=250870&brbs=0&cdt=960.5999999999767&cdsize=78388&ctsize=78388&crbs=0&let=17.20000000001164&estcl=6&iwlpcl=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1/sites/1676623/widgets/dwzeNfFJka/clients/0/telephony/callback HTTP/1.1Host: telephony.jivosite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://travelbusinessclass.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_210.2.dr, chromecache_226.2.dr, chromecache_245.2.dr, chromecache_183.2.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_240.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_240.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_240.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_210.2.dr, chromecache_226.2.dr	String found in binary or memory: var AC=function(a,b,c,d,e){var f=rA("fsl",c?"nv.mwt":"mwt",0),g;g=c?rA("fsl","nv.ids",[]):rA("fsl","ids",[]);if(!g.length)return!0;var k=wA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!dz(k,fz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: travelbusinessclass.us5.list-manage.com
Source: global traffic	DNS traffic detected: DNS query: travelbusinessclass.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: di7qaez2koc7r.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: code-eu1.jivosite.com
Source: global traffic	DNS traffic detected: DNS query: node-ya-10.jivosite.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: cloud.roistat.com
Source: global traffic	DNS traffic detected: DNS query: code.jivosite.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: telephony.jivosite.com
Source: global traffic	DNS traffic detected: DNS query: vi-ya-6.jivosite.com
Source: global traffic	DNS traffic detected: DNS query: telemetry.jivosite.com
Source: global traffic	DNS traffic detected: DNS query: files.jivosite.com

Source: unknown

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-191980430-1&cid=1452859248.1730391815&jid=652950882&gjid=1557361127&_gid=13179984.1730391815&_u=YGBAiEABBAAAAGAAI~&z=1880446612 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://travelbusinessclass.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://travelbusinessclass.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_136.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_139.2.dr, chromecache_189.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_146.2.dr, chromecache_198.2.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_213.2.dr, chromecache_226.2.dr, chromecache_245.2.dr, chromecache_229.2.dr, chromecache_183.2.dr, chromecache_136.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_153.2.dr, chromecache_240.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_153.2.dr, chromecache_240.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_178.2.dr, chromecache_202.2.dr	String found in binary or memory: https://di7qaez2koc7r.cloudfront.net/build/
Source: chromecache_146.2.dr, chromecache_198.2.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_146.2.dr, chromecache_198.2.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_177.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_183.2.dr	String found in binary or memory: https://google.com
Source: chromecache_183.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_159.2.dr, chromecache_154.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_159.2.dr, chromecache_154.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_159.2.dr, chromecache_154.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_136.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_155.2.dr, chromecache_150.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_213.2.dr, chromecache_226.2.dr, chromecache_245.2.dr, chromecache_229.2.dr, chromecache_183.2.dr, chromecache_136.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_155.2.dr, chromecache_150.2.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_146.2.dr, chromecache_198.2.dr	String found in binary or memory: https://registry.npmjs.org/axios/-/axios-0.21.4.tgz
Source: chromecache_159.2.dr, chromecache_154.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_189.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_139.2.dr, chromecache_189.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_210.2.dr, chromecache_196.2.dr, chromecache_213.2.dr, chromecache_155.2.dr, chromecache_226.2.dr, chromecache_150.2.dr, chromecache_245.2.dr, chromecache_229.2.dr, chromecache_183.2.dr, chromecache_136.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_155.2.dr, chromecache_150.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bjs
Source: chromecache_155.2.dr, chromecache_150.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bts
Source: chromecache_155.2.dr, chromecache_150.2.dr	String found in binary or memory: https://td.doubleclick.net/td/buyer.wasm
Source: chromecache_155.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j6766634276
Source: chromecache_150.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=4s1322061385.1730391816
Source: chromecache_150.2.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=169969962955
Source: chromecache_166.2.dr, chromecache_149.2.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_210.2.dr, chromecache_226.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_139.2.dr, chromecache_189.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_139.2.dr, chromecache_189.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_139.2.dr, chromecache_189.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_136.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_139.2.dr, chromecache_189.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_183.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_136.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_210.2.dr, chromecache_226.2.dr, chromecache_245.2.dr, chromecache_229.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_139.2.dr, chromecache_189.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_210.2.dr, chromecache_226.2.dr, chromecache_245.2.dr, chromecache_229.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_164.2.dr, chromecache_238.2.dr	String found in binary or memory: https://www.jivochat.com/_URL_
Source: chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49719 version: TLS 1.2

Source: classification engine

Classification label: sus20.phis.win@21/188@74/27

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4108 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4108 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe
https://www.clarity.ms/tag/uet/	0%	URL Reputation	safe
https://tagassistant.google.com/	0%	URL Reputation	safe
https://publickeyservice.msmt.gcp.privacysandboxservices.com	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
cl-5bf28185.edgecdn.world	5.101.37.37	true	false	unknown
wm-ya.jivosite.com	185.163.159.177	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
di7qaez2koc7r.cloudfront.net	18.66.92.98	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
telemetry.jivosite.com	57.128.74.65	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	64.233.166.154	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
googleads.g.doubleclick.net	172.217.16.130	true	false	unknown
cloud.roistat.com	81.163.20.5	true	false	unknown
vi-ya-6.jivosite.com	57.128.74.66	true	false	unknown
travelbusinessclass.com	206.189.191.166	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
td.doubleclick.net	142.250.185.226	true	false	unknown
node-ya-10.jivosite.com	57.128.74.66	true	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
files.jivosite.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
code-eu1.jivosite.com	unknown	unknown	false	unknown
code.jivosite.com	unknown	unknown	false	unknown
telephony.jivosite.com	unknown	unknown	false	unknown
travelbusinessclass.us5.list-manage.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.clarity.ms/tag/uet/211036097	false		unknown
https://node-ya-10.jivosite.com/widget/status/1676623/dwzeNfFJka?rnd=0.49709860039262166	false		unknown
https://vi-ya-6.jivosite.com/dwzeNfFJka?ce68f8da3b934cc9	false		unknown
https://travelbusinessclass.com/build/img/static/trustpilot-rating.png	false		unknown
https://node-ya-10.jivosite.com/widget/status/1676623/dwzeNfFJka/ce68f8da3b934cc9?	false		unknown
https://www.clarity.ms/s/0.7.49/clarity.js	false		unknown
https://code.jivosite.com/css/d1dc0ec/chatcontainer.widget.css	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/static/user-3.jpg	false		unknown
https://cloud.roistat.com/api/site/1.0/b8661a8a142e5b88a17b164fcd5e8589/init?referrer=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/fonts/b439f6e4.ttf	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/static/user-5.jpg	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=Jivo&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391838893&cd[content_name]=Proactive_invitation_shown&sw=1280&sh=1024&v=next&r=canary&ec=1&o=4126&fbp=fb.1.1730391819715.800126398351769817&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0&uvpt=0&ttf=49217.5&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=FGET	false		unknown
https://code.jivosite.com/sounds/notification.mp3	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm	false		unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://cloud.roistat.com/api/site/1.0/b8661a8a142e5b88a17b164fcd5e8589/init?referrer=https%3A%2F%2Ftravelbusinessclass.com%2F	false		unknown
https://travelbusinessclass.com/	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/js/trustpilot.1e3f9101852f0e7a5a8c.js	false		unknown
https://travelbusinessclass.com/favicon/tbc/favicon.ico	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=SubscribedButtonClick&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391862434&cd[buttonFeatures]=%7B%22classList%22%3A%22nav__link%20--active%22%2C%22destination%22%3A%22https%3A%2F%2Ftravelbusinessclass.com%2F%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Home%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22a%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%7D&cd[buttonText]=Home&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide%22%7D&cd[parameters]=%5B%5D&sw=1280&sh=1024&v=next&r=canary&ec=2&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&es=automatic&tm=3&uppt=0&uvpt=0&ttf=72758.29999999999&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=FGET	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/js/2.14713378.chunk.js	false		unknown
https://code.jivosite.com/js/d1dc0ec/omnichannelMenu.js	false		unknown
https://code.jivosite.com/css/d1dc0ec/omnichannelMenu.widget.css	false		unknown
https://code.jivosite.com/js/d1dc0ec/chatcontainer.js	false		unknown
https://www.facebook.com/tr/?id=4033617339993952&ev=SubscribedButtonClick&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391862434&cd[buttonFeatures]=%7B%22classList%22%3A%22nav__link%20--active%22%2C%22destination%22%3A%22https%3A%2F%2Ftravelbusinessclass.com%2F%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Home%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22a%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%7D&cd[buttonText]=Home&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide%22%7D&cd[parameters]=%5B%5D&sw=1280&sh=1024&v=next&r=canary&ec=2&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&es=automatic&tm=3&uppt=0&uvpt=0&ttf=72758.29999999999&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=GET	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/fonts/5a4ed10e.ttf	false		unknown
https://code.jivosite.com/css/d1dc0ec/widget.css	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/static/fumeie-home-page.webp	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/js/aos.b6c478a457c55ae32cb7.js	false		unknown
https://www.facebook.com/tr/?id=4033617339993952&ev=Jivo&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391838893&cd[content_name]=Proactive_invitation_shown&sw=1280&sh=1024&v=next&r=canary&ec=1&o=4126&fbp=fb.1.1730391819715.800126398351769817&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0&uvpt=0&ttf=49217.5&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=686.7000000000116&estcl=6&iwlpcl=0&rqm=GET	false		unknown
https://www.clarity.ms/tag/ibhi9zl1ul	false		unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-191980430-1&cid=1452859248.1730391815&jid=652950882&gjid=1557361127&_gid=13179984.1730391815&_u=YGBAiEABBAAAAGAAI~&z=1880446612	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/flags/flags.png	false		unknown
https://telephony.jivosite.com/api/1/sites/1676623/widgets/dwzeNfFJka/clients/0/telephony/callback	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/js/main.d24cded2.chunk.js	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/js/app.d1a1183ef278c4f9a168.js	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/static/user-1.jpg	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/css/2.1cb30e7f.chunk.css	false		unknown
https://code.jivosite.com/sounds/agent_message.mp3	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/js/alpinejs.bdf191b9eca6a35ac57f.js	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391819727&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0.10000000000582077&uvpt=0.3000000000174623&ttf=30053.899999999994&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=627&estcl=6&iwlpcl=0&rqm=FGET	false		unknown
https://www.facebook.com/tr/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F&rl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&if=false&ts=1730391870547&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391869572&coo=false&uppt=0&uvpt=0&ttf=8094.400000000023&bdt=100.89999999996508&bdsize=250870&btsize=250870&brbs=0&cdt=960.5999999999767&cdsize=78388&ctsize=78388&crbs=0&let=17.20000000001164&estcl=6&iwlpcl=0&rqm=GET	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/static/user-2.jpg	false		unknown
https://telemetry.jivosite.com/w	false		unknown
https://travelbusinessclass.com/favicon/tbc/site.webmanifest	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/js/runtime.acf15c91d9fc5d0b2b25.js	false		unknown
https://node-ya-10.jivosite.com/widget/status/1676623/dwzeNfFJka?rnd=0.3967468214786096	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/static/user-4.jpg	false		unknown
https://code-eu1.jivosite.com/script/widget/config/dwzeNfFJka	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/svg/pattern-x.svg	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/static/wlc-img.webp	false		unknown
https://code.jivosite.com/sounds/outgoing_message.mp3	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/js/swiper.da46e2bb5a5b941c6f33.js	false		unknown
https://connect.facebook.net/signals/config/4033617339993952?v=next&r=canary&domain=travelbusinessclass.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C44%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C169%2C142%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C5%2C90%2C81%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		unknown
https://code.jivosite.com/js/bundle_en_US.js?rand=1729685307	false		unknown
https://code-eu1.jivosite.com/widget/dwzeNfFJka	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/js/runtime-main.9d98dd33.js	false		unknown
https://files.jivosite.com/avatars/1676623/65a6c11c8ad6f.jpg	false		unknown
https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445	false		unknown
https://www.facebook.com/tr/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&rl=&if=false&ts=1730391819727&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391815906&coo=false&uppt=0.10000000000582077&uvpt=0.3000000000174623&ttf=30053.899999999994&bdt=2616.5&bdsize=250870&btsize=250870&brbs=0&cdt=3144.5&cdsize=78388&ctsize=78388&crbs=0&let=627&estcl=6&iwlpcl=0&rqm=GET	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.css	false		unknown
https://code.jivosite.com/images/pattern/11.svg	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=4033617339993952&ev=PageView&dl=https%3A%2F%2Ftravelbusinessclass.com%2F&rl=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&if=false&ts=1730391870547&sw=1280&sh=1024&v=next&r=canary&ec=0&o=4126&fbp=fb.1.1730391819715.800126398351769817&cs_est=true&ler=empty&cdl=API_unavailable&it=1730391869572&coo=false&uppt=0&uvpt=0&ttf=8094.400000000023&bdt=100.89999999996508&bdsize=250870&btsize=250870&brbs=0&cdt=960.5999999999767&cdsize=78388&ctsize=78388&crbs=0&let=17.20000000001164&estcl=6&iwlpcl=0&rqm=FGET	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/css/main.afd7172b.chunk.css	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/img/svg/down-arrow-select.svg	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://td.doubleclick.net/td/buyer.wasm	chromecache_155.2.dr, chromecache_150.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_139.2.dr, chromecache_189.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_136.2.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	false		unknown
https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=169969962955	chromecache_150.2.dr	false		unknown
https://td.doubleclick.net/td/update?ig_name=4s1322061385.1730391816	chromecache_150.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_189.2.dr	false	URL Reputation: safe	unknown
https://axios-http.com	chromecache_146.2.dr, chromecache_198.2.dr	false		unknown
https://github.com/microsoft/clarity	chromecache_177.2.dr, chromecache_141.2.dr	false		unknown
https://di7qaez2koc7r.cloudfront.net/build/	chromecache_178.2.dr, chromecache_202.2.dr	false		unknown
https://registry.npmjs.org/axios/-/axios-0.21.4.tgz	chromecache_146.2.dr, chromecache_198.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_210.2.dr, chromecache_196.2.dr, chromecache_213.2.dr, chromecache_226.2.dr, chromecache_245.2.dr, chromecache_229.2.dr, chromecache_183.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://github.com/axios/axios/issues	chromecache_146.2.dr, chromecache_198.2.dr	false		unknown
https://connect.facebook.net/	chromecache_153.2.dr, chromecache_240.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_159.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_139.2.dr, chromecache_189.2.dr	false		unknown
https://td.doubleclick.net/td/update?ig_name=1j6766634276	chromecache_155.2.dr	false		unknown
https://sizzlejs.com/	chromecache_159.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://js.foundation/	chromecache_159.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://www.clarity.ms/tag/uet/	chromecache_166.2.dr, chromecache_149.2.dr	false	URL Reputation: safe	unknown
https://td.doubleclick.net/td/bts	chromecache_155.2.dr, chromecache_150.2.dr	false		unknown
https://td.doubleclick.net/td/bjs	chromecache_155.2.dr, chromecache_150.2.dr	false		unknown
https://github.com/axios/axios.git	chromecache_146.2.dr, chromecache_198.2.dr	false		unknown
https://www.jivochat.com/_URL_	chromecache_164.2.dr, chromecache_238.2.dr	false		unknown
https://googleads.g.doubleclick.net	chromecache_183.2.dr	false		unknown
https://tagassistant.google.com/	chromecache_139.2.dr, chromecache_189.2.dr	false	URL Reputation: safe	unknown
https://publickeyservice.msmt.gcp.privacysandboxservices.com	chromecache_155.2.dr, chromecache_150.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_159.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/ads/ga-audiences	chromecache_139.2.dr, chromecache_189.2.dr	false		unknown
https://td.doubleclick.net	chromecache_210.2.dr, chromecache_196.2.dr, chromecache_213.2.dr, chromecache_155.2.dr, chromecache_226.2.dr, chromecache_150.2.dr, chromecache_245.2.dr, chromecache_229.2.dr, chromecache_183.2.dr, chromecache_136.2.dr	false		unknown
https://connect.facebook.net/log/fbevents_telemetry/	chromecache_153.2.dr, chromecache_240.2.dr	false		unknown
https://www.merchant-center-analytics.goog	chromecache_196.2.dr, chromecache_213.2.dr, chromecache_229.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://google.com	chromecache_183.2.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_136.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
57.128.74.66	vi-ya-6.jivosite.com	Belgium	2686	ATGS-MMD-ASUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
57.128.74.65	telemetry.jivosite.com	Belgium	2686	ATGS-MMD-ASUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.185.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.206.155	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
18.239.63.153	unknown	United States	16509	AMAZON-02US	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
185.163.159.177	wm-ya.jivosite.com	Russian Federation	207104	BIZONE-ASRU	false
18.66.92.98	di7qaez2koc7r.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
81.163.20.5	cloud.roistat.com	Russian Federation	58303	IR-RASANAPISHTAZIR	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
5.101.37.37	cl-5bf28185.edgecdn.world	Russian Federation	49614	VIARTCOMRU	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
77.223.118.104	unknown	Russian Federation	51604	EKAT-ASRU	false
64.233.166.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.16.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
206.189.191.166	travelbusinessclass.com	United States	14061	DIGITALOCEAN-ASNUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546267
Start date and time:	2024-10-31 17:22:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.phis.win@21/188@74/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, audiodg.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.186.78, 142.250.110.84, 34.104.35.123, 104.102.57.226, 142.250.186.74, 142.250.184.202, 216.58.206.74, 172.217.23.106, 172.217.18.106, 172.217.16.138, 142.250.186.138, 142.250.185.202, 142.250.185.106, 142.250.185.74, 142.250.181.234, 142.250.185.138, 142.250.186.42, 142.250.185.170, 142.250.185.234, 142.250.186.170, 172.202.163.200, 93.184.221.240, 192.229.221.95, 20.3.187.198, 142.250.185.104, 142.250.186.46, 142.250.186.104, 13.74.129.1, 13.85.23.206, 142.250.186.168, 142.250.184.226, 20.114.189.70, 204.79.197.237, 13.107.21.237, 142.250.185.194, 142.250.186.35
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, www.googleadservices.com, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, e13829.x.akamaiedge.net, otelrules.afd.azureedge.net, clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, bat.bing.com, update.googleapis.com, swc.list-manage.com.edgekey.net, azurefd-t-prod.trafficmanager.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, c-bing-com.dual-a-0034.a-msedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	294
Entropy (8bit):	5.056487937916614
Encrypted:	false
SSDEEP:	6:tI9mc4slicA4UY7/AD0kg2RMtZTWLUvnlA7nOfSTYFPILdTIV7a5E:t4Ix4ncD0MRM7TMUvleCVUTv5E
MD5:	B13A9F4E720D006EF459AE5513B5849C
SHA1:	7AD7F104271383B38B6CB1A1332094922E2B95B8
SHA-256:	646D24F935808969E416465C2E669E0D9B8BDA7F60E11F6AA6A141578F290C77
SHA-512:	D1ADA6D4755BE36F61499A7A849DE12244A5BD89C9D710D84F809C6F3946AD1B11E3FB4B3646BC3A97D9D024EE31A639FE30551C7F5B521ED2E7336EBB13CE87
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/svg/down-arrow-select.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 16 16"><defs/><path fill="#4A94EC" fill-rule="evenodd" d="M2.195 4.862c.26-.26.683-.26.943 0L8 9.724l4.862-4.862a.667.667 0 11.943.943L8.47 11.138a.667.667 0 01-.942 0L2.195 5.805a.667.667 0 010-.943z" clip-rule="evenodd"/></svg>

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.4669548204849727
Encrypted:	false
SSDEEP:	96:jBdUKBMj1bxUvSsUV20fvPsUYqaqHdcom:jBdUKyj1b8Ie
MD5:	AABF240DDE596A2F1FFDA918CD95601F
SHA1:	C97A1C90BF638E26CCDE60611748E6DD882FE672
SHA-256:	A4C8451C71E4DC339504825607846BF73554B604E734587B2C46A2FE70C144F5
SHA-512:	8A750796A22A6939634E61435DADF04ED3B56B4FABB1DD51BA1523B0E3EF7D33FC082331ED64D94017EC7A2D7130EBCCCFC99BC3490281489D7CFA4B317E5820
Malicious:	false
Reputation:	low
URL:	https://travelbusinessclass.com/favicon/tbc/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................O...O...O...O...O..3O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..3O...O...O...O...O...O...O...O..xO...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..xO...O...O...O...O...O...P...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..xP...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..xO...O..3O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	dropped
Size (bytes):	587422
Entropy (8bit):	5.2864772744439525
Encrypted:	false
SSDEEP:	6144:81PsVy45X69Jk4p2C1b81GEqP0qYkf2yw9ZIMo6HOa:81PeX6Bp2C1b81GXnHWEuOa
MD5:	344E11BCC79B8B338AE744B7647503E1
SHA1:	F11806936032535A6E8071160FFBAC37D1BEF931
SHA-256:	A441A416D61D51B2B57F7D29592F5E3411A97926E7BB0280D28349C458726273
SHA-512:	77516A15CBA4460EA3D6B29203712078833CC9988CD229899BAB5C0CC38D3EFD66F53935EC6305EFDA14F39AFE5269B1F0C51C0BA6D3AC62F951848667CF16FF
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 2.14713378.chunk.js.LICENSE.txt /.(this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(172)},function(e,t,n){"use strict";e.exports=n(167)},function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){return Pe})),n.d(t,"b",(function(){return me}));var r=n(70),o=n(1),a=n.n(o),i=n(162),u=n.n(i),c=n(163),l=n(164),s=n(112),f=n(109),p=n.n(f);function d(){return(d=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}var h=function(e,t){for(var n=[e[0]],r=0,o=t.length;r<o;r+=1)n.push(t[r],e[r+1]);return n},y=function(e){return null!==e&&"object"==typeof e&&"[object Object]"===(e.toString?e.toString():Object.prototype.toString.call(e))&&!Object(r.typeOf)(e)},v=Object.freeze([]),m=Object.freeze({});function b(e){return"function"==typeof e}function g(e){return e.displa

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	341311
Entropy (8bit):	5.61407246634235
Encrypted:	false
SSDEEP:	6144:x4CyGbgBuzowk2639cM8Gp/12N5tu9BW24nOC:KCDcuzowr5AEZ
MD5:	559E83872C621A23F46229058AA4ADAC
SHA1:	A4CD8D7FCA91ADD37EEF9D40DD5356EE90966A55
SHA-256:	5FA808A33B5D18DB0A78C195CD83C8D56A4C7AF9F95532E05237D1BBF9A66E5B
SHA-512:	131F08B8897545B0226F56CB5EDA377D27D3CCF51E3B91586FF9749097065C3FBEEB5D2D1236EBE509178640AD456BD542C94B437392B0296D9DD9182D53C361
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":17,"vtp_value":true,"tag_id":9},{"function":"__ogt_session_timeout","priority":17,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":11},{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELE

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17656), with no line terminators
Category:	dropped
Size (bytes):	17656
Entropy (8bit):	5.35045621321622
Encrypted:	false
SSDEEP:	384:boUJJ1QY4mmPY00rANLH8yMiqwIlEeJMz8P0vIbqWcPWv6:f3yCAK/9DPXWWcPA6
MD5:	6BF2A33AD62E89B093F287DF85CE2F1F
SHA1:	474EBA8BC08D7F4098573F5822934CED7E56EA13
SHA-256:	817E2572314FDAE52D4603F9C6D034E2DA93A2FD0A0FFC322F59659EF1087723
SHA-512:	4040B67813EC775351D6C9ADA4CB802C501AFB8AFD8A19DFC821869A4F79E7F80F78217612C336BB583CCEEE8F43321E664A237DEE75876DC677991D3E567978
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(){return document.currentScript?document.currentScript:document.querySelector("script[jv-id]")\|\|document.querySelector("script[data-jv-id]")}function t(e){return e&&e.match(/https?:\/\/(\S+(\.com\|\.ru\|\.tech))\/(widget\.js\|widget\/[A-Za-z0-9]+)/)}function n(e){return e&&e.match(/^https?:\/\/(\S+)\/script\/widget\/([A-Za-z0-9]+)/)}function o(e){return e&&e.match(/https?:\/\/(\S+)\/script\/geo-widget\/([A-Za-z0-9]+)/)}function r(){var e=window.location&&window.location.protocol;return-1===["http","https"].indexOf(e\|\|"")&&(e="https:"),e}function i(){return window.jivo_config&&window.jivo_config.shard_id\|\|"main"}function a(){return window.jivo_config&&window.jivo_config.telemetry_host\|\|null}function d(e,t,n){var o;e.addEventListener?e.addEventListener(t,n,!1):e.attachEvent&&(e.attachEvent("on"+t,(o=e,function(){n.call(o,window.event)})),e=null)}function s(e){try{d(window,"scroll",e),d(document.body,"mousemove",e)}catch(t){e&&e()}}function l(e,t,n){if(win

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13755), with no line terminators
Category:	downloaded
Size (bytes):	13755
Entropy (8bit):	5.332447131157693
Encrypted:	false
SSDEEP:	192:36ox+Y1eCGpVy6kGmLTpOI5tloml4pOIstlomlRkq/+VFcgLVQCLG9W/gGfNaUiN:4geFVHwLj7ribLVQCLG9CfNa7/ZX
MD5:	A88982B89A32D07FAB3343DC489B514D
SHA1:	8458D6F8F6CFB93E8A46FD459C343B34446B56DF
SHA-256:	6450EE018B035CD85CB725A9810AB4A9144FC2E6D7FC42EA1218085E690DF81C
SHA-512:	FDB0A39621F652842EBCFF10D7318EAEF3CCAE3ACB859B5401FA59BE34260611E3EACED40303286966D88F36B89DA6B427B87E2314C840F474A60D5356F973B9
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/js/aos.b6c478a457c55ae32cb7.js
Preview:	(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["aos"],{2711:function(e,t,n){e.exports=function(){"use strict";var e="undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:{},t="Expected a function",o=NaN,i="[object Symbol]",a=/^\s+\|\s+$/g,r=/^[-+]0x[0-9a-f]+$/i,s=/^0b[01]+$/i,c=/^0o[0-7]+$/i,u=parseInt,d="object"==typeof e&&e&&e.Object===Object&&e,l="object"==typeof self&&self&&self.Object===Object&&self,f=d\|\|l\|\|Function("return this")(),m=Object.prototype.toString,p=Math.max,b=Math.min,v=function(){return f.Date.now()};function g(e,n,o){var i,a,r,s,c,u,d=0,l=!1,f=!1,m=!0;if("function"!=typeof e)throw new TypeError(t);function g(t){var n=i,o=a;return i=a=void 0,d=t,s=e.apply(o,n)}function y(e){var t=e-u;return void 0===u\|\|t>=n\|\|t<0\|\|f&&e-d>=r}function k(){var e=v();if(y(e))return x(e);c=setTimeout(k,function(e){var t=n-(e-u);return f?b(t,r-(e-d)):t}(e))}function x(e){return c=void 0,m&&i?g(e):(i=a=void 0,s)}function O(){var e=v(),t=y(e);if(i=arguments,

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 579x635, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	40630
Entropy (8bit):	7.994219547480843
Encrypted:	true
SSDEEP:	768:pCCJ9Nk5jsobBPEjKESk5HXFKsDjFQnQHr0NYLEYvIsbZHlLley:YCJY/Palh7D6QHr0NKFDey
MD5:	99FAD2EDE3702BFF02BA09FC807BA9E4
SHA1:	6822B2AA5C3385EE1C297DCEEE9DD94B5EEE343B
SHA-256:	7409DB6FBC409EBE597FD3130F3F36A7C0481CC0A56D9C7B8C266CE5D16AC926
SHA-512:	E3FAECD2C3F41C1C8C84589260C96D643014CAD56C30EAD29BE96C1903A9735F10AEB530FB979E28BB82BB4024EA7779CF4EA666CC2300329158AA21417B2428
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........C.{.>)..C!.!.Y.......DP.i.At:>..TD.._..._...x..N...G.q....2....C&...^v\|...?../............~[.......w......}}..J......._...?..o>..{...U..w.../t...............[..d................_.....g._....._........_....../......?.7...g..v{[.o......S.....?.}.........+...........K._..........;..._....R..~_./Y..........o....../...../.....?u.)~....W....$...........Y@.y..?l(K+...5=m....hLQ..h..qv.b7Gu..._%F....+.........<R.c...Up..d.$Z....TG.(3..j.y^..t=3k.....%\|...v".PM:..<@A..y5.....i.21nhz.q......y...>....<Q........"f>.......k6.M.nkZ>4j!..;..=_...}U~..1....j...7.B..#j......D...5...F8.9. o..tK........`%.P..... .uNq-E..$d...J.PLP.oA.YboH.`>G...3/..?.nI..Y...Z...........o.+..E.Y.E.~. \..X.e._k+..Hx.&....w.X[O.~..}."_..........{:3....K...d.....:...~.......!..:s'z...\K.!%.#.Gb.....E...(K...6M.n).W.R.28.+<...zp:....R..Y{.7CH..!x....c+..3.PZu.W`z.....dE....}...J.t.......IG_....q^,..\|#....5..[i..(1.........?$@8.?......d.o...b....J.lR.o@..>

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.49/clarity.js
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	downloaded
Size (bytes):	2973
Entropy (8bit):	7.765239177536521
Encrypted:	false
SSDEEP:	48:H9YuFc2igyNkl6rPp82tpYIurjLpqHqMg74arwzDutabYvOSWIQjpqdpmSC:H9tFphUPp4IuXLUHHytrwzDvW3WI6mw
MD5:	255505085B141397E47007A7C45CDD92
SHA1:	93B25FD552A7093F8125CE413E8A2D4317862BE7
SHA-256:	06E83E2F5D691EAED3C3E93955DD8A451B726CB405B9BB5CCA95F0D3C9E89C10
SHA-512:	5C9DD36696CE8A601E1ED9D59CB9D6579E127D19876E3DB285179526831530491B4FD2E7DA2D55DBF75541ED708A529538B84EA05AB8D51AB1C265A9DA698BA4
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/static/user-2.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................C.C....................................................................................?.r...n...;v... m.P.(`.bj.....F....sp.S....a.......g....W.peC"._n\|.w..=..%...X.....S.F2.......u..cN..;...`.2....9.q%qA..9}...N;......I.i.\|....;9....4pp.....:l...J.n...l.....i..s.,/...........$..5..I6q.l..z.rq..;...K...'................................$.!"2...........(...2.....w....q..WQY.....B-V.IE..........>`]....{i...y.o7../.\|mO.}/.....;..........s.Z...t..L....#.L?L).\.$...G\..W..6...Wt..YF.R$...z..j.-).).z...&....\.rs.S.`...i}.o.Ly..T..k...#...F.k.N.x.j. ..ZdQ..N.L.9...(...Jo.I4..... ...p..c...J)...i.>.9...I..d..t.ks.X&..)..\|...T....vk...M.......c..J.Xg.z..e.v..:.CF...........,R...4.Q.Kn.Uhp1.6...);./..z:\...K..<.!\R..L...?.y..W.A7..0+..7..q.u.S+^d..v.C..T*L9Q.X...\|.S.....X.a.~c"...t.E..f...b.J.\|

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	261499
Entropy (8bit):	5.21727010810994
Encrypted:	false
SSDEEP:	6144:TjAWrf61WLTqCk6QisvVAXqY9IwYTsRXzwV3fFNmfPhO/SQ:TTQ0M3
MD5:	493F0747EDE916A510F8B220C53EE44A
SHA1:	D7F513E475661B222CCCE506255210C0DE8778D6
SHA-256:	809D52E8D0D72F78FBA6F3D1E8BA6D80FA4A039D3E796CCE26B7C7BEE7212F57
SHA-512:	E51A3B5A81027E5022E1AFEA7285192ADEB1AC1323E58B10B1905B6DACF0DECEA40B5FD35D0D8A788FE1C10E46D842B1DEBA5A18DBC82F22AED71B4CF579AC12
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.css
Preview:	@font-face{font-family:swiper-icons;font-style:normal;font-weight:400;src:url("data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7020), with no line terminators
Category:	dropped
Size (bytes):	7020
Entropy (8bit):	5.995095420888293
Encrypted:	false
SSDEEP:	192:1DY0hf1bT47OIqWb1zxQJs3u/djQJs3u/dS:as1T47OIV5xQJDVQJDI
MD5:	F34D0AA274A0685CECEAB5C229D61E0C
SHA1:	510D7A53DA592F3EDD832E352C8C01B2807525C6
SHA-256:	01B5F7FA20C3C6B2B2745844C57D4C2C1BCD9FDA51A3360468E468679E5AF9E7
SHA-512:	9B74AF28B596C749CAD11E7C6F42501BF29AD12521FE92CDDD0FF9C1257C678227BF43D025E061C62CFA84802B4337E5F264C1A9D9E3A4CBEFEED3713483A8D2
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.937193208607594
Encrypted:	false
SSDEEP:	3:qdoKL6jWexe:qJLexe
MD5:	0173C45C082E5BCC0BE7EEE8875EF775
SHA1:	6D70EE63F94E227EA7035FAF3744E2D187BAA719
SHA-256:	028D9CEFDE2D3C0B56494B395B785EB54C22BEA89F6E1412C9E2086273B33E7D
SHA-512:	095B8267AF8F640FD4BA4992A18960BC1C73FE09D3206B98733B0070D99F7E3FA46FE83637EC1773C4D526098B31ECEFD7890F1CA9D6DC5BE98181A1D9C8317C
Malicious:	false
Reputation:	low
URL:	https://cloud.roistat.com/api/site/1.0/b8661a8a142e5b88a17b164fcd5e8589/init?referrer=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445
Preview:	var p = "Project not found";

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23179), with no line terminators
Category:	downloaded
Size (bytes):	23183
Entropy (8bit):	5.355976265480394
Encrypted:	false
SSDEEP:	384:znugtq1SIh9esuy3Gi1T0iHLefTFJb3LRiY3NCPP0QYILeZf0rr8C4FYEs:LTQJh9e63GLFJPu0F8eZf0rR4FYEs
MD5:	40E2FC3183FDFFBB3AB7212CD4964E66
SHA1:	395A9FF8707D86A6EC07645CCF091A3BE35849CB
SHA-256:	BF3BA0EDAB257C56DB42E010D066DF2CA38EB8327CEE5F0DE28C193E604E0B22
SHA-512:	BEEF070AD6D06EA087508E426565D75BF3F7B055DCD124A44FE94AC42C7D45CC3FC39F5BD9E3FDB009AA2276E1531D76DFF764E976F5A1409D5D4BAA8EF8DDB2
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/js/trustpilot.1e3f9101852f0e7a5a8c.js
Preview:	(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["trustpilot"],{9669:(e,t,r)=>{e.exports=r(1609)},5448:(e,t,r)=>{"use strict";var n=r(4867),o=r(6026),s=r(4372),a=r(5327),i=r(4097),c=r(4109),u=r(7985),l=r(5061);e.exports=function(e){return new Promise((function(t,r){var f=e.data,d=e.headers,p=e.responseType;n.isFormData(f)&&delete d["Content-Type"];var h=new XMLHttpRequest;if(e.auth){var m=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";d.Authorization="Basic "+btoa(m+":"+w)}var v=i(e.baseURL,e.url);function g(){if(h){var n="getAllResponseHeaders"in h?c(h.getAllResponseHeaders()):null,s={data:p&&"text"!==p&&"json"!==p?h.response:h.responseText,status:h.status,statusText:h.statusText,headers:n,config:e,request:h};o(t,r,s),h=null}}if(h.open(e.method.toUpperCase(),a(v,e.params,e.paramsSerializer),!0),h.timeout=e.timeout,"onloadend"in h?h.onloadend=g:h.onreadystatechange=function(){h&&4===h.readyState&&(0!==h.status\|\|h.responseURL&&0===h.response

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-270WFR6PS0&gacid=1452859248.1730391815&gtm=45je4as0v892578316za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1763909225
Preview:	<html></html>

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21222
Entropy (8bit):	4.826416296626443
Encrypted:	false
SSDEEP:	384:W8ZxJiAol+6PY0JsV2hpwm00Yu85H7X11f6zBJTk+TpY8eyZUZ7380vNYlB1QCgP:W85wlBPY0JsV2hpwd0Y95H7X1kzBJQeM
MD5:	EDCBBA4D13748BC81A5CF17CBBFCBFA2
SHA1:	F4D02D7A06DB9815BF7ADBE42F7723E915BB39C6
SHA-256:	ECB7F98353DFD84DF94089900FC7AC1AE39B983A090B65BB019B21CF03C99AB9
SHA-512:	21EDC962BC5BC7E57CF23F8D8A923E5355B1FD34D72F952F83046BAB1FC08339E75D8786E7FEAA5B10215661C41C7CDE5D3DF220F54727E798F489A9884681F1
Malicious:	false
Reputation:	low
URL:	https://code-eu1.jivosite.com/script/widget/config/dwzeNfFJka
Preview:	{"widget_id":"dwzeNfFJka","site_id":1676623,"widget_color":"#093637","widget_font_color":"light","widget_orientation":"bottom","widget_mobile_orientation":"right","font_size":"15","font_family":"Helvetica","font_type":"normal","locale":"en_US","show_rate_form":1,"hide_ad":1,"contacts_ask":0,"hide_offline":0,"shard_id":"ya","build_number":"1729685307","avatar_url":"\/\/files.jivosite.com","api_host":"api.jivosite.com","tel_host":"telephony.jivosite.com","telemetry_host":"telemetry.jivosite.com","err_host":"err.jivosite.com","widget_color2":"#44a08d","power_gradient":1,"pattern":11,"label_bubble":0,"online_widget_label":"Need help with your flight?","widget_padding":100,"offline_widget_label":"Send us a message","offline_form_text":"Hi. \nHave any questions? Ask away!","bubble_color":"grey","callback_btn_color":"#4caf50","power_button_color":"#4caf50","enable_sounds":1,"enable_extended_file_transfer":0,"enable_rate_reset":0,"rate_settings":{"type":"two","icon":"smile","condition_name":"m

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	4094
Entropy (8bit):	4.690110599967699
Encrypted:	false
SSDEEP:	96:12oZc5WT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoK:12oZc5WNXK3XuXW5O
MD5:	9C77D369CA11F2D2AFBDBA8FB65E9D2F
SHA1:	81DE4F448F053A469407042B130C9487672BA9E5
SHA-256:	EA62B7896A8ADAC3EC03A0E533349165259D920FC7509E44AC5480E729681C17
SHA-512:	099224F1CFCCF591164740FE16A598C5BEA14B77786F8387A24C28F683068E031BA5B32F5D7634EBD9A2B2FAB262C2B6A3A3B5C732858F58E66FBB89F5A27514
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/211036097.js
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) retu

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2913), with no line terminators
Category:	downloaded
Size (bytes):	2913
Entropy (8bit):	5.7810772351011535
Encrypted:	false
SSDEEP:	48:YyLVkcCEzyg5Nn50nkT2wdXQXv1wdXQz5W/wdXQSv2Dor9TiTYnbuO:YyRkcCyygD5mvwZg9wZ+ewZZcoBnb3
MD5:	3453B9117ABB6B49E15932D8679A0891
SHA1:	F794A0ED1B0436CAF08C7F134EDCF24FBCF721D7
SHA-256:	4C4165D0A7AF8CB86AE6EAC8FA37F4CFC383FA244E887A1498088E79E8539211
SHA-512:	B7559E26A6ED44937A39E0ED86B4AED5157CAEC9A6F838FFF0B2CA425B2507F4788E043F708252E3935E5AA8759C1DB97B3F38A012085C08F7EC8E7837759BD9
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/403308866?random=1730391816204&cv=11&fst=1730391816204&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1322061385.1730391816","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1322061385.1730391816\u0026ig_key=1sNHMxMzIyMDYxMzg1LjE3MzAzOTE4MTY!2saBD9Cg!3sAAptDV6SmwGS","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sh4F33w!2saBD9Cg!3sAAptDV6SmwGS"],"userBiddingSignals":[["6766634276","6714610384","7862630912"],null,1730391818287013],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=1699699

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.056487937916614
Encrypted:	false
SSDEEP:	6:tI9mc4slicA4UY7/AD0kg2RMtZTWLUvnlA7nOfSTYFPILdTIV7a5E:t4Ix4ncD0MRM7TMUvleCVUTv5E
MD5:	B13A9F4E720D006EF459AE5513B5849C
SHA1:	7AD7F104271383B38B6CB1A1332094922E2B95B8
SHA-256:	646D24F935808969E416465C2E669E0D9B8BDA7F60E11F6AA6A141578F290C77
SHA-512:	D1ADA6D4755BE36F61499A7A849DE12244A5BD89C9D710D84F809C6F3946AD1B11E3FB4B3646BC3A97D9D024EE31A639FE30551C7F5B521ED2E7336EBB13CE87
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 16 16"><defs/><path fill="#4A94EC" fill-rule="evenodd" d="M2.195 4.862c.26-.26.683-.26.943 0L8 9.724l4.862-4.862a.667.667 0 11.943.943L8.47 11.138a.667.667 0 01-.942 0L2.195 5.805a.667.667 0 010-.943z" clip-rule="evenodd"/></svg>

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70857
Entropy (8bit):	7.993208981606479
Encrypted:	true
SSDEEP:	1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr
MD5:	416250F60D785A2E02F17E054D2E4E44
SHA1:	21572C9751E5A3DC20395BEFA0FCB349C32C4811
SHA-256:	0A012CF808A24573168308916092D2D4BD3F2B4AF8E16B59167013CC77ACEE55
SHA-512:	CF1E7ACF47464F00D206E9149475E22B8EA5A31727FA16344CD151384D850B83ECE5E9ABE4AC62861DBA0DC3D3410955611D94665B60E2FAA0C3D7A3D7C88404
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/flags/flags.png
Preview:	.PNG........IHDR.....................IDATx..u.]....{.s..{F..!N..K...B...EZ...B...w..!..Ml2...G...3.IF....o.Cg2..}...Yk=[.x.].p.X........... ........;..-.lN..R.H..I..!.@).u.:..>...M...Rx.{8...0.4t.r...2]Q..\6]5.=.@Y.]..............f].g.Wz..Z..E.>-..8.... !.B$.VIA..+....a)..-v........I..xSk..C..z..g.s'.f.I..t.N..R.u... -K.n.E.ve.;m..7....i.#.....&.._A......f_.]....."n..!..zbn.N>..S..o^...p...'..<...+.....(...b@#.h`...}.1}\.s.}....=.O...K....7..9...m.....d.. $.....).....%I.9....B.........._K....P`.7..~=...l.....y..2.(.J..8.+YW.....}.T..wJ.t~9...w...........N...>...dTA.....DL.g=p..}6..6oZ.....w..-8k...8.+....a[p..3y.. ;x.57;.^tT.. .(........v.....u.1#.<..x..`.....&....&{...o.....J[...kJ.i.B...U.H.:.^x....!.~c.J..6.n..~M.\|...........l.l..@H..J.r....).....&..(.....>^n?...(......U..F...'Vn?.;.[....[........../.^~...T.9zx.w\|R...>*.......B.]w..5bk:B%...RC....W..h.!J.%`U..0.....3a2.nvg.].....+....>..b..x.`T..{\i..n..._](L.Y.]....p.cG

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	250870
Entropy (8bit):	5.448807046072085
Encrypted:	false
SSDEEP:	3072:YfLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713FdN:YfLeYc+PJxH8NNfFcrHurPK713FL
MD5:	DBF2D3481180351F91E5724FB782D2B2
SHA1:	D75CB42EE14ECD0EEB126832CAC9E90F2E684580
SHA-256:	88A9A58E2C2FDAC499FE36A47B4E1FFF15CA1D6270F222833E55780BF9519AFF
SHA-512:	A736A3675C5520C78A61A95624E1F98A8D32AB89B2964D8B5E7DA55A8D06AF4C1FBB7B9D7EDA6047CFFA44377AAB036262A1CBC04FEAF09D1CDFD180675A9438
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	559903
Entropy (8bit):	5.526280148710851
Encrypted:	false
SSDEEP:	6144:rE4xxmy7KJpN779sK52+ZmTdTLY3BbC6bJax8Xn5Qq06k4t3Fj:rLVKg+ZVU6Ix8Xniqz17
MD5:	D7F4617AA9E03414B09298EA561FFACE
SHA1:	066AD37C6555D5BA053AB248F285EDF080EF4A93
SHA-256:	9D230A1F44DDB57FF7A42996768499534EBE66598036A070600BE6B48E27D9EF
SHA-512:	08CB71DADB8C5A7827461099DE8084C8EF95DFD4A835AAC37B0C7C032574745EE134A47DAC83D51D7D63B14AEB571F912823EE3AC1EBE13E470667BE1D2DC5B0
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/js/app.d1a1183ef278c4f9a168.js
Preview:	(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["app","review"],{9669:(e,t,n)=>{e.exports=n(1609)},5448:(e,t,n)=>{"use strict";var r=n(4867),d=n(6026),o=n(4372),s=n(5327),i=n(4097),a=n(4109),l=n(7985),u=n(5061);e.exports=function(e){return new Promise((function(t,n){var c=e.data,f=e.headers,p=e.responseType;r.isFormData(c)&&delete f["Content-Type"];var h=new XMLHttpRequest;if(e.auth){var $=e.auth.username\|\|"",m=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";f.Authorization="Basic "+btoa($+":"+m)}var v=i(e.baseURL,e.url);function g(){if(h){var r="getAllResponseHeaders"in h?a(h.getAllResponseHeaders()):null,o={data:p&&"text"!==p&&"json"!==p?h.response:h.responseText,status:h.status,statusText:h.statusText,headers:r,config:e,request:h};d(t,n,o),h=null}}if(h.open(e.method.toUpperCase(),s(v,e.params,e.paramsSerializer),!0),h.timeout=e.timeout,"onloadend"in h?h.onloadend=g:h.onreadystatechange=function(){h&&4===h.readyState&&(0!==h.status\|\|h.responseURL&&0===h.respon

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008), with no line terminators
Category:	downloaded
Size (bytes):	2008
Entropy (8bit):	5.7462309691699485
Encrypted:	false
SSDEEP:	48:YyLVkckEzoUggu4wawdXQkDor9TiTYnbuO:YyRkckyoUgyjwZpoBnb3
MD5:	2CA80AC9C7109A79C505F5A9D6696D88
SHA1:	249A76359036BDD3F6F43886D2D62D119A7F62E0
SHA-256:	E51DE55CFF0C40BF3C6BCB86F172C87B2B9717F6E2A3363289D6AB1FA302AE26
SHA-512:	7527BA54D7A13C6DCC2915F47E54E526B5AA95269065E710B0C7A13A3CA3C4630B440459F504A9E37456E32D5B00626D8162AF58AF89FA93CCB6955B1E283608
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/403308866?random=1730391816185&cv=11&fst=1730391816185&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j6766634276","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j6766634276\u0026ig_key=1sMWo2NzY2NjM0Mjc2!2sZ0s8Cg!3sAAptDV681AU9","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1spRk1nQ!2sZ0s8Cg!3sAAptDV681AU9"],"userBiddingSignals":[["6714610384"],null,1730391818285833],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=169969962955\u0026cr_id=718218997628\u0026cv_id=0\u0026format=${AD_WIDT

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999673469757018
Encrypted:	true
SSDEEP:	24576:AcAACLx04XtA69oK9OUumjbQAexEDaP8ETcIVUxT:vABLx0CtdoK9OUTQ1sa07ICJ
MD5:	73640BFED68A94B60F192868B7F6D7F8
SHA1:	7D267479D348438E59345E8F893E3276AF8E07F8
SHA-256:	FA22A462DF8AAD86BA9EA5C4996980BF8210B20306DAFBAC372B47C2EBC55F35
SHA-512:	F199211FAC3325EEAF4C0036B5E8708BB6FA47DB8C87D28B350BF37B6CAB0F1AA02D43BFC4317436AB5CD2A4611C6B640D62E0369F452A140677F3FBD25FA662
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:2
Preview:	.Ra...i.Yvw...V.?..{.K0y....@.....(._...a.9.....w.}....?].......p.\.]Ir.-r...6&.H.Wr[.M)N{.`h.....f.J.s....6.Ow@../.D..f?...m......'#'....L. ..C..Om...37........................7v...}9.R<.SQ....eA.H....z.!.h}.......4..Y...aS..h..Y%...). .yE%5..f.L-......&.G........#..g.7q.1w...^..<.l.....E....n.N.U...!?({.s!.....1.......K..D. .F..d..q.Q....s..)...v1h.(..(..+....$.T9Qr..L.S.W...4..r..5......j..........S.3&F{l!.........H.".3.r K......f..K.h....5s......>...9..........1...-q^.(cR.koB.W..;6.3....._..../}.P}...e&...QS.DK5P#.........Nq...IKl....#`.n.T<f.>\U.A.4.x.V$.3.....;...<!M........f..CB..h/.8..."N..6.....e+..../..A?..X.s......?....4.y......Vf.C.. .n..'.!.U...L.ciQ".a(.B...=.>>.....'q.....;P..D!..d)..6...bk.+I.(s...9.I...=...@.r."s.iI..o......3...........f(..G.....^.hw0Q.pX.L...k5.)N.Y.F'.."e....mz..@...v.,..gn3.-.......l...ba...BI.a..f...0!C..z....zRg..'..a1ou..h......JIM..7...?.-..}I...w&..%_>..+.......$p..l...{..S....B.)d...a.4v..6..e.L..?X.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999472548921303
Encrypted:	true
SSDEEP:	24576:PLGJRZ9EOcF8sDi7zUUqqPpdWhYWql1g37oU:iZ65q8AWhYWQo/
MD5:	14D31EB15BED2C0D692E7F2054098183
SHA1:	DD689B055396C7C5AD87A25C0C0DB3B8AF105BA2
SHA-256:	02F969AD578A5144CF54EFE9781693E264F5DBD0ECD6BF1EA4968342CA16A044
SHA-512:	8703DAB3047DE45036F3B2AB1B3F24DABF2C3868B7D411443DDC068543E6B199FDDB6955DA9DA9D4B5AAE01916519C8EA176EDEF8F15BCEB4199E7D9A03C0906
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:8
Preview:	..J~.q..@Bx.i.r.<{..c.{..{..0Q.....8.....nl1........}.F..;.O?D...,.u........S'..pOs.:F.Y8\..N...mZ........Y#..eTP6..q.#7*Q..O.1IZ~.%.....l.......P.B\|6..h5.3.a.........E.......\.....++.^.H"..v....i7..t..C{.au.i..M.j.j.\|8.}~................... .}......@...FA.8.....'.=..y....?....\lr?G..g...>C...?`.>.zz.W..wZ....\|..9.....Q..Q...t,.P.w.......s7......U........./..6K...=....E....}/...'....J...}c.M..OQ.......^...Oe.....?...o...~...x?../....c.EIo..O...G...\|~..G.:..}.E....t`.....9....dm"^.mY...FFf.&.....D...@=.y...$+..n.}.(........ Ii....@....z...[.4...6.....I...h....b..RR..<.$.ar7..\|.....D....7../#.&.m.9..w.....>..@Z/2Nz..!.5@..H...A.....5.7......q......X#..f........d.......a....@A....b~..Nf...r..g0E. ZNz(<[....9...fg%E."..(.B...sJ....'.meiHT@.`!...b.J..)q.5.........T.......@..........l@%6.M.`..FE..T.{.X.R.].xY..~.:..x...X.A.I...]..[..n....:.c.~..I..j.....3{.....X.f......]p.5.f._....N$........Sh...i........./Z<m.P.Z.....+p.!..r.UB.?6(.4A."=b.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	50042
Entropy (8bit):	7.994084425952197
Encrypted:	true
SSDEEP:	1536:ygkdFN/NuuWswp+Ps+OKG/0avWwuafOnWyasa:a3JqpeNG//nmWyk
MD5:	322F6D015FD39CD61DA75E8C63F9049D
SHA1:	177D48C750AC3D93E25ACA1267E78A08A4B8C818
SHA-256:	2FE89F28A1EF8E27319352CD71E2CE65B1C5AD9C21B3206F9B7310A83EF747C3
SHA-512:	1D23F045BD0122B3421E33824FF7EEF389CAA81C21DC814FDC27D0AD441ACD1DA8217716FE6F5E16E15F77818541B85529FF3FAC85BA78AA1C3725DB2F32AD47
Malicious:	false
Reputation:	low
Preview:	RIFFr...WEBPVP8Lf.../......1.mU.........Gj......v.6.....g....2DU5. ..F....s.zF..u2.m..Q...z.m.ns].Kxj..%..[.F..........&.B..\|I .......YTM(...A....@....Z.D._a...k..Q...B.^.......L.._.w.\p..SxNNi6K .D..`s...&;.<K.'.j%mh...f.\|h..f.\..,t...U...tA#..-.!Zt..iI5.-)d.....c........p3lf..8Q.C..Is....b.Q...#...\K...u......?.m...s."w.m..g.N...?f.......\|.?..4.kE.Y..}A..G.!$;.jB..3.. ..V...9..X..._.9u......~0s...<YN..9M.~./l.k.......L.].nmS.N.&.c.5..$.&.5M...-.C.X.0....P........P.H..`.#....#.b.c.....":...oP.U.R4.,.z.>.h]Q..['<nO.~G.RHg...g....F..B..UV6XM....;S.3..-x........jt...V..Se].D{.g..5;.%..*........>X..V.t{i.X...E...M..\.j^..~..2o..N^...~.z...L9..Hr.......G....P..;.......x.=.%&..~8......ynn.)QeOs`.].....]T.....ym..Lk4..D5t.........[BH8.?b.y.F...r..9..'....9....9..WU...:#.O.....D....5.A.vf....W.6.fb.#.mAc.........5!.EI.L...p...ef........n.n...>.Z..r....?,Hv.6/.@. d..`Q..h.....I. !..-l....:.."I.&.......:.HF2.r.k...'m.{.;y.O.$...i@.U..]@.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	559903
Entropy (8bit):	5.526280148710851
Encrypted:	false
SSDEEP:	6144:rE4xxmy7KJpN779sK52+ZmTdTLY3BbC6bJax8Xn5Qq06k4t3Fj:rLVKg+ZVU6Ix8Xniqz17
MD5:	D7F4617AA9E03414B09298EA561FFACE
SHA1:	066AD37C6555D5BA053AB248F285EDF080EF4A93
SHA-256:	9D230A1F44DDB57FF7A42996768499534EBE66598036A070600BE6B48E27D9EF
SHA-512:	08CB71DADB8C5A7827461099DE8084C8EF95DFD4A835AAC37B0C7C032574745EE134A47DAC83D51D7D63B14AEB571F912823EE3AC1EBE13E470667BE1D2DC5B0
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["app","review"],{9669:(e,t,n)=>{e.exports=n(1609)},5448:(e,t,n)=>{"use strict";var r=n(4867),d=n(6026),o=n(4372),s=n(5327),i=n(4097),a=n(4109),l=n(7985),u=n(5061);e.exports=function(e){return new Promise((function(t,n){var c=e.data,f=e.headers,p=e.responseType;r.isFormData(c)&&delete f["Content-Type"];var h=new XMLHttpRequest;if(e.auth){var $=e.auth.username\|\|"",m=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";f.Authorization="Basic "+btoa($+":"+m)}var v=i(e.baseURL,e.url);function g(){if(h){var r="getAllResponseHeaders"in h?a(h.getAllResponseHeaders()):null,o={data:p&&"text"!==p&&"json"!==p?h.response:h.responseText,status:h.status,statusText:h.statusText,headers:r,config:e,request:h};d(t,n,o),h=null}}if(h.open(e.method.toUpperCase(),s(v,e.params,e.paramsSerializer),!0),h.timeout=e.timeout,"onloadend"in h?h.onloadend=g:h.onreadystatechange=function(){h&&4===h.readyState&&(0!==h.status\|\|h.responseURL&&0===h.respon

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.3715620836455065
Encrypted:	false
SSDEEP:	3:YKOHcWn9MAf+H+68RXJk5IlqloW:YKOHnu6rhqlB
MD5:	D91B942B730F5FCF44F5F7CB638FC0E1
SHA1:	24F4417D5879981128567B6C221420B902D35F8A
SHA-256:	D253F5FA87AEA9B7E54A425C692E96704E78BA3A0DBE7B7BD38CEB8354B42522
SHA-512:	C0473F98C70F8DEC5268D57B7446EC750C4827CCED6275B4B4AE83D2F12C9439690BAB39B644FDC281255E40B0F8B7F39C54E2D039BFA21FFFB285FB998BBBB1
Malicious:	false
Reputation:	low
Preview:	{"ok":false,"error_list":["no_operators_assigned_to_callback"],"work_time":null}

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 42, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2052
Entropy (8bit):	7.855094948974568
Encrypted:	false
SSDEEP:	48:O/6GwINXdIEENXb9PP/PmIjro2l92Dw/n9A1kaXBifFBM5hKAnG/:OSlIhdwHjrfgMlAaJ3MvrG/
MD5:	93143E775B96BC4FE41E17FE6C36D94A
SHA1:	BCA7354771EE6543507F5C2A6E8155435DED1A36
SHA-256:	53521C6F974E3603D2F950CDAF5DA77D0BFC129BDE7DDB617F69933C9635B017
SHA-512:	E8B934AB4E17A4853A555464F191B3DD2B2CD11EED49678D4F8B9C99825E2321A0F26A619725572E3C0129964CEA9B1315094A95C5E4EA29FEFA5F7D887607AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............d.....pHYs.................sRGB.........gAMA......a.....IDATx..{PTU.....K........#.i...o-...8.4N.G3.S.+..9c3Y....6....g%"......,/.a....97%..sw..a.......s..w.Y..Z..kg...'.n.B......1k..m[..!.B..A...#....#....#....#....#..0k....a...l.Y..`k.kqX.Y.oa@8f..Xg{.l.y...>.%.8,..l..G]g..c..#...0.{0BY.6..I...Z..rm..{.s ..p...v.....\..........[.\..R...x3\|C.....;.7.....+^.."..~z).a..kqX.Y..../z.j../..).l.N...vB.I.C\}1.k ..r-.K.6K...K.3}.Z..x..Z8kgq..y...=.....!..k...8...vpi.vW:Y}..S..^O=.........%]..xJ....<.n..~.a...!m:......k.\...M.. .o..l.....#..%..P(./..mk..%..keG;....O....,W......!h.b...:..W...^.c.-..'r.S.l.....wBe...\[....hl..X.u.t.a..kk0..N....g;%.eM..n.S.k...q.,......B..C#1.o .......u..dM..J9f..!..u...n..{.$..d..R.j..,...O?..F.JTi..$....447..huM...I1.#....B.;.'....[.".xq.....3.Y07.......8...9.S.@..".(...`N4..-K:.UiQR.c..u{z..n...r....k2....R.P...NbA.~..E3...45MZ.U%`\.N.V.`*<.9S.....q.(..'.#.u.q.WU....[s.H.D....

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.4669548204849727
Encrypted:	false
SSDEEP:	96:jBdUKBMj1bxUvSsUV20fvPsUYqaqHdcom:jBdUKyj1b8Ie
MD5:	AABF240DDE596A2F1FFDA918CD95601F
SHA1:	C97A1C90BF638E26CCDE60611748E6DD882FE672
SHA-256:	A4C8451C71E4DC339504825607846BF73554B604E734587B2C46A2FE70C144F5
SHA-512:	8A750796A22A6939634E61435DADF04ED3B56B4FABB1DD51BA1523B0E3EF7D33FC082331ED64D94017EC7A2D7130EBCCCFC99BC3490281489D7CFA4B317E5820
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$..................O...O...O...O...O..3O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..3O...O...O...O...O...O...O...O..xO...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..xO...O...O...O...O...O...P...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..xP...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O..xO...O..3O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O...O.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1505)
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	5.20331363388018
Encrypted:	false
SSDEEP:	24:EfzmHW8yGvcOnL4rY45YCCBm0QBmGLJABTMfwMWJ4zfIC6kZpOYwwnSf:EaHW8/vcO6Y45CMfJmTMfqookSEi
MD5:	3640FF2B7EB6CEB6C3B3AAAE7A528CB5
SHA1:	75B9BBCFF97D05B0B34155B3D637E64BBC9F619A
SHA-256:	746797F07E03D1BA4C4E586F50B5980409FA15CA9B40B93709698A66FEE6AB29
SHA-512:	70719502504D9D819B04E241F8ACA1D3518A1DF1CBD3C32147CE68288EE6AD3B0B601BBCE9ECBAD81CC82BF6A522095BE31C82352310E658D2EE527EE9A1399B
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/js/runtime-main.9d98dd33.js
Preview:	!function(e){function r(r){for(var n,i,l=r[0],a=r[1],f=r[2],p=0,s=[];p<l.length;p++)i=l[p],Object.prototype.hasOwnProperty.call(o,i)&&o[i]&&s.push(o[i][0]),o[i]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(r);s.length;)s.shift()();return u.push.apply(u,f\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,l=1;l<t.length;l++){var a=t[l];0!==o[a]&&(n=!1)}n&&(u.splice(r--,1),e=i(i.s=t[0]))}return e}var n={},o={1:0},u=[];function i(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.m=e,i.c=n,i.d=function(e,r,t){i.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},i.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,r){if(1&r&&(e=i(e)),8&r)return e;if(4&r&&"object"===typeof e&&e&&e.__esModule)return e;var t=Object.create(nul

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Category:	dropped
Size (bytes):	1259386
Entropy (8bit):	5.600657955020061
Encrypted:	false
SSDEEP:	24576:07ezRMGogGw/PdG8Q1SOeCkpYrT/8k17HcU1eBkeamYRKs+dRip2mkqc4F5YH50d:RxMT/8k17HcUcBkeamYRKl7bHCF5G50d
MD5:	A8A6BAC7AB98E116EA8E9FAF3E2B0DA9
SHA1:	C22352753FE2D283D455D15070BC7A15131D668B
SHA-256:	99E1BC6343A758CDF2AFC1203137AD37D62F1B41F2D6BD5CD831C3A9D5C9AAD8
SHA-512:	FEF38EA0FD56EE71DD7871023281F7AA76103C38820F3482BC238398C734184F0E71881B00EEA0CE07E946B7282F34F3E27EF4061BAC2438A0326D97CE71AD31
Malicious:	false
Reputation:	low
Preview:	__jivoBundleOnLoad("window.base_langpack = {\"botListPickerBlock\":\"Use one of the buttons in chat to answer\",\"botTransferChat\":\"Agent was invited to the chat\",\"businessCopyright\":\"Business Messenger by {0}\",\"byYandex\":\"by Yandex\",\"callback_delayed_button_submit\":\"S.hedule a .all\",\"callback_delayed_period_as_possible\":\"As soon as possible\",\"callback_delayed_period_delimiter\":\"at\",\"callback_delayed_period_today\":\"Today\",\"callback_delayed_period_tomorrow\":\"Tomorrow\",\"callback_delayed_submit_fail\":\"Unable to schedule a call for the specified time. Please try again.\",\"callback_delayed_submit_success\":\"Thank you!\\nWe'll give you a call at the specified time.\",\"callback_delayed_title\":\"When should we call you back?\",\"campaign_popup_timer_days\":\"days\",\"campaign_popup_timer_hours\":\"hours\",\"campaign_popup_timer_minutes\":\"minutes\",\"campaign_popup_timer_seconds\":\"seconds\",\"cancel\":\"Cancel\",\"captchaPlaceholder\":\"Enter text fro

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	dropped
Size (bytes):	2891
Entropy (8bit):	7.73315881281975
Encrypted:	false
SSDEEP:	48:AszfJR5CWxrzNvl8+k90fIBid1oPuJ+d4TOpwMs17l+kBJA1VNLt/4P58:1fJtNvlvm4USlJ+yMFABJAXkB8
MD5:	3DA4F06EDD0C1577F0696F6661766011
SHA1:	BD5CEB4F88A4BE058C03EDE6FC3C1D75D1459858
SHA-256:	B2B327C89C95860B196B81D35E5111FC4B37E0712CA89D2A7D6029DECC9B5E22
SHA-512:	1D5A9158FB3BE0FE45B9E0C1B9B996CDDF4F561CD1AE0E3A22A3F218DD00B2692BBC15A7C4D68A4DECDD790FEEA3915D544E5548998AEF8EC1A0852E2FDCB2EC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................C.C..................................................................................rp.4.OUo....fR..s..I...g+...Fd/.L].....T.D..Tl...L..u.cs.l..@.Y#.......{S,.w....m.6d.....u.k=7....~.....N:..x.\\|@..y....4........i.c...{U..?..45Lj.0U.(>..s..K.rC.?.....7%.....N..Z....jo/...&I.yd..........%0.I.....#................................".............5...6._....{.,...L....D.{...f..k......a.4.h....;...N....'=..]3L...W{...p.#...^....!....C......@..s...'.ne..6"...0...)."N.....",..D1cUf6."@..C.I.)..a....U^....~+.c........>.V..I....Q.....E6.G.5...i..H..._V..r..A..<en.D....I...P...?.1..n....f..K...CG.p.L...X"H%...)1...-....VV.hD.....S.d.N...^..}..".....(..Q.~..u.PV.Q........sm&......Qg?.z........L...@4B.F..V*.P....T..x....m=.\|!r.Wi.i... Im..F(....s.6J.+M...b...G..S..3.0..<..QH.n...r.w11....f.O"...G.&..y.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4094
Entropy (8bit):	4.690110599967699
Encrypted:	false
SSDEEP:	96:12oZc5WT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoK:12oZc5WNXK3XuXW5O
MD5:	9C77D369CA11F2D2AFBDBA8FB65E9D2F
SHA1:	81DE4F448F053A469407042B130C9487672BA9E5
SHA-256:	EA62B7896A8ADAC3EC03A0E533349165259D920FC7509E44AC5480E729681C17
SHA-512:	099224F1CFCCF591164740FE16A598C5BEA14B77786F8387A24C28F683068E031BA5B32F5D7634EBD9A2B2FAB262C2B6A3A3B5C732858F58E66FBB89F5A27514
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) retu

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999659064252215
Encrypted:	true
SSDEEP:	24576:Sl+lDcCDpqs7lBUgxQLvn0mUd18OADIz0OlePxWIOSNS3uoTE:SMFc8pqs7qLv0fbA8bl6IfSNGro
MD5:	5BB022CF522FCECE66F35E47D0F509ED
SHA1:	B09FA69E67EDCFCAE60E5C43D44C8AFEF6D28BDE
SHA-256:	03A48EF256FCBCFAACB7FBD6958B548ECB299E427D7FECA89E42D2B9B9AB31DB
SHA-512:	6D0BD9252684110BB4EF3C5091582D72BE8E44FA198867463C6EE654CA6EA1394DBF45D80A5D3027CD0120321456EECCE8C320FC5BBC1F2ADA2F8E4580D60D41
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:5
Preview:	(G/.i..o......4...PJ...........U..c.$1)...".'Df..h.P.+......fy..BS.^[....S.......,....KZ.P.:..E..-M.......N.Fw.ljh...H..v..;...95@.^.\r1.d%w>R.....[$.O.8...........q.s+&...J.5.q..=1..PZ}.....m9`0.q6.9f..C..-..Z....\|..;.8.. 4...v.BpR^.3.WO.......U.j..........k.m.vz.h........].mA(a....4...Un.].L\|K.....){>4...\|3..6...)niF...%..Evu..o....._Ge...Un...j..<..^.E._...,..q....h74.Uw\|..I..4...(..Qy.c!..............l;k....a....i.n..y...Y..N......uv.......9...r.{.3o.F..J.6...e...q..[O~.....x(.k...:y;&...z...c-p.@..f.3A..!.P4.]?.5..p...c.l.p'20$...{.A<+ ....N.)u....;Y[.s.........\|....amv..k._JcE._HU.........sf.....?;..9;E.E!.-"."y.=....F.Ml.l...<.s .a......Yf.._.......y.i.a.4....10wz.:..u.r.\|].f..........8..V.%........dR.7..........[......-.$._F!W....-.J`.`?5kQ..1hy..u.p../....q.).t.......w..6...$.N#....r.k....PQ. .G ,Q.H5..E@1Wq(-.$T.....+t...8..Bs.3r..Rs...I....CU.?m.ti.c<F%W..k..va6....@c.\|.(.m.....G.t.x..Ie..2O..'.~..f$..':.T...RzXo...Z.']=

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	150668
Entropy (8bit):	5.235141154178429
Encrypted:	false
SSDEEP:	3072:7B1q3OjI+yvm8mUlaY7scVOnQ7qeQ5Xh1:4OjI+yvm8mUlacscVOnQ7qH5R1
MD5:	172354A613EEAF25C05004F9CA7FD478
SHA1:	7DD824A858BCDF425AF92B03EC716459EBF08467
SHA-256:	505F7786C790D882F46404CDE911E8FD469E59FC094449EB25F7991B60A499B5
SHA-512:	2E403D6CBE2F032BFF0A9E2CE23795FFBE43D0460E3CF1F9C16540A29B7831FA9EC280E2F5DA6824FDD823370F7B1B017FE4579D4A560B494F2455F52B546FAD
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["swiper"],{9421:(e,t,a)=>{function i(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function r(e,t){void 0===e&&(e={}),void 0===t&&(t={}),Object.keys(t).forEach((function(a){void 0===e[a]?e[a]=t[a]:i(t[a])&&i(e[a])&&Object.keys(t[a]).length>0&&r(e[a],t[a])}))}a.r(t),a.d(t,{Swiper:()=>de,default:()=>de});var s={body:{},addEventListener:function(){},removeEventListener:function(){},activeElement:{blur:function(){},nodeName:""},querySelector:function(){return null},querySelectorAll:function(){return[]},getElementById:function(){return null},createEvent:function(){return{initEvent:function(){}}},createElement:function(){return{children:[],childNodes:[],style:{},setAttribute:function(){},getElementsByTagName:function(){return[]}}},createElementNS:function(){return{}},importNode:function(){return null},location:{hash:"",host:"",hostname:"",href:"",origin:"",pathname:"",protocol:"",search:""

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	95483
Entropy (8bit):	5.471446926920247
Encrypted:	false
SSDEEP:	768:IACNernkQ1AnAImlKykcJqzAjNAMAxT+2oIZTTLb8kpOM9SdGW0s+Tj1+CUd2hfM:IA9nkQdlKMDcAIVTn8kpOM9AH0sw4CDI
MD5:	81078F48EB510472B35927A8A9F4824D
SHA1:	A60E4CABF8B8F7BDF97B85D0A87B35B0B65FF473
SHA-256:	655107C111B6EB743DA5C9F6001413F1E92E5B8F8B3F1BBD8B0E5A226CDCF551
SHA-512:	8F751334E1EB5316036481CB9FE35E96D2ECB7F26D97A888719A44AB99313E06F7857CAA30099D75E772A3252A288B554869E52C482EE14F8C1CF85E86A5AB4C
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[0],{171:function(n,e,t){},175:function(n,e,t){var r={"./adult.svg":176,"./airplane.svg":177,"./calendar-gradient.svg":178,"./calendar.svg":179,"./children.svg":180,"./city.svg":181,"./clear.svg":182,"./close.svg":183,"./infant.svg":184,"./minus.svg":185,"./next-disabled.svg":186,"./next.svg":187,"./prev-disabled.svg":188,"./prev.svg":189,"./search-gradient.svg":190,"./search.svg":191,"./sub-item.svg":192};function a(n){var e=i(n);return t(e)}function i(n){if(!t.o(r,n)){var e=new Error("Cannot find module '"+n+"'");throw e.code="MODULE_NOT_FOUND",e}return r[n]}a.keys=function(){return Object.keys(r)},a.resolve=i,n.exports=a,a.id=175},176:function(n,e,t){"use strict";t.r(e),e.default=t.p+"static/media/adult.1ee3e1c3.svg"},177:function(n,e,t){"use strict";t.r(e),e.default=t.p+"static/media/airplane.bfb7fb00.svg"},178:function(n,e,t){"use strict";t.r(e),e.default=t.p+"static/media/calendar-gradient.cbb43ad7.svg"},179:function(n

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	78388
Entropy (8bit):	5.329878042535201
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QqSYTZ02LKVsdmpyKcicxDx:RIT7OXVs9ZVKBvYj8wKcHx9
MD5:	BA76916B18D102F56653992A875F9DCE
SHA1:	9552AEFEA5F2C30CB5A57DF4146781B989AEAFBE
SHA-256:	7FCDF877097055F096381D0D8DD125BCAC87214E623BEE0039A96BEF8EF1CAAB
SHA-512:	74223DC2B24F81B34D87C21F72A0234B79DD393233639F6565292C89FB11DA6AA65B9D4FFE7E55416BBEE60F821C508C25068E9BEDE3E6D4592F13F11EFF1F22
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/4033617339993952?v=next&r=canary&domain=travelbusinessclass.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C44%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C169%2C142%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C5%2C90%2C81%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21760)
Category:	downloaded
Size (bytes):	21809
Entropy (8bit):	4.6372018729818025
Encrypted:	false
SSDEEP:	192:jMRKULsqUAZGuOUf8hKp/k1zKhK4uK4hRqK4hwswK4hwafK4hwzK4hwGK4hwwK4Q:QoaaEAmKt
MD5:	02E35604D024B8EBFA430838AF243713
SHA1:	CE77ADCA09EAB401BE22223A9C17BD590B797C39
SHA-256:	1548DB73B603051BC8256463F3941CC37C5910266E1EABBBB878403A3CF970F3
SHA-512:	201280148B6C40204BA258A31AD9CD2FEB7852EE7C890C1E592C8E10D450309B09D2AF0F341470C4C099C08F17F71C660812B2C5BF7A5C81E57FBB7884614E05
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/css/2.1cb30e7f.chunk.css
Preview:	.react-datepicker-popper[data-placement^=bottom] .react-datepicker__triangle,.react-datepicker-popper[data-placement^=top] .react-datepicker__triangle,.react-datepicker__month-read-view--down-arrow,.react-datepicker__month-year-read-view--down-arrow,.react-datepicker__year-read-view--down-arrow{margin-left:-8px;position:absolute}.react-datepicker-popper[data-placement^=bottom] .react-datepicker__triangle,.react-datepicker-popper[data-placement^=bottom] .react-datepicker__triangle:before,.react-datepicker-popper[data-placement^=top] .react-datepicker__triangle,.react-datepicker-popper[data-placement^=top] .react-datepicker__triangle:before,.react-datepicker__month-read-view--down-arrow,.react-datepicker__month-read-view--down-arrow:before,.react-datepicker__month-year-read-view--down-arrow,.react-datepicker__month-year-read-view--down-arrow:before,.react-datepicker__year-read-view--down-arrow,.react-datepicker__year-read-view--down-arrow:before{box-sizing:initial;position:absolute;borde

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Category:	downloaded
Size (bytes):	5014
Entropy (8bit):	6.886667230039598
Encrypted:	false
SSDEEP:	96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime
MD5:	7BF3E4962A5ECF1F8CBCC2FF3428F531
SHA1:	F75C694461A643D2E096AE8D0F6C1A9D19602EEE
SHA-256:	D44244617BF21DF7A137694FA762D5CAB3B82CB9FAE8F33DE5917977B02B2A11
SHA-512:	53FB17CA3361636ACB0B80107F66810150A8BBED9AA5F878C2B1FB5A23DDF7FD349B30EB082B05EFB3C0D08DC5383D30EF15D0CA99AD98D62E0A9A335112ED6A
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/sounds/outgoing_message.mp3:2f845e86e4a351:0
Preview:	....................................Info...............................EEEEEEEEE]]]]]]]]]ttttttttt.........................................................;LAME3.99r............$..F........;.R..........................................................................................................................................................................................................................................J=<@.8..s.... .9y.....90..).R.xj..BP.....@n...l........R.(......?G...C.....p\|.......x ....H.........1.........\|....D.!....?(s.....`.....(.:......z.....a..8..@/.dG1.O3..2.%6.;1..2HQ..P.8.L....T7.....!K........C ).i.V........R.....\|./...9.lI..S......@.?.............K...[...Y.Dl$.....B.~%.`.m...!.>...V..o..tIE.E.yxR.](.B..a. -B.....r:B..b(M......:_!..\|...b.....%.........._."..... ..tA0...H`"...a........8..z.._..J.P......r..P...Ai(aV.F[l.a..f.@.`.... .](m...R6.9.T.hB`.8.C/...6...RI(.9At.a.x.m......D......@..D.H.0..C..<0k.....2.X...u0Z.0h........f+..h.Rr.-3"

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	dropped
Size (bytes):	2973
Entropy (8bit):	7.765239177536521
Encrypted:	false
SSDEEP:	48:H9YuFc2igyNkl6rPp82tpYIurjLpqHqMg74arwzDutabYvOSWIQjpqdpmSC:H9tFphUPp4IuXLUHHytrwzDvW3WI6mw
MD5:	255505085B141397E47007A7C45CDD92
SHA1:	93B25FD552A7093F8125CE413E8A2D4317862BE7
SHA-256:	06E83E2F5D691EAED3C3E93955DD8A451B726CB405B9BB5CCA95F0D3C9E89C10
SHA-512:	5C9DD36696CE8A601E1ED9D59CB9D6579E127D19876E3DB285179526831530491B4FD2E7DA2D55DBF75541ED708A529538B84EA05AB8D51AB1C265A9DA698BA4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................C.C....................................................................................?.r...n...;v... m.P.(`.bj.....F....sp.S....a.......g....W.peC"._n\|.w..=..%...X.....S.F2.......u..cN..;...`.2....9.q%qA..9}...N;......I.i.\|....;9....4pp.....:l...J.n...l.....i..s.,/...........$..5..I6q.l..z.rq..;...K...'................................$.!"2...........(...2.....w....q..WQY.....B-V.IE..........>`]....{i...y.o7../.\|mO.}/.....;..........s.Z...t..L....#.L?L).\.$...G\..W..6...Wt..YF.R$...z..j.-).).z...&....\.rs.S.`...i}.o.Ly..T..k...#...F.k.N.x.j. ..ZdQ..N.L.9...(...Jo.I4..... ...p..c...J)...i.>.9...I..d..t.ks.X&..)..\|...T....vk...M.......c..J.Xg.z..e.v..:.CF...........,R...4.Q.Kn.Uhp1.6...);./..z:\...K..<.!\R..L...?.y..W.A7..0+..7..q.u.S+^d..v.C..T*L9Q.X...\|.S.....X.a.~c"...t.E..f...b.J.\|

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	dropped
Size (bytes):	3434
Entropy (8bit):	7.80456189188569
Encrypted:	false
SSDEEP:	96:igRyT3FXtfh3kNqPtoZoFMB2Ks+qwpPKyaImE2OB:/6XbJFPFMIKB3JF72OB
MD5:	25D1B2D2E76CC799B0CA66D3D439DD41
SHA1:	939258E194470246A15230B22CD791D3CF7056DD
SHA-256:	CB8461EFBB3972D83ABE7E49EEB4D31BBE8E982BBA30F10D4C6FDB538783E257
SHA-512:	EA55BD752A66289FCB5D1BF7F8C68C31EFE19138EDDDB6AFB36E89DBD8DF1645473E123806B24ECB4A5AE46EE235F83841E72A92A70A8C6FE22732D7DC977154
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................C.C......................................................................................a.^Y...6e..\....,..x......iRx..$.~.?pL.6I.Q..i.1......(..1..q(...c..u.7..i..@.d.\|.%..4.P ..X\|.@e...J.g.l.7.t.3A..yp.0_RX.E...b4.)........O.....z#...A...[=.J...+..p.5....l..[....ZT-&..fgas[:....s.]...x.%.e.ID..q.\.Xr.1,K...$.................................!.............C.....).mX5.0..L...k..j....'....Z..8..}4b.%......t....rI.,....)...m.ZU..$...B.C....]U).-.`....H2..cu..Tb..l..Z4.f.... .W.q....z1."..6...O...U.M2.8..7j8.........Ho......:O..nd...A._...tq.z.\.d..TS9.S.......P..U%.1...&Y..z.v.cd..Yz~..t[..yYN..5.I...-:..-z.vt.?.W....\|....y.O........=.~.J...."dU.w..W.H.SD.#..]!..$RLG..%].t.R...XnZ.%..G.y.@]TT4~9.....Qt6A.6....l5m..!...B....b.........f.-.W.%t...6......\|I.1.u.1.F..[m..k...Q=...H.c^.".z.[.<.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5030), with no line terminators
Category:	dropped
Size (bytes):	5030
Entropy (8bit):	5.842973667956776
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU7ulVfs3uKxbKl:1DY0hf1bT47OIqWb1uulJs3u8O
MD5:	6461DC4FA7067F7C98BD03B26C462694
SHA1:	85F0AD0A7AA41C924A40DAEB98BA665687FD780C
SHA-256:	A1B66FFF150D05CA6B71DEE4F10020E180228C06FAC01083D7C9BFE252FBBE12
SHA-512:	6782E48077FBCC9239862E774B2D59861B694B5CD77AE50318208E3D82B71CF323C0ECDEDE0B41BCF1BF7FCF343872A437DE14380974985507AF475C50CA0904
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	248519
Entropy (8bit):	5.499141073542002
Encrypted:	false
SSDEEP:	3072:QFkA8A+AqBiWI6dGYx0DkGg9xgtJ6sdJEh1oXweP3oJSsI3m1dN:QFMA+AqBiid9Gg946sdJX3eSskm1dN
MD5:	19318B603D07D290FFECC7D55D604367
SHA1:	4111BC5F8F0D8FB120E1D1603B3A7B691B4F3FC8
SHA-256:	49897E1FDB47EAEC245D0F9074790B5351371A97C5AC655D39E6667A6420D56A
SHA-512:	0C6D6AED2214B2A1D25DE70CC8484383DC00DCB09228A2E9709493A1CA8ABDCE543F8D5B40418655F507870F4AF1DBCBB602858BC123D9B42523B8B627CA063D
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/js/d1dc0ec/chatcontainer.js
Preview:	"use strict";(self.webpackChunkwidget_react=self.webpackChunkwidget_react\|\|[]).push([[535],{36071:function(e,t,a){var l=a(17907);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var n=l(a(33119)),o=l(a(92664)),r=l(a(84827)),i=l(a(85299)),s=l(a(55536)),u=l(a(64758)),d=l(a(54720)),c=l(a(91275)),f=l(a(39976)),m=a(20344),_=l(a(19955)),p=a(21476),g=a(47060),h=a(31984),b=l(a(71323)),v=a(54415),y=a(83170);function E(e){var t=function(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function(){var a,l=(0,s.default)(e);if(t){var n=(0,s.default)(this).constructor;a=Reflect.construct(l,arguments,n)}else a=l.apply(this,arguments);return(0,i.default)(this,a)}}const O=l(a(4855)).default.name("Call");let C=function(e){(0,r.default)(a,e);var t=E(a);function a(){return(0,n.default)(th

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3356), with no line terminators
Category:	dropped
Size (bytes):	3356
Entropy (8bit):	5.320231678967402
Encrypted:	false
SSDEEP:	96:xbDueqeEiaK7K58VALBYVucZCj67ak2ZIhz6E:5XYito8+mxHavE
MD5:	CA71B5BEF6306369D58924AF136C9887
SHA1:	BAA6F84E0BD45D7DFA20568A1B460AD786F9D4F0
SHA-256:	4EC5D05078DEAB6FE68931655EC8F733B50CF27CB37E08B07FE5848EDC6F435A
SHA-512:	1B41B40369173FAA33D510326DFB3AA080F83A37B1096140DD432377335C57BB21310E0495E2A3A3F2BF798EB75A6C078BB6C7F460BB6AE360C5679D0107D4EA
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,t,r,o,n,a={},i={};function l(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={exports:{}};return a[e].call(r.exports,r,r.exports,l),r.exports}l.m=a,e=[],l.O=(t,r,o,n)=>{if(!r){var a=1/0;for(s=0;s<e.length;s++){for(var[r,o,n]=e[s],i=!0,u=0;u<r.length;u++)(!1&n\|\|a>=n)&&Object.keys(l.O).every((e=>l.O[e](r[u])))?r.splice(u--,1):(i=!1,n<a&&(a=n));if(i){e.splice(s--,1);var f=o();void 0!==f&&(t=f)}}return t}n=n\|\|0;for(var s=e.length;s>0&&e[s-1][2]>n;s--)e[s]=e[s-1];e[s]=[r,o,n]},l.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return l.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,l.t=function(e,o){if(1&o&&(e=this(e)),8&o)return e;if("object"==typeof e&&e){if(4&o&&e.__esModule)return e;if(16&o&&"function"==typeof e.then)return e}var n=Object.create(null);l.r(n);var a={};t=t\|\|[null,r({}),r([]),r(r)];for(var i=2&o&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).forEach((t=>a[t]=()=>e[t]));return a.de

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	389
Entropy (8bit):	5.180990657787996
Encrypted:	false
SSDEEP:	6:tI9mc4slicA4WcD6DJ2Lql31Bl7q3AgI102KVSXK1F70WAx7K5GbMR5GSzaN8:t4Ix4D6V2LQPg3AP161t0HxsGbMPGIae
MD5:	7633FA6342BB4C75945113527754009A
SHA1:	7AF7517EE4FDD320E5014D748E44F64D2F16ADEC
SHA-256:	7595868A787F99BB95AF00A8062876FAAACEB2857000D6D7085F4421FDAED504
SHA-512:	383B191EE38A157C9A486A7242E0A2EEDACA9476DEE493E0667C5CAA27D50189BED27B3CE3523B00268AA12285574A88E0502ED0EDE1A92A8D86B97EFE50C9F6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 870 6"><defs/><path stroke="url(#paint0_linear)" stroke-dasharray="2 5" stroke-width="6" d="M870 3H0" opacity=".1"/><defs><linearGradient id="paint0_linear" x1="870" x2="869.999" y1="4" y2="2.49" gradientUnits="userSpaceOnUse"><stop stop-color="#590C32"/><stop offset="1" stop-color="#9D1D5A"/></linearGradient></defs></svg>

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5541), with no line terminators
Category:	downloaded
Size (bytes):	5541
Entropy (8bit):	5.960935697524254
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU1ExisVfs3uKEbx34v0XGsB:1DY0hf1bT47OIqWb1zxisJs3u/dvB
MD5:	BD9194AD2372189D41A04AED4913D2B5
SHA1:	88EDA90A5240734FC0EDCE6272CB2BAC9FE2B960
SHA-256:	4DD1E79CAA2451D6918E14B812421F3831FED6D5194B8572A9EB1D8EEA814D4D
SHA-512:	7402FEAA2BCC8DEFB476A47A7495AB7F226D9BC8E736EFF385C823094952D42D584C4761283F73A0D5D92F1B33FFF70491149EDB6766C059BF5D530E8A72CC99
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/403308866/?random=1730391816204&cv=11&fst=1730391816204&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&label=U1O5COCZ95UYEMKCqMAB&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1322061385.1730391816&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	28
Entropy (8bit):	3.937193208607594
Encrypted:	false
SSDEEP:	3:qdoKL6jWexe:qJLexe
MD5:	0173C45C082E5BCC0BE7EEE8875EF775
SHA1:	6D70EE63F94E227EA7035FAF3744E2D187BAA719
SHA-256:	028D9CEFDE2D3C0B56494B395B785EB54C22BEA89F6E1412C9E2086273B33E7D
SHA-512:	095B8267AF8F640FD4BA4992A18960BC1C73FE09D3206B98733B0070D99F7E3FA46FE83637EC1773C4D526098B31ECEFD7890F1CA9D6DC5BE98181A1D9C8317C
Malicious:	false
Reputation:	low
Preview:	var p = "Project not found";

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.757756064128517
Encrypted:	false
SSDEEP:	3:VO/YpdXvLZ/A:JLfu
MD5:	9F9A6CAE9AB9275267640BEC559D7909
SHA1:	C62225205B625CFD5A5E6BBB07B912583E64DD28
SHA-256:	A8BF3CAF3B0C6B4B32AFD290423D537D5099A9808E3EA7736F52AC895057754E
SHA-512:	51E26072007C409E8AC54156F60D9594F6B99B6B3C28341DB79444858B6FACD1C8E32DE0681CB878CCF2452E50E7B063662036BF558C607099618C5A37A89444
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/css/main.afd7172b.chunk.css
Preview:	./# sourceMappingURL=main.afd7172b.chunk.css.map /

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	260760
Entropy (8bit):	5.55993787951512
Encrypted:	false
SSDEEP:	3072:zawiztGbETra0oHy0E5CptDY8/I8+yr/OUYhcDmKD0C8Gp/Rhl:aGbg+0oWM/GUTx0C8Gp/Rn
MD5:	1BD7D44948B6A687609F199789304EDF
SHA1:	DD57FD2CE6884A8FBA76A98E1186ED643386FB3A
SHA-256:	4F53937D2498CA10D86414DF546D1B582FA87982DFF157A72498D47F7BFA7DE0
SHA-512:	914AC95F92509CDC6B1CAE5A5C8991868B8BE32D991AD60DCD884FEECA00C66826B099034B4BBE64AB5C721F0C9F6723B73F1AD3CF31CBCA5B814FA6C0992C6E
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-403308866","tag_id":108},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_isManualEnabled":false,"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":104},{"function":"__ccd_ads_first","priority":3,"vtp_instanceDestinationId":"AW-403308866","tag_id":109},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-403308866","tag_id":107},{"function":"__rep","vtp_containerId":"AW-403308866","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":102},{"function":"__ccd_ads_last","priority":0,"vtp_instanceDestinationId":"AW-403308866","tag_id":106}],. "predicates":[{"function":"_eq","arg0":["macro",

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 42, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2052
Entropy (8bit):	7.855094948974568
Encrypted:	false
SSDEEP:	48:O/6GwINXdIEENXb9PP/PmIjro2l92Dw/n9A1kaXBifFBM5hKAnG/:OSlIhdwHjrfgMlAaJ3MvrG/
MD5:	93143E775B96BC4FE41E17FE6C36D94A
SHA1:	BCA7354771EE6543507F5C2A6E8155435DED1A36
SHA-256:	53521C6F974E3603D2F950CDAF5DA77D0BFC129BDE7DDB617F69933C9635B017
SHA-512:	E8B934AB4E17A4853A555464F191B3DD2B2CD11EED49678D4F8B9C99825E2321A0F26A619725572E3C0129964CEA9B1315094A95C5E4EA29FEFA5F7D887607AE
Malicious:	false
Reputation:	low
URL:	https://travelbusinessclass.com/build/img/static/trustpilot-rating.png
Preview:	.PNG........IHDR.............d.....pHYs.................sRGB.........gAMA......a.....IDATx..{PTU.....K........#.i...o-...8.4N.G3.S.+..9c3Y....6....g%"......,/.a....97%..sw..a.......s..w.Y..Z..kg...'.n.B......1k..m[..!.B..A...#....#....#....#....#..0k....a...l.Y..`k.kqX.Y.oa@8f..Xg{.l.y...>.%.8,..l..G]g..c..#...0.{0BY.6..I...Z..rm..{.s ..p...v.....\..........[.\..R...x3\|C.....;.7.....+^.."..~z).a..kqX.Y..../z.j../..).l.N...vB.I.C\}1.k ..r-.K.6K...K.3}.Z..x..Z8kgq..y...=.....!..k...8...vpi.vW:Y}..S..^O=.........%]..xJ....<.n..~.a...!m:......k.\...M.. .o..l.....#..%..P(./..mk..%..keG;....O....,W......!h.b...:..W...^.c.-..'r.S.l.....wBe...\[....hl..X.u.t.a..kk0..N....g;%.eM..n.S.k...q.,......B..C#1.o .......u..dM..J9f..!..u...n..{.$..d..R.j..,...O?..F.JTi..$....447..huM...I1.#....B.;.'....[.".xq.....3.Y07.......8...9.S.@..".(...`N4..-K:.UiQR.c..u{z..n...r....k2....R.P...NbA.~..E3...45MZ.U%`\.N.V.`*<.9S.....q.(..'.#.u.q.WU....[s.H.D....

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	473
Entropy (8bit):	4.309136185527285
Encrypted:	false
SSDEEP:	12:mi4NDLBU8eJh0NIDLB86jN8YdEWDdEFhn:mi428esoJjCYGWDGFhn
MD5:	53F64AD9FDD455AEE644B6935843ACB2
SHA1:	8C9E08443741B4503074685271133F120591FE4C
SHA-256:	BFDF1133C98FD1494A138144D6F52B3679D49B79F8F9F339AA9FC6BBE23F3405
SHA-512:	02DAE07B826796BD08636BA3F6302137047269BA6AA473FB95F5656B632B82DB1639DDD376A1BF54E777BE3FF40DD8E24BE18F1E9E4FFC215227D74CB4E63C01
Malicious:	false
Reputation:	low
URL:	https://travelbusinessclass.com/favicon/tbc/site.webmanifest
Preview:	{. "name": "Travel Busines Class",. "short_name": "TBC",. "icons": [. {. "src": "/favicon/tbc/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/favicon/tbc/android-chrome-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#8a194f",. "background_color": "#8a194f",. "display": "standalone".}.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Ftravelbusinessclass.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70857
Entropy (8bit):	7.993208981606479
Encrypted:	true
SSDEEP:	1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr
MD5:	416250F60D785A2E02F17E054D2E4E44
SHA1:	21572C9751E5A3DC20395BEFA0FCB349C32C4811
SHA-256:	0A012CF808A24573168308916092D2D4BD3F2B4AF8E16B59167013CC77ACEE55
SHA-512:	CF1E7ACF47464F00D206E9149475E22B8EA5A31727FA16344CD151384D850B83ECE5E9ABE4AC62861DBA0DC3D3410955611D94665B60E2FAA0C3D7A3D7C88404
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx..u.]....{.s..{F..!N..K...B...EZ...B...w..!..Ml2...G...3.IF....o.Cg2..}...Yk=[.x.].p.X........... ........;..-.lN..R.H..I..!.@).u.:..>...M...Rx.{8...0.4t.r...2]Q..\6]5.=.@Y.]..............f].g.Wz..Z..E.>-..8.... !.B$.VIA..+....a)..-v........I..xSk..C..z..g.s'.f.I..t.N..R.u... -K.n.E.ve.;m..7....i.#.....&.._A......f_.]....."n..!..zbn.N>..S..o^...p...'..<...+.....(...b@#.h`...}.1}\.s.}....=.O...K....7..9...m.....d.. $.....).....%I.9....B.........._K....P`.7..~=...l.....y..2.(.J..8.+YW.....}.T..wJ.t~9...w...........N...>...dTA.....DL.g=p..}6..6oZ.....w..-8k...8.+....a[p..3y.. ;x.57;.^tT.. .(........v.....u.1#.<..x..`.....&....&{...o.....J[...kJ.i.B...U.H.:.^x....!.~c.J..6.n..~M.\|...........l.l..@H..J.r....).....&..(.....>^n?...(......U..F...'Vn?.;.[....[........../.^~...T.9zx.w\|R...>*.......B.]w..5bk:B%...RC....W..h.!J.%`U..0.....3a2.nvg.].....+....>..b..x.`T..{\i..n..._](L.Y.]....p.cG

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	78388
Entropy (8bit):	5.329878042535201
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QqSYTZ02LKVsdmpyKcicxDx:RIT7OXVs9ZVKBvYj8wKcHx9
MD5:	BA76916B18D102F56653992A875F9DCE
SHA1:	9552AEFEA5F2C30CB5A57DF4146781B989AEAFBE
SHA-256:	7FCDF877097055F096381D0D8DD125BCAC87214E623BEE0039A96BEF8EF1CAAB
SHA-512:	74223DC2B24F81B34D87C21F72A0234B79DD393233639F6565292C89FB11DA6AA65B9D4FFE7E55416BBEE60F821C508C25068E9BEDE3E6D4592F13F11EFF1F22
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	4.5751357289997205
Encrypted:	false
SSDEEP:	12:trOTU3IbtORSbcwk/8ZOxvbjy9SOyvVj0BZO8BAYII:tKTU3FRLwk0wg9lW+Bw8BAYII
MD5:	3E2D1558CE79E2FADEAB5EE6720FB547
SHA1:	896CB262F482015A32DCF5F31E31FC60AA7F99BE
SHA-256:	2D6AB18650753C8735AD27E8825B55816A61039D552BB0FE6982D64A89E13C52
SHA-512:	DD25743EF782C0A5D707C4B3CC1562F3C1D436AC4589F854E7ADCE01335E616A4CFA4794887D7B89E4BF50928379FD36D7C7F2BE3D1171892BE75431FB7DBBD7
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/images/pattern/11.svg
Preview:	<svg width="40" height="40" xmlns="http://www.w3.org/2000/svg"><path d="M0 38.59l2.83-2.83 1.41 1.41L1.41 40H0v-1.41zM0 1.4l2.83 2.83 1.41-1.41L1.41 0H0v1.41-.01zM38.59 40l-2.83-2.83 1.41-1.41L40 38.59V40h-1.41zM40 1.41l-2.83 2.83-1.41-1.41L38.59 0H40v1.41zM20 18.6l2.83-2.83 1.41 1.41L21.41 20l2.83 2.83-1.41 1.41L20 21.41l-2.83 2.83-1.41-1.41L18.59 20l-2.83-2.83 1.41-1.41L20 18.59v.01z" fill="#000" fill-rule="nonzero" opacity=".1"/></svg>

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.310869988350936
Encrypted:	false
SSDEEP:	3:xPX/Waxnuns/gnS8/ZoS8/ZoS8/ZoSISHmn:xPvW8uns/4S8/ZoS8/ZoS8/ZoSfmn
MD5:	377105D22A8A27058C4EAB7D702EFB52
SHA1:	FA82792A867F68D3FF305FB53B50552A5E1AB37F
SHA-256:	B980539E07D0B554AF125D34F4F60B96A08C963490FA4CAE6A92E31597BA0937
SHA-512:	F98C9DEA46A1ED00A65C1AC92ACC6ACB1A5671E59AF3042B5A2BE3052FD5CD10F4E82E236E426F2EA6FA152AE892A10DF9EE37283A14AC8017112955AD350F47
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSMwkbHZYmRMgQ6hIFDZmyzxYSBQ1wzZ89EgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNBu27_w==?alt=proto
Preview:	CjYKBw2Zss8WGgAKBw1wzZ89GgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw0G7bv/GgA=

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	442
Entropy (8bit):	4.5751357289997205
Encrypted:	false
SSDEEP:	12:trOTU3IbtORSbcwk/8ZOxvbjy9SOyvVj0BZO8BAYII:tKTU3FRLwk0wg9lW+Bw8BAYII
MD5:	3E2D1558CE79E2FADEAB5EE6720FB547
SHA1:	896CB262F482015A32DCF5F31E31FC60AA7F99BE
SHA-256:	2D6AB18650753C8735AD27E8825B55816A61039D552BB0FE6982D64A89E13C52
SHA-512:	DD25743EF782C0A5D707C4B3CC1562F3C1D436AC4589F854E7ADCE01335E616A4CFA4794887D7B89E4BF50928379FD36D7C7F2BE3D1171892BE75431FB7DBBD7
Malicious:	false
Reputation:	low
Preview:	<svg width="40" height="40" xmlns="http://www.w3.org/2000/svg"><path d="M0 38.59l2.83-2.83 1.41 1.41L1.41 40H0v-1.41zM0 1.4l2.83 2.83 1.41-1.41L1.41 0H0v1.41-.01zM38.59 40l-2.83-2.83 1.41-1.41L40 38.59V40h-1.41zM40 1.41l-2.83 2.83-1.41-1.41L38.59 0H40v1.41zM20 18.6l2.83-2.83 1.41 1.41L21.41 20l2.83 2.83-1.41 1.41L20 21.41l-2.83 2.83-1.41-1.41L18.59 20l-2.83-2.83 1.41-1.41L20 18.59v.01z" fill="#000" fill-rule="nonzero" opacity=".1"/></svg>

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34944), with no line terminators
Category:	dropped
Size (bytes):	34944
Entropy (8bit):	5.5958014049994995
Encrypted:	false
SSDEEP:	768:pu1TsT9XXw9aXrFUEJ01MPT8lvQ/Y3TSefmwSyzeasx1Gcr+jgM:9xxoRTSAxsj1r+jD
MD5:	29F97FC2BA02FABCA13BF6E365E68C0E
SHA1:	0AFED59F4F560D71C212DAC1D7A56FCEE49EE0C3
SHA-256:	E70D6B30741D45FB5E678DD69D3B43E3318454A680ACDBC40888C2F56741CBE1
SHA-512:	8B4CF156D75B38194ACF4AFAEF9B85ADDBC7357C1566880F947E9918BFEF71B29F9039A7423B3D93B3761BE184492ED9F97F3FC911790BF7CAF49D803CB49D48
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkwidget_react=self.webpackChunkwidget_react\|\|[]).push([[963],{99393:function(e,t){Object.defineProperty(t,"__esModule",{value:!0}),t.ORIENTATION=void 0;t.ORIENTATION={LEFT:"left",RIGHT:"right",BOTTOM:"bottom"}},18619:function(e,t,l){var n=l(17907);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=n(l(23101)),o=n(l(88436)),r=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e\|\|"object"!=typeof e&&"function"!=typeof e)return{default:e};var l=s(t);if(l&&l.has(e))return l.get(e);var n={},a=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var o in e)if("default"!==o&&Object.prototype.hasOwnProperty.call(e,o)){var r=a?Object.getOwnPropertyDescriptor(e,o):null;r&&(r.get\|\|r.set)?Object.defineProperty(n,o,r):n[o]=e[o]}n.default=e,l&&l.set(e,n);return n}(l(98661)),i=n(l(45697)),u=n(l(70147));const c=["component"];function s(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,l=new WeakMap;return(s=function(e){return e

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21222
Entropy (8bit):	4.826416296626443
Encrypted:	false
SSDEEP:	384:W8ZxJiAol+6PY0JsV2hpwm00Yu85H7X11f6zBJTk+TpY8eyZUZ7380vNYlB1QCgP:W85wlBPY0JsV2hpwd0Y95H7X1kzBJQeM
MD5:	EDCBBA4D13748BC81A5CF17CBBFCBFA2
SHA1:	F4D02D7A06DB9815BF7ADBE42F7723E915BB39C6
SHA-256:	ECB7F98353DFD84DF94089900FC7AC1AE39B983A090B65BB019B21CF03C99AB9
SHA-512:	21EDC962BC5BC7E57CF23F8D8A923E5355B1FD34D72F952F83046BAB1FC08339E75D8786E7FEAA5B10215661C41C7CDE5D3DF220F54727E798F489A9884681F1
Malicious:	false
Reputation:	low
Preview:	{"widget_id":"dwzeNfFJka","site_id":1676623,"widget_color":"#093637","widget_font_color":"light","widget_orientation":"bottom","widget_mobile_orientation":"right","font_size":"15","font_family":"Helvetica","font_type":"normal","locale":"en_US","show_rate_form":1,"hide_ad":1,"contacts_ask":0,"hide_offline":0,"shard_id":"ya","build_number":"1729685307","avatar_url":"\/\/files.jivosite.com","api_host":"api.jivosite.com","tel_host":"telephony.jivosite.com","telemetry_host":"telemetry.jivosite.com","err_host":"err.jivosite.com","widget_color2":"#44a08d","power_gradient":1,"pattern":11,"label_bubble":0,"online_widget_label":"Need help with your flight?","widget_padding":100,"offline_widget_label":"Send us a message","offline_form_text":"Hi. \nHave any questions? Ask away!","bubble_color":"grey","callback_btn_color":"#4caf50","power_button_color":"#4caf50","enable_sounds":1,"enable_extended_file_transfer":0,"enable_rate_reset":0,"rate_settings":{"type":"two","icon":"smile","condition_name":"m

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17656), with no line terminators
Category:	downloaded
Size (bytes):	17656
Entropy (8bit):	5.35045621321622
Encrypted:	false
SSDEEP:	384:boUJJ1QY4mmPY00rANLH8yMiqwIlEeJMz8P0vIbqWcPWv6:f3yCAK/9DPXWWcPA6
MD5:	6BF2A33AD62E89B093F287DF85CE2F1F
SHA1:	474EBA8BC08D7F4098573F5822934CED7E56EA13
SHA-256:	817E2572314FDAE52D4603F9C6D034E2DA93A2FD0A0FFC322F59659EF1087723
SHA-512:	4040B67813EC775351D6C9ADA4CB802C501AFB8AFD8A19DFC821869A4F79E7F80F78217612C336BB583CCEEE8F43321E664A237DEE75876DC677991D3E567978
Malicious:	false
Reputation:	low
URL:	https://code-eu1.jivosite.com/widget/dwzeNfFJka
Preview:	!function(){"use strict";function e(){return document.currentScript?document.currentScript:document.querySelector("script[jv-id]")\|\|document.querySelector("script[data-jv-id]")}function t(e){return e&&e.match(/https?:\/\/(\S+(\.com\|\.ru\|\.tech))\/(widget\.js\|widget\/[A-Za-z0-9]+)/)}function n(e){return e&&e.match(/^https?:\/\/(\S+)\/script\/widget\/([A-Za-z0-9]+)/)}function o(e){return e&&e.match(/https?:\/\/(\S+)\/script\/geo-widget\/([A-Za-z0-9]+)/)}function r(){var e=window.location&&window.location.protocol;return-1===["http","https"].indexOf(e\|\|"")&&(e="https:"),e}function i(){return window.jivo_config&&window.jivo_config.shard_id\|\|"main"}function a(){return window.jivo_config&&window.jivo_config.telemetry_host\|\|null}function d(e,t,n){var o;e.addEventListener?e.addEventListener(t,n,!1):e.attachEvent&&(e.attachEvent("on"+t,(o=e,function(){n.call(o,window.event)})),e=null)}function s(e){try{d(window,"scroll",e),d(document.body,"mousemove",e)}catch(t){e&&e()}}function l(e,t,n){if(win

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	331164
Entropy (8bit):	5.6139062871362455
Encrypted:	false
SSDEEP:	6144:V4r3GbgBuDork2639cM8Gp/B2Nttu9BW24nOe:urocuDorZtAET
MD5:	6BB02B1132032B03A8CA59BBDCD2AFD4
SHA1:	381878FD97DED0BFFA395C53F8F0A0D30882F246
SHA-256:	3CE9FB0CE7D5BC3B79F6FD4AFC2C3F6DBA559A8975737DA382D34445AB2EF357
SHA-512:	A418D8CF2D8AC67FFB7AC2B38307E1DAAB67DA334C30CB7450E028CBA4324C795345F443D68836FB7298828997A246B8DF05490C87AE89E6F51A7A5D5E9E56D1
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	downloaded
Size (bytes):	2891
Entropy (8bit):	7.73315881281975
Encrypted:	false
SSDEEP:	48:AszfJR5CWxrzNvl8+k90fIBid1oPuJ+d4TOpwMs17l+kBJA1VNLt/4P58:1fJtNvlvm4USlJ+yMFABJAXkB8
MD5:	3DA4F06EDD0C1577F0696F6661766011
SHA1:	BD5CEB4F88A4BE058C03EDE6FC3C1D75D1459858
SHA-256:	B2B327C89C95860B196B81D35E5111FC4B37E0712CA89D2A7D6029DECC9B5E22
SHA-512:	1D5A9158FB3BE0FE45B9E0C1B9B996CDDF4F561CD1AE0E3A22A3F218DD00B2692BBC15A7C4D68A4DECDD790FEEA3915D544E5548998AEF8EC1A0852E2FDCB2EC
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/static/user-3.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................C.C..................................................................................rp.4.OUo....fR..s..I...g+...Fd/.L].....T.D..Tl...L..u.cs.l..@.Y#.......{S,.w....m.6d.....u.k=7....~.....N:..x.\\|@..y....4........i.c...{U..?..45Lj.0U.(>..s..K.rC.?.....7%.....N..Z....jo/...&I.yd..........%0.I.....#................................".............5...6._....{.,...L....D.{...f..k......a.4.h....;...N....'=..]3L...W{...p.#...^....!....C......@..s...'.ne..6"...0...)."N.....",..D1cUf6."@..C.I.)..a....U^....~+.c........>.V..I....Q.....E6.G.5...i..H..._V..r..A..<en.D....I...P...?.1..n....f..K...CG.p.L...X"H%...)1...-....VV.hD.....S.d.N...^..}..".....(..Q.~..u.PV.Q........sm&......Qg?.z........L...@4B.F..V*.P....T..x....m=.\|!r.Wi.i... Im..F(....s.6J.+M...b...G..S..3.0..<..QH.n...r.w11....f.O"...G.&..y.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23179), with no line terminators
Category:	dropped
Size (bytes):	23183
Entropy (8bit):	5.355976265480394
Encrypted:	false
SSDEEP:	384:znugtq1SIh9esuy3Gi1T0iHLefTFJb3LRiY3NCPP0QYILeZf0rr8C4FYEs:LTQJh9e63GLFJPu0F8eZf0rR4FYEs
MD5:	40E2FC3183FDFFBB3AB7212CD4964E66
SHA1:	395A9FF8707D86A6EC07645CCF091A3BE35849CB
SHA-256:	BF3BA0EDAB257C56DB42E010D066DF2CA38EB8327CEE5F0DE28C193E604E0B22
SHA-512:	BEEF070AD6D06EA087508E426565D75BF3F7B055DCD124A44FE94AC42C7D45CC3FC39F5BD9E3FDB009AA2276E1531D76DFF764E976F5A1409D5D4BAA8EF8DDB2
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["trustpilot"],{9669:(e,t,r)=>{e.exports=r(1609)},5448:(e,t,r)=>{"use strict";var n=r(4867),o=r(6026),s=r(4372),a=r(5327),i=r(4097),c=r(4109),u=r(7985),l=r(5061);e.exports=function(e){return new Promise((function(t,r){var f=e.data,d=e.headers,p=e.responseType;n.isFormData(f)&&delete d["Content-Type"];var h=new XMLHttpRequest;if(e.auth){var m=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";d.Authorization="Basic "+btoa(m+":"+w)}var v=i(e.baseURL,e.url);function g(){if(h){var n="getAllResponseHeaders"in h?c(h.getAllResponseHeaders()):null,s={data:p&&"text"!==p&&"json"!==p?h.response:h.responseText,status:h.status,statusText:h.statusText,headers:n,config:e,request:h};o(t,r,s),h=null}}if(h.open(e.method.toUpperCase(),a(v,e.params,e.paramsSerializer),!0),h.timeout=e.timeout,"onloadend"in h?h.onloadend=g:h.onreadystatechange=function(){h&&4===h.readyState&&(0!==h.status\|\|h.responseURL&&0===h.response

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	downloaded
Size (bytes):	3434
Entropy (8bit):	7.80456189188569
Encrypted:	false
SSDEEP:	96:igRyT3FXtfh3kNqPtoZoFMB2Ks+qwpPKyaImE2OB:/6XbJFPFMIKB3JF72OB
MD5:	25D1B2D2E76CC799B0CA66D3D439DD41
SHA1:	939258E194470246A15230B22CD791D3CF7056DD
SHA-256:	CB8461EFBB3972D83ABE7E49EEB4D31BBE8E982BBA30F10D4C6FDB538783E257
SHA-512:	EA55BD752A66289FCB5D1BF7F8C68C31EFE19138EDDDB6AFB36E89DBD8DF1645473E123806B24ECB4A5AE46EE235F83841E72A92A70A8C6FE22732D7DC977154
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/static/user-4.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................C.C......................................................................................a.^Y...6e..\....,..x......iRx..$.~.?pL.6I.Q..i.1......(..1..q(...c..u.7..i..@.d.\|.%..4.P ..X\|.@e...J.g.l.7.t.3A..yp.0_RX.E...b4.)........O.....z#...A...[=.J...+..p.5....l..[....ZT-&..fgas[:....s.]...x.%.e.ID..q.\.Xr.1,K...$.................................!.............C.....).mX5.0..L...k..j....'....Z..8..}4b.%......t....rI.,....)...m.ZU..$...B.C....]U).-.`....H2..cu..Tb..l..Z4.f.... .W.q....z1."..6...O...U.M2.8..7j8.........Ho......:O..nd...A._...tq.z.\.d..TS9.S.......P..U%.1...&Y..z.v.cd..Yz~..t[..yYN..5.I...-:..-z.vt.?.W....\|....y.O........=.~.J...."dU.w..W.H.SD.#..]!..$RLG..%].t.R...XnZ.%..G.y.@]TT4~9.....Qt6A.6....l5m..!...B....b.........f.-.W.%t...6......\|I.1.u.1.F..[m..k...Q=...H.c^.".z.[.<.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95483
Entropy (8bit):	5.471446926920247
Encrypted:	false
SSDEEP:	768:IACNernkQ1AnAImlKykcJqzAjNAMAxT+2oIZTTLb8kpOM9SdGW0s+Tj1+CUd2hfM:IA9nkQdlKMDcAIVTn8kpOM9AH0sw4CDI
MD5:	81078F48EB510472B35927A8A9F4824D
SHA1:	A60E4CABF8B8F7BDF97B85D0A87B35B0B65FF473
SHA-256:	655107C111B6EB743DA5C9F6001413F1E92E5B8F8B3F1BBD8B0E5A226CDCF551
SHA-512:	8F751334E1EB5316036481CB9FE35E96D2ECB7F26D97A888719A44AB99313E06F7857CAA30099D75E772A3252A288B554869E52C482EE14F8C1CF85E86A5AB4C
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/js/main.d24cded2.chunk.js
Preview:	(this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[0],{171:function(n,e,t){},175:function(n,e,t){var r={"./adult.svg":176,"./airplane.svg":177,"./calendar-gradient.svg":178,"./calendar.svg":179,"./children.svg":180,"./city.svg":181,"./clear.svg":182,"./close.svg":183,"./infant.svg":184,"./minus.svg":185,"./next-disabled.svg":186,"./next.svg":187,"./prev-disabled.svg":188,"./prev.svg":189,"./search-gradient.svg":190,"./search.svg":191,"./sub-item.svg":192};function a(n){var e=i(n);return t(e)}function i(n){if(!t.o(r,n)){var e=new Error("Cannot find module '"+n+"'");throw e.code="MODULE_NOT_FOUND",e}return r[n]}a.keys=function(){return Object.keys(r)},a.resolve=i,n.exports=a,a.id=175},176:function(n,e,t){"use strict";t.r(e),e.default=t.p+"static/media/adult.1ee3e1c3.svg"},177:function(n,e,t){"use strict";t.r(e),e.default=t.p+"static/media/airplane.bfb7fb00.svg"},178:function(n,e,t){"use strict";t.r(e),e.default=t.p+"static/media/calendar-gradient.cbb43ad7.svg"},179:function(n

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999430459330514
Encrypted:	true
SSDEEP:	24576:scG6Yujf4vK/paKksut5hYsWAvh7F8PRmCKutqEBqNupmykP5:slivR1ho5hYsWMh5Wi1kczP5
MD5:	61CA08F6CF53D5868827EDBDFA9746C9
SHA1:	D436A909173A567C552B632261331A1BB782687F
SHA-256:	A87D447D015B8FC511BD8403B28A05FC23AAAC44D036732BB6C6C78A4E96B70B
SHA-512:	1E5B4B4732D8A93A5F965AE28BA0889B3B247B178C545562791FA5C91E245E337DDFCCC7D705DBEE843A36E4DC2ED6B6D5814665B2A66B12473ADD17FC9F82AC
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:6
Preview:	.X..fE.][.^..... ..&...\|o.YH...9B.D....y.L.h.........8)..JH.x?....i......Ud@\|.qC...wI.;I.TH..<...z......r.x.b......n...^Q8...l...a]...N.^......c...:..RK..<.+A.s...f.Q..:N{).3.\......4.@.P.Y..6.4...2.,WJ.a...CG............_.A.s.wo(.91..GR.%.r.....F@.B.g";K.$..=.c.(2...J...E.y+.u.h.eU.P.gz.N..Gh.?.o.....\ ...T..}...!.(..5h.B.$........77.....D..#........l....].6.3.....K..PO..~..[O...tM...3.a...2.;0..m..0.pzL.t..X...&6..;..8..E{;._8.i...Z.<..<. ?..Z....}...d#..])..K:.$........5[......B..AO^.S.,...Gs=.7$_d.x8F15..k...<..P.i\|2..R.".B?4u.,sq.^UC.....cp.&.[..Xr.@........p.8.3Q.avZw....Plh..........b."\|=.tq.q.......#..p.y...SM.....oa....^.zE.;.v... .b.+=..\|P<3q.......o`.......v........t..i.{6...^......m...SL.).....SM1.....w.....b..`....B.9h..u'..$..?.I..E.C.....".B..V.<sV...?...........gcy.UE..~..0.X9......RxFw....9.#~..IA)..D....M5(....ib..<..P.#...CY..(s.......w.[..~).c.Q.)...6}7...b.c.......U.B...Vc"5....~.:...w..B..&.. ......d

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3356), with no line terminators
Category:	downloaded
Size (bytes):	3356
Entropy (8bit):	5.320231678967402
Encrypted:	false
SSDEEP:	96:xbDueqeEiaK7K58VALBYVucZCj67ak2ZIhz6E:5XYito8+mxHavE
MD5:	CA71B5BEF6306369D58924AF136C9887
SHA1:	BAA6F84E0BD45D7DFA20568A1B460AD786F9D4F0
SHA-256:	4EC5D05078DEAB6FE68931655EC8F733B50CF27CB37E08B07FE5848EDC6F435A
SHA-512:	1B41B40369173FAA33D510326DFB3AA080F83A37B1096140DD432377335C57BB21310E0495E2A3A3F2BF798EB75A6C078BB6C7F460BB6AE360C5679D0107D4EA
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/js/runtime.acf15c91d9fc5d0b2b25.js
Preview:	(()=>{"use strict";var e,t,r,o,n,a={},i={};function l(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={exports:{}};return a[e].call(r.exports,r,r.exports,l),r.exports}l.m=a,e=[],l.O=(t,r,o,n)=>{if(!r){var a=1/0;for(s=0;s<e.length;s++){for(var[r,o,n]=e[s],i=!0,u=0;u<r.length;u++)(!1&n\|\|a>=n)&&Object.keys(l.O).every((e=>l.O[e](r[u])))?r.splice(u--,1):(i=!1,n<a&&(a=n));if(i){e.splice(s--,1);var f=o();void 0!==f&&(t=f)}}return t}n=n\|\|0;for(var s=e.length;s>0&&e[s-1][2]>n;s--)e[s]=e[s-1];e[s]=[r,o,n]},l.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return l.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,l.t=function(e,o){if(1&o&&(e=this(e)),8&o)return e;if("object"==typeof e&&e){if(4&o&&e.__esModule)return e;if(16&o&&"function"==typeof e.then)return e}var n=Object.create(null);l.r(n);var a={};t=t\|\|[null,r({}),r([]),r(r)];for(var i=2&o&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).forEach((t=>a[t]=()=>e[t]));return a.de

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	dropped
Size (bytes):	3997
Entropy (8bit):	7.819798991146168
Encrypted:	false
SSDEEP:	96:RZCn1hGZPB5mTNW7oDEpkBpSY0SbdRcbiQYZ:RZCn+PB5dkEpkXTbdRcO/
MD5:	541DA7B87090846E4140AD4374F31203
SHA1:	CB1ABBE7D64CB1299BB05D55DFD03CC9E39506F9
SHA-256:	CF19C980171CFCA70694F47B558767BB84E5FDF89F4038F291C5E020DF9A52BE
SHA-512:	A6A95D05DC920313BBB2DE2B9D0A94F06DAE1770CDB8B533DD9B9F33EF02225B8DCC165537A89FF9EB618D62F0CBE1FE21F80947D65DD90ED69E96A7C786C854
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................C.C.......................................................................................S.....W:..d.e..q.Dn%..[.W....}..cjfW.{.({1.h......S..M6.{.Z2.../..yj...>..[^.9 ...T,.K...w.J.d.X...K..\|av\.1.^,..ZI.>.w.#.8.....7y..R.J.K[.6,...\@....v.v..o.aBJ$.v.B..)8.Q....5@x..TL..p.Ir.$..V..r......v.gF..o]......!..l.z.......b_...%................................#%................^}T..=b#....Vov_...8....V.....?iu.5.\......../b...#.~L]................./_.n...........V..k.. ..y..<...l... cn....f.....Ve..y..b.!...'...M6N........:i.V.Oz...Q.,r.....'.'L'......f....Y=....O.\|.......8..r.L.5.B.H..Z>/..qy......e.].R,..S.+....T......+...^.U.z...k8.<{8.>.8....W./.D^~..vP.?MEK.'l]W7..@..@\`_..W..[..!.....>..\...>.X.36......~#..ts....t.v},'.gA.".m^H'.3..H..=X.E....T\|.J6go..C...i....,.....".hl"...\.RU.2..E.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.1845755021937245
Encrypted:	false
SSDEEP:	3:InIxnuns/gnS8/ZoS8/ZoS8/ZYn:runs/4S8/ZoS8/ZoS8/ZYn
MD5:	49E198F0BAD46DBA982665433C6FD9D4
SHA1:	488DA4B67A0754B4D73603A5B212C1BF1BCAA8CB
SHA-256:	B80A2866ECDD820261C0040C019C0E1D610852B661D561590C3442FA6D6DB000
SHA-512:	87943053D47C6FD618E75D7B2E759F180B691EDCE7DF185AB9B4001125B22BB506CBBA5E8DF3A0CA22279970F1FADD879736AA71B07CE119675200BCCA823E9C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSLAktApFcfpy_xhIFDZmyzxYSBQ1wzZ89EgUNkWGVThIFDZFhlU4SBQ2RYZVO?alt=proto
Preview:	Ci0KBw2Zss8WGgAKBw1wzZ89GgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
Category:	downloaded
Size (bytes):	5808
Entropy (8bit):	5.433895484981269
Encrypted:	false
SSDEEP:	96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m
MD5:	9AA341AF370C4E59155717260BA0F282
SHA1:	0C1216ECEAD8D1409557C843D96202C063F3F252
SHA-256:	1112436ABEA08C851302BBA4D4E37A27E25E5EC26B20474667A3369D41154BAB
SHA-512:	E6663F8406D859A7AE65E6EB9512ED1E79244B8F5B2119823F80FED99C17DD4A086CC17083F3CD70B6DD990C39B3BE80142F303A7C2A9FBB9302147E700FA5CB
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/sounds/notification.mp3:2f845e86e4a664:0
Preview:	ID3......vCOMM...0.......Xiph.Org libVorbis I 20120203 (Omnipresent)TCON.......(148)....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.774459716027629
Encrypted:	false
SSDEEP:	3:xkNBiumzthLuOwNdCGPVnKlP:xk+umBDwNLVKlP
MD5:	0F913338BEA6BF05E9C332A29729DE32
SHA1:	6ECA45FA1912CB669C036D49259A7D5211198659
SHA-256:	A0025869EB6D5D323F23C1A54DF832885763740732E9CAA5A5B055C650D5A5AB
SHA-512:	FA43E493789E9BE8774FD5B150B860AFB126714143A812ED9EC5FF2259A49D8499BB897C5E4435A233E1D7AA6B42194F2829DECB36E567EFE98A42416962E707
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkdJ2Jjibb-OxIFDSFOuRYSBQ2zHpn2EhAJPcUkJLzfCz0SBQ3NdivlEhcJ8R3_xbvvKPMSBQ3FG2nSEgUNDWCCyQ==?alt=proto
Preview:	ChIKBw0hTrkWGgAKBw2zHpn2GgAKCQoHDc12K+UaAAoSCgcNxRtp0hoACgcNDWCCyRoA

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	downloaded
Size (bytes):	3997
Entropy (8bit):	7.819798991146168
Encrypted:	false
SSDEEP:	96:RZCn1hGZPB5mTNW7oDEpkBpSY0SbdRcbiQYZ:RZCn+PB5dkEpkXTbdRcO/
MD5:	541DA7B87090846E4140AD4374F31203
SHA1:	CB1ABBE7D64CB1299BB05D55DFD03CC9E39506F9
SHA-256:	CF19C980171CFCA70694F47B558767BB84E5FDF89F4038F291C5E020DF9A52BE
SHA-512:	A6A95D05DC920313BBB2DE2B9D0A94F06DAE1770CDB8B533DD9B9F33EF02225B8DCC165537A89FF9EB618D62F0CBE1FE21F80947D65DD90ED69E96A7C786C854
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/static/user-1.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................C.C.......................................................................................S.....W:..d.e..q.Dn%..[.W....}..cjfW.{.({1.h......S..M6.{.Z2.../..yj...>..[^.9 ...T,.K...w.J.d.X...K..\|av\.1.^,..ZI.>.w.#.8.....7y..R.J.K[.6,...\@....v.v..o.aBJ$.v.B..)8.Q....5@x..TL..p.Ir.$..V..r......v.gF..o]......!..l.z.......b_...%................................#%................^}T..=b#....Vov_...8....V.....?iu.5.\......../b...#.~L]................./_.n...........V..k.. ..y..<...l... cn....f.....Ve..y..b.!...'...M6N........:i.V.Oz...Q.,r.....'.'L'......f....Y=....O.\|.......8..r.L.5.B.H..Z>/..qy......e.].R,..S.+....T......+...^.U.z...k8.<{8.>.8....W./.D^~..vP.?MEK.'l]W7..@..@\`_..W..[..!.....>..\...>.X.36......~#..ts....t.v},'.gA.".m^H'.3..H..=X.E....T\|.J6go..C...i....,.....".hl"...\.RU.2..E.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	248519
Entropy (8bit):	5.499141073542002
Encrypted:	false
SSDEEP:	3072:QFkA8A+AqBiWI6dGYx0DkGg9xgtJ6sdJEh1oXweP3oJSsI3m1dN:QFMA+AqBiid9Gg946sdJX3eSskm1dN
MD5:	19318B603D07D290FFECC7D55D604367
SHA1:	4111BC5F8F0D8FB120E1D1603B3A7B691B4F3FC8
SHA-256:	49897E1FDB47EAEC245D0F9074790B5351371A97C5AC655D39E6667A6420D56A
SHA-512:	0C6D6AED2214B2A1D25DE70CC8484383DC00DCB09228A2E9709493A1CA8ABDCE543F8D5B40418655F507870F4AF1DBCBB602858BC123D9B42523B8B627CA063D
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkwidget_react=self.webpackChunkwidget_react\|\|[]).push([[535],{36071:function(e,t,a){var l=a(17907);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var n=l(a(33119)),o=l(a(92664)),r=l(a(84827)),i=l(a(85299)),s=l(a(55536)),u=l(a(64758)),d=l(a(54720)),c=l(a(91275)),f=l(a(39976)),m=a(20344),_=l(a(19955)),p=a(21476),g=a(47060),h=a(31984),b=l(a(71323)),v=a(54415),y=a(83170);function E(e){var t=function(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function(){var a,l=(0,s.default)(e);if(t){var n=(0,s.default)(this).constructor;a=Reflect.construct(l,arguments,n)}else a=l.apply(this,arguments);return(0,i.default)(this,a)}}const O=l(a(4855)).default.name("Call");let C=function(e){(0,r.default)(a,e);var t=E(a);function a(){return(0,n.default)(th

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999651553938769
Encrypted:	true
SSDEEP:	24576:hb703B2JthcYNgbKePozWDqn33Dw2l/WGNAuskD2zc:J703B2Jt2YWbKewzWM3fpZAu+zc
MD5:	0C5A4BD14768FDBD956EEAC246D0002E
SHA1:	F1396D2A018F39D8A3F1C89AD1B717770D08E940
SHA-256:	05ACB016256DDE99CBFFB11197975F409A93B2EAFA79F9AB8CAFA32C75F3AC81
SHA-512:	CB0A051CE4D8AB2E795001D9E2A7CD5B35E072BA8A394F415EA8BBB51245CF1B128CA630FDDA28E32256B6D6F27F45704C2E4921C3A826E67B6DC507C35C6B22
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:1
Preview:	....3m.V.@_;R^@.g]F..!.1p.M#S..F..\|.......V.b......WF.q/.........[y&. UDc..H....X:o.%0~./.".s..->.....(u[....V.$....x.u.....f".B.{..;...Y..._oHz...+#>y4...:..@=.(.....R.9.Q.L%...(x%P....a1~@..V........df.....k...x...w...m.E2.f.....3X...V....OSW.......>N..o....g...0...L.SA.....NK.._..:.....0.....}...h..!&...@t..a..%E4\|...rC..'.....\...a..B...t..v......u^y..K:.BYL.^.h..&B.P..q..\|`.#...a.<..qI...N@...^.e..2.{...t+......:.....o..1...`_f"...:.H:~.Y.&.......I#....]IfNV...KP._k.~.....&p.1l...><4..\|..'....I5.=[$.;..9.".}.Y...G.x.........S..MwNr!y..\|..n.........>1J....j.C..`......U.....qT.....yQw..._...Vb.f..\|m..u.[.^\|}zG...gr...f.....'oJ......q......SL...u....a...;k....._^..#:..e.. ./EbK...',...O....4.f..=2&-...3X{.._P..g..sJn.% ..k.1+.m.H..........b+.....eB7./Z...n)+....mc....m.......\;.. .$....6..../....-"....P....2......g._....eU,..t...L^...&..........[..f....j~~=..../.U.,.....\.D)..p4z0..<n.G1)-u.U.._m........B........vlB...........

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8243)
Category:	downloaded
Size (bytes):	322374
Entropy (8bit):	5.573731586038206
Encrypted:	false
SSDEEP:	3072:+pWwiztG3ETCa0o/y0m5CptDY8/I8+yr/OUYhcDmuD0C8Gp/arTP2RKp:vG3gx0o0M/GUTd0C8Gp/a/2o
MD5:	7CD36E26F4A679EEC2257A15D591F228
SHA1:	62394447D77F9798D8BC6BF699728FF236B2F672
SHA-256:	570CD54A8245EEE378CD106F3B89091F44455FAA58A0EE5C22CED13AA18A5656
SHA-512:	15D647F32977ED9B8EE6CBC92D06321276241380FEE57BC9BAD6334A933B6142668B2AB9F96D3A08B35F9531A1DEF1FF698AFF2059B8B92EECE44AAC0A730DAC
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MQSGVHQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"66",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"auto"},{"function":"__c","vtp_value":"pay.travelbusinessclass.com"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_useEcommerceDataLayer":true,"vtp_doubleClick":true,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":true,"vtp_trackingId":"UA-191980430-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_ecommerceIsEnabled":true,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	50042
Entropy (8bit):	7.994084425952197
Encrypted:	true
SSDEEP:	1536:ygkdFN/NuuWswp+Ps+OKG/0avWwuafOnWyasa:a3JqpeNG//nmWyk
MD5:	322F6D015FD39CD61DA75E8C63F9049D
SHA1:	177D48C750AC3D93E25ACA1267E78A08A4B8C818
SHA-256:	2FE89F28A1EF8E27319352CD71E2CE65B1C5AD9C21B3206F9B7310A83EF747C3
SHA-512:	1D23F045BD0122B3421E33824FF7EEF389CAA81C21DC814FDC27D0AD441ACD1DA8217716FE6F5E16E15F77818541B85529FF3FAC85BA78AA1C3725DB2F32AD47
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/static/fumeie-home-page.webp
Preview:	RIFFr...WEBPVP8Lf.../......1.mU.........Gj......v.6.....g....2DU5. ..F....s.zF..u2.m..Q...z.m.ns].Kxj..%..[.F..........&.B..\|I .......YTM(...A....@....Z.D._a...k..Q...B.^.......L.._.w.\p..SxNNi6K .D..`s...&;.<K.'.j%mh...f.\|h..f.\..,t...U...tA#..-.!Zt..iI5.-)d.....c........p3lf..8Q.C..Is....b.Q...#...\K...u......?.m...s."w.m..g.N...?f.......\|.?..4.kE.Y..}A..G.!$;.jB..3.. ..V...9..X..._.9u......~0s...<YN..9M.~./l.k.......L.].nmS.N.&.c.5..$.&.5M...-.C.X.0....P........P.H..`.#....#.b.c.....":...oP.U.R4.,.z.>.h]Q..['<nO.~G.RHg...g....F..B..UV6XM....;S.3..-x........jt...V..Se].D{.g..5;.%..*........>X..V.t{i.X...E...M..\.j^..~..2o..N^...~.z...L9..Hr.......G....P..;.......x.=.%&..~8......ynn.)QeOs`.].....]T.....ym..Lk4..D5t.........[BH8.?b.y.F...r..9..'....9....9..WU...:#.O.....D....5.A.vf....W.6.fb.#.mAc.........5!.EI.L...p...ef........n.n...>.Z..r....?,Hv.6/.@. d..`Q..h.....I. !..-l....:.."I.&.......:.HF2.r.k...'m.{.;y.O.$...i@.U..]@.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	179684
Entropy (8bit):	5.8345228684802235
Encrypted:	false
SSDEEP:	1536:qv6gv6vL5HTKty/6C66rh5DuZyg2+2+H8RKk7y66u6Dd+A3kW4xUo6RFNPQxiOOA:X86LzPqMl2a1V3eWt
MD5:	FD4017FD774B7D106D7FDB476263ACCE
SHA1:	083194172864ED303B1CBD4864F2B2FBE9202D72
SHA-256:	19F2F963FE47E011AA5E496C2782B6D78093A212DE11787A02A189C689DD327D
SHA-512:	A498F7BBA8B587BD4258071B4AB05714AE848B7879CA96F15EC1DEDB4CC58287BB4B46E9C87E1FEB018C47EA65ED90FC61E2259132085A024E7450670CA39C84
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/css/d1dc0ec/widget.css
Preview:	@keyframes showmessage__ep_Nz{0%{opacity:0}to{opacity:1}}.main__xWT80{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:antialiased;font-size:15px!important;max-width:100%}.main__xWT80 .message__OYn4A:last-child{animation:showmessage__ep_Nz .2s forwards;opacity:0}.main__xWT80 a{color:#fff;-webkit-user-select:text;-moz-user-select:text;user-select:text}.main__xWT80.__mobile__KJKSD .message__OYn4A{animation:none}.main__xWT80.__mobile__KJKSD .message__OYn4A .text__Ag7ak{font-size:16px!important}.main__xWT80.__mobile__KJKSD .message__OYn4A:last-child{max-height:inherit;opacity:1}.container__LcCRQ{display:flex;max-width:100%;min-width:40px;position:relative}.__client__xsMy5{justify-content:flex-end}.__withError__RT901{flex-wrap:wrap}.message__OYn4A{word-wrap:break-word;border-radius:12px!important;flex-shrink:1;line-height:0;margin-bottom:2px!important;overflow:hidden;position:relative;text-indent:0;-webkit-user-select:text;-moz-user-select:text;user-select:text}.message__OYn4A:aft

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	341311
Entropy (8bit):	5.61408363656091
Encrypted:	false
SSDEEP:	6144:x4CyGbgBuzoLk2639cM8Gp/12N5tu9BW24nOC:KCDcuzoLr5AEZ
MD5:	1D3FC60C5778A759E022DA4AFF13D5EA
SHA1:	668A2B8060A9B65E05CBBEFBC29A01F411AAAA1D
SHA-256:	E1FD032B977A751EC489B3C415031B1179C688F06739D79E7FE8EEC40FF19D03
SHA-512:	22A28D3782DDF1E6AD5863632B8A6793496708DAF246B68BA1A4647519C7955BB5F1E6FD9F75BA8D77CECD21D381EBE5D24B4E4EC164EAC3AF0ED9F145F0926A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-270WFR6PS0&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":17,"vtp_value":true,"tag_id":9},{"function":"__ogt_session_timeout","priority":17,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":11},{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELE

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34944), with no line terminators
Category:	downloaded
Size (bytes):	34944
Entropy (8bit):	5.5958014049994995
Encrypted:	false
SSDEEP:	768:pu1TsT9XXw9aXrFUEJ01MPT8lvQ/Y3TSefmwSyzeasx1Gcr+jgM:9xxoRTSAxsj1r+jD
MD5:	29F97FC2BA02FABCA13BF6E365E68C0E
SHA1:	0AFED59F4F560D71C212DAC1D7A56FCEE49EE0C3
SHA-256:	E70D6B30741D45FB5E678DD69D3B43E3318454A680ACDBC40888C2F56741CBE1
SHA-512:	8B4CF156D75B38194ACF4AFAEF9B85ADDBC7357C1566880F947E9918BFEF71B29F9039A7423B3D93B3761BE184492ED9F97F3FC911790BF7CAF49D803CB49D48
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/js/d1dc0ec/omnichannelMenu.js
Preview:	"use strict";(self.webpackChunkwidget_react=self.webpackChunkwidget_react\|\|[]).push([[963],{99393:function(e,t){Object.defineProperty(t,"__esModule",{value:!0}),t.ORIENTATION=void 0;t.ORIENTATION={LEFT:"left",RIGHT:"right",BOTTOM:"bottom"}},18619:function(e,t,l){var n=l(17907);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=n(l(23101)),o=n(l(88436)),r=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e\|\|"object"!=typeof e&&"function"!=typeof e)return{default:e};var l=s(t);if(l&&l.has(e))return l.get(e);var n={},a=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var o in e)if("default"!==o&&Object.prototype.hasOwnProperty.call(e,o)){var r=a?Object.getOwnPropertyDescriptor(e,o):null;r&&(r.get\|\|r.set)?Object.defineProperty(n,o,r):n[o]=e[o]}n.default=e,l&&l.set(e,n);return n}(l(98661)),i=n(l(45697)),u=n(l(70147));const c=["component"];function s(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,l=new WeakMap;return(s=function(e){return e

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	587422
Entropy (8bit):	5.2864772744439525
Encrypted:	false
SSDEEP:	6144:81PsVy45X69Jk4p2C1b81GEqP0qYkf2yw9ZIMo6HOa:81PeX6Bp2C1b81GXnHWEuOa
MD5:	344E11BCC79B8B338AE744B7647503E1
SHA1:	F11806936032535A6E8071160FFBAC37D1BEF931
SHA-256:	A441A416D61D51B2B57F7D29592F5E3411A97926E7BB0280D28349C458726273
SHA-512:	77516A15CBA4460EA3D6B29203712078833CC9988CD229899BAB5C0CC38D3EFD66F53935EC6305EFDA14F39AFE5269B1F0C51C0BA6D3AC62F951848667CF16FF
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/dynamic/static/js/2.14713378.chunk.js
Preview:	/! For license information please see 2.14713378.chunk.js.LICENSE.txt /.(this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(172)},function(e,t,n){"use strict";e.exports=n(167)},function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){return Pe})),n.d(t,"b",(function(){return me}));var r=n(70),o=n(1),a=n.n(o),i=n(162),u=n.n(i),c=n(163),l=n(164),s=n(112),f=n(109),p=n.n(f);function d(){return(d=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}var h=function(e,t){for(var n=[e[0]],r=0,o=t.length;r<o;r+=1)n.push(t[r],e[r+1]);return n},y=function(e){return null!==e&&"object"==typeof e&&"[object Object]"===(e.toString?e.toString():Object.prototype.toString.call(e))&&!Object(r.typeOf)(e)},v=Object.freeze([]),m=Object.freeze({});function b(e){return"function"==typeof e}function g(e){return e.displa

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1505)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.20331363388018
Encrypted:	false
SSDEEP:	24:EfzmHW8yGvcOnL4rY45YCCBm0QBmGLJABTMfwMWJ4zfIC6kZpOYwwnSf:EaHW8/vcO6Y45CMfJmTMfqookSEi
MD5:	3640FF2B7EB6CEB6C3B3AAAE7A528CB5
SHA1:	75B9BBCFF97D05B0B34155B3D637E64BBC9F619A
SHA-256:	746797F07E03D1BA4C4E586F50B5980409FA15CA9B40B93709698A66FEE6AB29
SHA-512:	70719502504D9D819B04E241F8ACA1D3518A1DF1CBD3C32147CE68288EE6AD3B0B601BBCE9ECBAD81CC82BF6A522095BE31C82352310E658D2EE527EE9A1399B
Malicious:	false
Reputation:	low
Preview:	!function(e){function r(r){for(var n,i,l=r[0],a=r[1],f=r[2],p=0,s=[];p<l.length;p++)i=l[p],Object.prototype.hasOwnProperty.call(o,i)&&o[i]&&s.push(o[i][0]),o[i]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(r);s.length;)s.shift()();return u.push.apply(u,f\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,l=1;l<t.length;l++){var a=t[l];0!==o[a]&&(n=!1)}n&&(u.splice(r--,1),e=i(i.s=t[0]))}return e}var n={},o={1:0},u=[];function i(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,i),t.l=!0,t.exports}i.m=e,i.c=n,i.d=function(e,r,t){i.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},i.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,r){if(1&r&&(e=i(e)),8&r)return e;if(4&r&&"object"===typeof e&&e&&e.__esModule)return e;var t=Object.create(nul

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-DNNJDFDB6T&gacid=1452859248.1730391815&gtm=45je4au0h2v876163893z8841780988za200zb841780988&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=1049528559
Preview:	<html></html>

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39041), with no line terminators
Category:	dropped
Size (bytes):	39041
Entropy (8bit):	5.189965884495659
Encrypted:	false
SSDEEP:	768:Ph+fXU3o1crs6glkTvQ0WEJTsMB7aD0LCzllwVNSUjswwYRYTPb0Aio:J+fXU7QQohzYNaHPbr
MD5:	6A8D4AC2108D83BC1F7C3ED73AD157E7
SHA1:	C983C4DAE489E477D3509FB5FD3F365087CAEE6B
SHA-256:	2E10FCE252E15745C499DE4A297A61ECCC6907C91AD253957AB8A6B705B79A2E
SHA-512:	1C4739FCEB2D730E099EA636DF8F67193E8642D936E5DE6F3F0034F7292F012006C9B2C02EAFF9A8BE8EE1AFBA6C857AA7C08C5116EE55D7D6A5315C8E13254A
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["alpinejs"],{4306:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Cn});var r,i,o,a,s=!1,l=!1,c=[];function u(e){!function(e){c.includes(e)\|\|c.push(e);l\|\|s\|\|(s=!0,queueMicrotask(d))}(e)}function f(e){let t=c.indexOf(e);-1!==t&&c.splice(t,1)}function d(){s=!1,l=!0;for(let e=0;e<c.length;e++)c[e]();c.length=0,l=!1}var _=!0;function p(e){i=e}var h=[],m=[],x=[];function g(e,t){"function"==typeof t?(e._x_cleanups\|\|(e._x_cleanups=[]),e._x_cleanups.push(t)):(t=e,m.push(t))}function v(e,t){e._x_attributeCleanups&&Object.entries(e._x_attributeCleanups).forEach((([n,r])=>{(void 0===t\|\|t.includes(n))&&(r.forEach((e=>e())),delete e._x_attributeCleanups[n])}))}var y=new MutationObserver($),b=!1;function w(){y.observe(document,{subtree:!0,childList:!0,attributes:!0,attributeOldValue:!0}),b=!0}function E(){(k=k.concat(y.takeRecords())).length&&!A&&(A=!0,queueMicrotask((()=>{$(k),k.length=0,A=!1}))),y.disconnect(),b=!1}var k=[],A=!1;function O(e){

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	389
Entropy (8bit):	5.180990657787996
Encrypted:	false
SSDEEP:	6:tI9mc4slicA4WcD6DJ2Lql31Bl7q3AgI102KVSXK1F70WAx7K5GbMR5GSzaN8:t4Ix4D6V2LQPg3AP161t0HxsGbMPGIae
MD5:	7633FA6342BB4C75945113527754009A
SHA1:	7AF7517EE4FDD320E5014D748E44F64D2F16ADEC
SHA-256:	7595868A787F99BB95AF00A8062876FAAACEB2857000D6D7085F4421FDAED504
SHA-512:	383B191EE38A157C9A486A7242E0A2EEDACA9476DEE493E0667C5CAA27D50189BED27B3CE3523B00268AA12285574A88E0502ED0EDE1A92A8D86B97EFE50C9F6
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/svg/pattern-x.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 870 6"><defs/><path stroke="url(#paint0_linear)" stroke-dasharray="2 5" stroke-width="6" d="M870 3H0" opacity=".1"/><defs><linearGradient id="paint0_linear" x1="870" x2="869.999" y1="4" y2="2.49" gradientUnits="userSpaceOnUse"><stop stop-color="#590C32"/><stop offset="1" stop-color="#9D1D5A"/></linearGradient></defs></svg>

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13755), with no line terminators
Category:	dropped
Size (bytes):	13755
Entropy (8bit):	5.332447131157693
Encrypted:	false
SSDEEP:	192:36ox+Y1eCGpVy6kGmLTpOI5tloml4pOIstlomlRkq/+VFcgLVQCLG9W/gGfNaUiN:4geFVHwLj7ribLVQCLG9CfNa7/ZX
MD5:	A88982B89A32D07FAB3343DC489B514D
SHA1:	8458D6F8F6CFB93E8A46FD459C343B34446B56DF
SHA-256:	6450EE018B035CD85CB725A9810AB4A9144FC2E6D7FC42EA1218085E690DF81C
SHA-512:	FDB0A39621F652842EBCFF10D7318EAEF3CCAE3ACB859B5401FA59BE34260611E3EACED40303286966D88F36B89DA6B427B87E2314C840F474A60D5356F973B9
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["aos"],{2711:function(e,t,n){e.exports=function(){"use strict";var e="undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:{},t="Expected a function",o=NaN,i="[object Symbol]",a=/^\s+\|\s+$/g,r=/^[-+]0x[0-9a-f]+$/i,s=/^0b[01]+$/i,c=/^0o[0-7]+$/i,u=parseInt,d="object"==typeof e&&e&&e.Object===Object&&e,l="object"==typeof self&&self&&self.Object===Object&&self,f=d\|\|l\|\|Function("return this")(),m=Object.prototype.toString,p=Math.max,b=Math.min,v=function(){return f.Date.now()};function g(e,n,o){var i,a,r,s,c,u,d=0,l=!1,f=!1,m=!0;if("function"!=typeof e)throw new TypeError(t);function g(t){var n=i,o=a;return i=a=void 0,d=t,s=e.apply(o,n)}function y(e){var t=e-u;return void 0===u\|\|t>=n\|\|t<0\|\|f&&e-d>=r}function k(){var e=v();if(y(e))return x(e);c=setTimeout(k,function(e){var t=n-(e-u);return f?b(t,r-(e-d)):t}(e))}function x(e){return c=void 0,m&&i?g(e):(i=a=void 0,s)}function O(){var e=v(),t=y(e);if(i=arguments,

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1038587
Entropy (8bit):	7.998731656575773
Encrypted:	true
SSDEEP:	24576:r5E8NmicRH6WQFw10+P+qoo6BdIfAUyaLclP3:r5EgmNRH6WMb+2VvIHLcp3
MD5:	4227778074C9B7C74FBD0F7CEA187C32
SHA1:	4B26D2AFE806FA5F0AFDECAE70C44A96C0759183
SHA-256:	A71B2D57AD6000197EB24DAE98BDFD403B373A0BFC3207E452285C1EF69216BA
SHA-512:	C6701C432DE31558970085C1BB4590AEA0D980A5D7D780AB9A325F7BA3759441F6CFBC75FAABF04E3D71ED813EBE8292875FC30CC8BF021437F689EC48E45D24
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:a
Preview:	@f?....E7;>.`.......Z.)...~......b..@...4.%...D.oD.<...s....ko@.Z. F0..0?...0sG.J..r<..w..nJwRu......f..KI.cIc.I.l....h...........#_.....n..=.............A.%......%...!}M.4.~h..E.4.h3.F.wh...Wv.?....P..[.....v.wPX.....r...........`Z..5..n.ab......2.:..q..x...h...Mm>)L..1....\Y..{w_....-0S..........<m...T...../r....C...v........94.>.....aF.g......[t.tO../g..`.fn+....]..W........w..51.~...Nw...P..>.....N.o..!,.z.+...BJ...0.x~tr(.qu...%...........yB..-]..E......j.`.#K........B...`..R.2.m..W%...&E>....N5...7...h.}.?..3X_.6.8...E.9.;t.@.mw..;M.g....D;m5.s.D.!..8zK.9W.qy..0..>.V.c.[.mG.d.>...._Q..].K.."..a........!.........neQ.{n.b...M.xM..\1.+....[.{>o.P......xE.C6{..v&.Cz.....5v..rO..f.Y..4c.;.l.IIH.N...1."3D......'....E..-...7*C8..?....L.........{<....NZ..x.&.L..$...L.v......{B.../.H0H...S"Y.~..'...Ol,=v1......y......"!..I.W....H...^z.^.\|:.o;.<.{-o.Z........1V..d.......x.\|.....m..=.w....1...3....AE.D..K+..;GEPe.....-..nW......er...c.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999614278720588
Encrypted:	true
SSDEEP:	24576:0K1TYrS0QrwLOcIoS2AVeDGiYbkGM8LgnknJgsH+N6O794R:0K1YrEmMoS2AVeDMbNxH+IzR
MD5:	7572D4F5945547DE6BEE7EEE5BD765F8
SHA1:	197E3BC77317C5FD5D8FD7D3E133303B61D37A5E
SHA-256:	5A958EC3FD196D614293F5539413DCB7F5930378BA79337C2B00142E520FDC20
SHA-512:	19C0556400FEBB8745A613F688A75A2F01213976AD11A051C6F3689FBE2384F3E057BCF957CF37F84AB186B6D2593F54ED1C5A9E28FC2A3E0911D82EAE1E4E28
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:4
Preview:	...a.....+...U.....[-.11.#....e../......V....@./;...Aat.'.G.....N2c.....Y..{.....~..B..-...u.0..^.Q.0...3.y-.3Qh+.S..i.$SG....tP..C7......V...G....K#..e.)...D.1+H.?...JG...TCw....F%....n..A...t.s...idGA<.8.y'ZQ..r .8...H....K.G.......;............d..$..4.<#j"..l#e.9.(H.....q.;.P....&n`..M.....xq.}M4.vn........._jDQ@..!.....m...X..cac{b.at..F..;...;H.&.....!`......-.a:.6...t..&Myo.....\Zz.v.X....#.`.".?.yR..&.1`..[:..H...z..X}R........6#? .3] .Rs..;.N.....r8.s.02dZ...x.\.`............"...3..].v4<Y..;Y......rm.T{7v.d@.c.;7..:.....w.>..N{.s.:..CN.gL.zU...qcX........V..._...]~.....T.S_C..^c..<!.....{......=6..O.......7.../..HF[):'K.e9-.$.u.....E_.h..}.T..P..*.L......w8x.(s..v.....Ce!>...X...Du:.$..L.yh.#..r...C.<.......2.[...9.<x....o.m.8.V.!.}.>n.M....GH...q.R..(.....67..,^.F.....v..M&B.m\|..r;..pOD...Y.M...k..S.yn..u.W...-.....qZ.2..P.?...z.+/.A..v.A.FKC}.+].S..t..c.VR....9.gT..V...rcN.x..^.....c...y7/?.e....u..9O.....-....n....

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	dropped
Size (bytes):	3600
Entropy (8bit):	7.825917763759236
Encrypted:	false
SSDEEP:	96:KkXfoPqJggciYcQ6QufaUoy+b7ETiIBubw:CPncQ5ufaUOO68
MD5:	E321EA775FC61B9F5C45BF1CEBEA9D45
SHA1:	5D4567A2F2813B92F46C856FE67A63AAE510D988
SHA-256:	49D73454A7AD4E5EB379FFFEE52D52F38C0D4EA954508CCF3D9CFDA57C02B43F
SHA-512:	509517D4ACD2F31BEF00BAF4C29B5C317AB401ECAB09FB40B6838DEDB0A44D15024E8D021662A2D913A21A163A53C61CB5E362F27237960A408CE960B83371E9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................C.C.......................................................................................Y..e...,HU.Y.d_;..;.T..l....(.K7.Y...._...K....:.[....(3..=.+Z[C...J......7..T.T...7.n..eX......f..FRH..-L.~.M.Y..Hs..4.Wbp"..{.k/X".....[+.^.oH.BV....Z.~6.J&X.nr.L..aP;h3zN....i.s.6......`N=)..\|m4.._t._Fh.t.A..j..M..1...w....+.................................!..."%1B............g.q.W....6H.....f..U.....\|...Q.Z.(hK .zp....<.e5=..Hx.+.l....8........^j..[...A.\..@?.^..9.>.u..+............RM.B%.....>.(.Z.......=5...q...(r...<O.w..50.....$l.Fp...B..5.$6..EJ....HM...}..........WN..Mi._. ...W..g3..V...!.n."f.Mk....%..D..9;.........D..ekD.di.S.7.>.(....D_.T....w_.............J.d...........>[....s[/..@v.E...~.I[..M....../.O...z}q...f.-[....3.....v~..7SA....b.O)..N.<.)4..I?E.......T0..n........Z.X^.=....{c

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999575617296538
Encrypted:	true
SSDEEP:	24576:kJv8kNCnxT5zZU+iLaoPTkK78i3qxWYcxlDzXr5W:wCnxT5ze+ilPT9T6orvDv5W
MD5:	5F16054E889FDA29EF2707D3F6F4926F
SHA1:	C25FD7E3CD49BED7DC457DC70E1B5DE19B914917
SHA-256:	69F8433EB0CEA054522A4201728A6C964218C6E6B7F5450CE8095494B049A87A
SHA-512:	02B1448AEDBAFDD78958B3283F6B977E38D68A602AED5F1364911DE92F998BC63DA3DCBA0A229B958738679613E166DDD375CDEEAF9C7C0C44359F7B17FF74E1
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:3
Preview:	ey.m3.X.R...[2\...t..1.B.......Z......}...iC=..8..R.;.m..@0....e..._..3.!.hPb...X.....ZDo..F..:$Q~.].t.n.Il.w.....V.c.z..jgo...`?g..h..@x.M~..uS.4..+.?h.,..U.x.........d...... ...y..h.y.......O.$.}uk..g....>.I.....YX)..307f?......H.<;D..H..1u.z2......A..u....0.u\|.)J\A..>..k....i...e.K.Vz....A......5s1W...gQ...../..B.8...C.)..w7U..W2jW..B..Q..P.f..:&.S..7.T..m.I..m........q...[.D..<.!.:!...]#..j..r.W....0U.e.'..uy............V%....O.....s.../K.x<z58.z..qR......'8)<"b.>5...-[2.b.......p..b...` ),..=eB...D.p.....Z..O9.Vv.....vh...Y..n...Q.E%.... .s...i..C#<e....]....:`..!........;...(....].G.V...M 't^..0R..WI.V..!i..>....[....T..6.lq..p6..;@ ..'..p............W..4.bQ.........>..9.W.2..x..kw.D...XY.\|.>.v.&..$.X..)...........!I........!....f..BJa..5.?..1.C...R..C.....&..N..c".E.....,.i)....K5$(..P.....'.....3*.Z.`,V..=.":.3....:......qC.~....f..PMZ..GY...[ .0d..GE.BX9.v>..R[....dl.74.w8!S.w.M...b.S.!....nX.F..2..0.......z..r.x{i..NC

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8243)
Category:	dropped
Size (bytes):	322367
Entropy (8bit):	5.573721078756238
Encrypted:	false
SSDEEP:	3072:+pWwiztG3ETCako7y0m5CptDY8/I8+yr/OUYhcDmuD0C8Gp/arTP2RKG:vG3gxkoYM/GUTd0C8Gp/a/2v
MD5:	54C6335146A5EB6AABC1D62B78E27AF1
SHA1:	AF9C2DEF4E8BCD3AB4A22A34116E1D3CA580CF28
SHA-256:	3A83FC40628673C0B1841BD462B2B423D616842194E8B8DD469D282CCF90F3F7
SHA-512:	99A7389CFE767CCD60DE3AE24ED73D0511C2AFA5097C0DD7F90866948A5AC77569B4D2EABB3E656024F2BBE0F4988D60D8C2755CADDFA46627EA72BE4EBF363C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"66",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"auto"},{"function":"__c","vtp_value":"pay.travelbusinessclass.com"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_useEcommerceDataLayer":true,"vtp_doubleClick":true,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":true,"vtp_trackingId":"UA-191980430-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_ecommerceIsEnabled":true,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	8460
Entropy (8bit):	7.812686282228815
Encrypted:	false
SSDEEP:	192:3y1t6uudh1+hP//gfF2E63Kmf64YXq5omd+D9BpI:A6vg//uZ7my4bxduBpI
MD5:	1F79BCDED42CB2FA6D5F94EC2F1EEAA4
SHA1:	9133558ED4BCE5DB918BF2D8FCCCA974F58A8B24
SHA-256:	E2F7DBA30E198A6F90F0F8F4FDD555DC55C69817F63B2C07FF50832958E07AF1
SHA-512:	1473B57B0AE95033A4E0405ECA9CDFDCECC2A20067F8F0F56FE081CD24D3028B0CB10D48E632D1209459FDA72F888B02882686DEC650347E7D7DB9E926A74485
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................?..........................!.1."AQ.aq..2.#B.....$Rb..%C..34..................................).........................!1A.Qq."..2...............?...C.......c..{E..E....#.. a..e.<.......?.9n.5Z.EU.U..".5(.X...s-.i\|....Hkln'5......

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	150668
Entropy (8bit):	5.235141154178429
Encrypted:	false
SSDEEP:	3072:7B1q3OjI+yvm8mUlaY7scVOnQ7qeQ5Xh1:4OjI+yvm8mUlacscVOnQ7qH5R1
MD5:	172354A613EEAF25C05004F9CA7FD478
SHA1:	7DD824A858BCDF425AF92B03EC716459EBF08467
SHA-256:	505F7786C790D882F46404CDE911E8FD469E59FC094449EB25F7991B60A499B5
SHA-512:	2E403D6CBE2F032BFF0A9E2CE23795FFBE43D0460E3CF1F9C16540A29B7831FA9EC280E2F5DA6824FDD823370F7B1B017FE4579D4A560B494F2455F52B546FAD
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/js/swiper.da46e2bb5a5b941c6f33.js
Preview:	"use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["swiper"],{9421:(e,t,a)=>{function i(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function r(e,t){void 0===e&&(e={}),void 0===t&&(t={}),Object.keys(t).forEach((function(a){void 0===e[a]?e[a]=t[a]:i(t[a])&&i(e[a])&&Object.keys(t[a]).length>0&&r(e[a],t[a])}))}a.r(t),a.d(t,{Swiper:()=>de,default:()=>de});var s={body:{},addEventListener:function(){},removeEventListener:function(){},activeElement:{blur:function(){},nodeName:""},querySelector:function(){return null},querySelectorAll:function(){return[]},getElementById:function(){return null},createEvent:function(){return{initEvent:function(){}}},createElement:function(){return{children:[],childNodes:[],style:{},setAttribute:function(){},getElementsByTagName:function(){return[]}}},createElementNS:function(){return{}},importNode:function(){return null},location:{hash:"",host:"",hostname:"",href:"",origin:"",pathname:"",protocol:"",search:""

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	downloaded
Size (bytes):	404779
Entropy (8bit):	5.643418160513593
Encrypted:	false
SSDEEP:	6144:V4KGKFhpGLgB40onAzWRSR9cM8rT/9295UZ9Or24AvU:uKBFhqc40on635mYp
MD5:	E8471418287F75CF6436870230AB2BDD
SHA1:	CDAE7F936A50A8C166628117E9FC6693DEEC0C08
SHA-256:	5AF97F3BB8FD555E9E6577F7EEEA9A24F7A562B83D020B842D6CF206213E929D
SHA-512:	CCD9559686EC5488282150F1F48B2911EB11B8839257B4014330DEF1455262EB85B50C3D62B25DD8FCD20FFE7874A27CA8CD070EF71C54DAD07BD14F52B0AF68
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-DNNJDFDB6T&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	89016
Entropy (8bit):	5.478921561201903
Encrypted:	false
SSDEEP:	768:jZ6pbCSOglifWQz9UM48LSrC23FNSpFtSl1mTFtcT8+DF8LqlGT:jZ6p2MlieQz9U+SxcpkmBanDTlGT
MD5:	E133B40910CC96C555E866DD60B36D0B
SHA1:	E7B10DB0F39338676889F51CA0052CC2F1049DF4
SHA-256:	341836C79745D601B903C2AC93BCE022DB7BF9980142291F2F1DDCAF43B43798
SHA-512:	E547E5CB54D880C27DBF34F8C109F7F1C0FC68390B5EFE4B246ACBC6B30B9BA69FC6C9E3390FBE456F4A7320560284269B8CB3E4F9BCCFFB586BDC54745CB248
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/css/d1dc0ec/chatcontainer.widget.css
Preview:	.button__jf7xH{background-color:#18c139;border-radius:4px!important;color:#fff;cursor:pointer;display:block;font-size:15px!important;height:40px;line-height:40px;text-align:center;width:100%}.button__jf7xH:focus,.button__jf7xH:hover{background-color:#12a730}.button__jf7xH._disabled__Mnurp{cursor:default;opacity:.5}.button__jf7xH._medium__KFpkD{font-size:18px;height:48px;line-height:48px}.button__jf7xH._medium__KFpkD .text__Rt0ss{font-size:18px;padding-top:14px}.button__jf7xH._blue__cAgDg{background-color:#0b82f7}.button__jf7xH._blue__cAgDg:focus,.button__jf7xH._blue__cAgDg:hover{background-color:#086bcd}.button__jf7xH._grey__dCoAI{background-color:#445669}.button__jf7xH._grey__dCoAI:focus,.button__jf7xH._grey__dCoAI:hover{background-color:#303f4e}.button__jf7xH .text__Rt0ss{color:#fff;cursor:pointer;display:inline-block;font-size:15px;font-weight:400;padding-top:11px}.button__jf7xH.__ios__vBksd{line-height:normal}.inputButton__INvI0{border-bottom-right-radius:4px!important;border-top-r

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Ftravelbusinessclass.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5012), with no line terminators
Category:	downloaded
Size (bytes):	5012
Entropy (8bit):	5.835585237523408
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU7ulVfs3uKxba:1DY0hf1bT47OIqWb1uulJs3u8W
MD5:	21F7F8B33AE3881FA757E3F35D1FBA3E
SHA1:	9E01437FCD5D5658BCC6E78332EE4A81E7477D15
SHA-256:	7D65C3EFF3D74CC51910AACCCB22194BA1AF919C33FA59EFA421AF791AED20F9
SHA-512:	8C4E3C33B935178661D58C7464BA8E7D8F1ECE5B7E0D25D63A35AEED42BDE11428BEC93A3C73587225373B441D652CE832959141504FA5C066B2BC196E98C9C9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/403308866/?random=1730391816185&cv=11&fst=1730391816185&bg=ffffff&guid=ON&async=1&gtm=45be4as0v884530608z8841780988za201zb841780988&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445&hn=www.googleadservices.com&frm=0&tiba=Business%20Class%20Flights%20-%20Cheap%20Business%20Class%20Deals%2C%20Airfares%20%26%20Flights%20to%20Worldwide&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebM
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.998441221389001
Encrypted:	true
SSDEEP:	24576:FFb7rF/Qnw0Q6kX2Lj9z1uMUPS/d8uFmm:nb7rtQn9Q/AZRjUJux
MD5:	7A4904C8BE3338DABA1B9999B271BB79
SHA1:	19D5BBA6AB54177CB7471A1B41DAE6671F092251
SHA-256:	B76228283D55C89F422EBBD49CF8EC9DD5803D6B6DDEBCC9996A8CAF8AD84295
SHA-512:	1859A6D9409C36DDFDCC257A313B81C187446B4797989C45969417A827838C12CFAFCB853CDB8C873EEF3CAA3C55FC289F11D18457273D7F0016F0827C0BAE57
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:0
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS....M..S...S.kS..../........X.........................................................................................I.f.*...B@M..Lavf58.45.100WA.Lavf58.45.100D..@.@.....T.k@.........F..s.z.2'.=...."...und..V_VP9...#..\|k-.................U..U...U...........Y..s...N~U.\...."...eng..A_OPUSV..c..V.............@.p.....bd. c..OpusHead..8.........T.gA.ss........c..g.........E..MAJOR_BRANDD..mp42g.........E..MINOR_VERSIOND..1g........#E..COMPATIBLE_BRANDSD..mp41mp42isomg.........E..ENCODERD..Lavf58.45.100ss........c..c.z.2'.=..g........"E..HANDLER_NAMED..Core Media Videog........%E..ENCODERD..Lavc58.91.100 libvpx-vp9g.E..DURATIOND..00:00:40.172000000..ss........c..c...N~U.\.g........"E..HANDLER_NAMED..Core Media Audiog........"E..ENCODERD..Lavc58.91.100 libopusg.E..DURATIOND..00:00:40.178000000...C.u(}.............@......I.B.O.,..8$.....8}{.......sG.T...."x@.....-pA....i...t...:6dn..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3
Category:	downloaded
Size (bytes):	8460
Entropy (8bit):	7.812686282228815
Encrypted:	false
SSDEEP:	192:3y1t6uudh1+hP//gfF2E63Kmf64YXq5omd+D9BpI:A6vg//uZ7my4bxduBpI
MD5:	1F79BCDED42CB2FA6D5F94EC2F1EEAA4
SHA1:	9133558ED4BCE5DB918BF2D8FCCCA974F58A8B24
SHA-256:	E2F7DBA30E198A6F90F0F8F4FDD555DC55C69817F63B2C07FF50832958E07AF1
SHA-512:	1473B57B0AE95033A4E0405ECA9CDFDCECC2A20067F8F0F56FE081CD24D3028B0CB10D48E632D1209459FDA72F888B02882686DEC650347E7D7DB9E926A74485
Malicious:	false
Reputation:	low
URL:	https://files.jivosite.com/avatars/1676623/65a6c11c8ad6f.jpg
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................?..........................!.1."AQ.aq..2.#B.....$Rb..%C..34..................................).........................!1A.Qq."..2...............?...C.......c..{E..E....#.. a..e.<.......?.9n.5Z.EU.U..".5(.X...s-.i\|....Hkln'5......

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.3715620836455065
Encrypted:	false
SSDEEP:	3:YKOHcWn9MAf+H+68RXJk5IlqloW:YKOHnu6rhqlB
MD5:	D91B942B730F5FCF44F5F7CB638FC0E1
SHA1:	24F4417D5879981128567B6C221420B902D35F8A
SHA-256:	D253F5FA87AEA9B7E54A425C692E96704E78BA3A0DBE7B7BD38CEB8354B42522
SHA-512:	C0473F98C70F8DEC5268D57B7446EC750C4827CCED6275B4B4AE83D2F12C9439690BAB39B644FDC281255E40B0F8B7F39C54E2D039BFA21FFFB285FB998BBBB1
Malicious:	false
Reputation:	low
URL:	https://telephony.jivosite.com/api/1/sites/1676623/widgets/dwzeNfFJka/clients/0/telephony/callback
Preview:	{"ok":false,"error_list":["no_operators_assigned_to_callback"],"work_time":null}

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 14 names, Macintosh
Category:	downloaded
Size (bytes):	67040
Entropy (8bit):	6.067045166562773
Encrypted:	false
SSDEEP:	768:FMBFv7VPPjljLIbDDSUFUx+C/AeXxVf/O9BOOwcEj1mOTD4JsNqaek/:eFtN8bfhiAehVf/jcOT8RaB
MD5:	7659C23CA33CCC924679C0C2E7648CBA
SHA1:	D72FBDDED28FC534FD524D11947E531EEE467D67
SHA-256:	F4543207C558F22476642F39F45863E67362F980A994826F7E2D15375258754F
SHA-512:	1DEC9B5676B66A6D9E530B2625A7C3FD8BF3A881C286A7D31197F5D75D7C03F5B8AAC38C618FE053A4237AB20099FD7CD70E0BF4F59A249CEED64182350BF6BC
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/fonts/b439f6e4.ttf
Preview:	...........pFFTM............GDEF...........TGPOS..Wz...8..I.GSUB]]K....h....OS/2h.b&...x...`cmap.........fgasp............glyf..\k........head.>.........6hhea..."...4...$hmtxP.C.........loca.4.....$....maxp.E.M...X... name.QM........jpost.......t............f..R_.<...........b.......b......e.............................c.e.........................J.................@.........L.........X...K...X...^.2.+............................UKWN.@. ........................... .....].....M.........E.R.7...'.......2...A...7...;.......7.).F...7...F...7.".(.\|.-.....=..H.".P...G.).7.!.....[.-.7.!...7...7.$.<..F.$.K.1.-...2.......K......K.o.K.C.K......K...K._.#...K.;.K.7.K...K.&....K.$....K...#.s.....B.................q.).L.K.".(.L.#...).N.+.......+...K.A.+...+.N.+.......+._.K...@.......K...K...K._.K.e.+...K...+.b.K........._.F.............".....-.y.7...F.y.#.M.<...7.?.-...0.h.(.......F.).7.......)...F.8.F...).......).).F.S...^.........(...7...........F.........s.....-............................

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 67x67, components 3
Category:	downloaded
Size (bytes):	3600
Entropy (8bit):	7.825917763759236
Encrypted:	false
SSDEEP:	96:KkXfoPqJggciYcQ6QufaUoy+b7ETiIBubw:CPncQ5ufaUOO68
MD5:	E321EA775FC61B9F5C45BF1CEBEA9D45
SHA1:	5D4567A2F2813B92F46C856FE67A63AAE510D988
SHA-256:	49D73454A7AD4E5EB379FFFEE52D52F38C0D4EA954508CCF3D9CFDA57C02B43F
SHA-512:	509517D4ACD2F31BEF00BAF4C29B5C317AB401ECAB09FB40B6838DEDB0A44D15024E8D021662A2D913A21A163A53C61CB5E362F27237960A408CE960B83371E9
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/static/user-5.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................C.C.......................................................................................Y..e...,HU.Y.d_;..;.T..l....(.K7.Y...._...K....:.[....(3..=.+Z[C...J......7..T.T...7.n..eX......f..FRH..-L.~.M.Y..Hs..4.Wbp"..{.k/X".....[+.^.oH.BV....Z.~6.J&X.nr.L..aP;h3zN....i.s.6......`N=)..\|m4.._t._Fh.t.A..j..M..1...w....+.................................!..."%1B............g.q.W....6H.....f..U.....\|...Q.Z.(hK .zp....<.e5=..Hx.+.l....8........^j..[...A.\..@?.^..9.>.u..+............RM.B%.....>.(.Z.......=5...q...(r...<O.w..50.....$l.Fp...B..5.$6..EJ....HM...}..........WN..Mi._. ...W..g3..V...!.n."f.Mk....%..D..9;.........D..ekD.di.S.7.>.(....D_.T....w_.............J.d...........>[....s[/..@v.E...~.I[..M....../.O...z}q...f.-[....3.....v~..7SA....b.O)..N.<.)4..I?E.......T0..n........Z.X^.=....{c

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Category:	downloaded
Size (bytes):	1259386
Entropy (8bit):	5.600657955020061
Encrypted:	false
SSDEEP:	24576:07ezRMGogGw/PdG8Q1SOeCkpYrT/8k17HcU1eBkeamYRKs+dRip2mkqc4F5YH50d:RxMT/8k17HcUcBkeamYRKl7bHCF5G50d
MD5:	A8A6BAC7AB98E116EA8E9FAF3E2B0DA9
SHA1:	C22352753FE2D283D455D15070BC7A15131D668B
SHA-256:	99E1BC6343A758CDF2AFC1203137AD37D62F1B41F2D6BD5CD831C3A9D5C9AAD8
SHA-512:	FEF38EA0FD56EE71DD7871023281F7AA76103C38820F3482BC238398C734184F0E71881B00EEA0CE07E946B7282F34F3E27EF4061BAC2438A0326D97CE71AD31
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/js/bundle_en_US.js?rand=1729685307
Preview:	__jivoBundleOnLoad("window.base_langpack = {\"botListPickerBlock\":\"Use one of the buttons in chat to answer\",\"botTransferChat\":\"Agent was invited to the chat\",\"businessCopyright\":\"Business Messenger by {0}\",\"byYandex\":\"by Yandex\",\"callback_delayed_button_submit\":\"S.hedule a .all\",\"callback_delayed_period_as_possible\":\"As soon as possible\",\"callback_delayed_period_delimiter\":\"at\",\"callback_delayed_period_today\":\"Today\",\"callback_delayed_period_tomorrow\":\"Tomorrow\",\"callback_delayed_submit_fail\":\"Unable to schedule a call for the specified time. Please try again.\",\"callback_delayed_submit_success\":\"Thank you!\\nWe'll give you a call at the specified time.\",\"callback_delayed_title\":\"When should we call you back?\",\"campaign_popup_timer_days\":\"days\",\"campaign_popup_timer_hours\":\"hours\",\"campaign_popup_timer_minutes\":\"minutes\",\"campaign_popup_timer_seconds\":\"seconds\",\"cancel\":\"Cancel\",\"captchaPlaceholder\":\"Enter text fro

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	234260
Entropy (8bit):	5.456621895233652
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713FN:zfLeYc+PJxH8N7QQGArHu58K713z
MD5:	C04BB3EDB0F1A33B985B3285055FE1FA
SHA1:	0AE234EBC67E016B8A3B5603885A67160493227C
SHA-256:	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
SHA-512:	8E154181A67EF7706AB11421D2A91270F9620895CA54EDA89E73E60533FB2F72CF7E3323F4F56EB08C177F69E4CFC36117E011B3DD2479B07267C7E1F74C8B5D
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.997758332923953
Encrypted:	true
SSDEEP:	24576:PExv1uTJwbzAgcLfH61P1aIwoWyvXCII2D4n:P04JYzAti9aUvCIxD4n
MD5:	1B88B1E0768E5D0933E33B78858C81F1
SHA1:	351F3C117F7CF61EC69B616ACBF4132B239A0551
SHA-256:	2C5BB283B23E6D152ACC2232CBAB8D79AA184A82C736EC0CAE34E99CFCF816CA
SHA-512:	F844A96BBC096A517D2F1E5122DB8FC6F6BD7C910ED3D037472554702B0035678EB39CEDE473B9EDF8F905A9941DAB518C2855D80EF3FFBCDBAC7AAAB563F3B2
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:9
Preview:	O.,%CC..i _........)..H..zA..L.....).....>K...!.\..X(..".Y.........z..).....\.....2...I~Y.d...).E...4S.....Y.{.e.l.B.j..t..._}U.J..z........9.c...._g5..af.u6.p........>.h...i...;...Ub#.u..&r.y.7...E......t..uJ...I.....=.......`...+..g.}..ae.!S.......#...f.....e.X......z.I..r,.J..eK.!.2.j.v...c.jB.....c...08...~.......]..oG........[F..L...0.A.\pJ.=.o.q.9...=...,. S.(M...o....DaD..b?....QY'..b/..V.A<6..?J..3......h...m.<......1.1.....4o.a.."t...H8.{..]...G#.^=.....x.~l...1w...h.5B"...e.mF1..7..!..{.q.#....\...r.R@.x].......(.........sB..-.....VX.\...<.E...8S..g.w\`..85.......r"-..4.>..0.........2.v..b....G6Y..nR..h..>..A...y.$......8m...NX.].E.QJ. k.@..Y....8F.Y.]..=..aa;......O.JC...qT..!......{-..@..6...U.......T.6.9...Rn.j.l...d..].....j_..9'5=...g..@...f.Y..l..u..m. ./.E.].....H....0.....Ps.7.jb..u.!Q..E..Z.4;=...pX@.u....e..XK.p.K./.....i...u.N..M.9@..A.AhDyX...RV.....}.............9..z...j.....f=..enC5..".YP8F..I....t....c.;>..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Category:	downloaded
Size (bytes):	3760
Entropy (8bit):	7.003224526602915
Encrypted:	false
SSDEEP:	96:nR9z/SbP29Bj4q/APPwVgv54erXhIF8z9KMS:RlSzMF40K4erXhISKt
MD5:	8E9A165C4CB185FFD0B2658FA088E43B
SHA1:	195873E5E8BBB2F5ECC32D95F90D6FB75817A649
SHA-256:	FF81AAD05612F90CF97C238F219765884E5CBF49351D8DC96A4A063C598C3F43
SHA-512:	6EF9FAC16AC2835ECB95AB077270293A95A3597FD28FB053B32CFEB6B0A72B52C0EE51B0504A463AC9DB1D8A3B2C6C41F113012D6364D16FEB8E01821A3221FF
Malicious:	false
Reputation:	low
URL:	https://code.jivosite.com/sounds/agent_message.mp3:2f845e86e4a524:0
Preview:	....................................Info............. @@@@@@@@@@@@`````````````.................................................................;LAME3.99r............$..F........v.............................................................................................................................................................................................................................................=..K#.!......O........4..~....@R..~!.\|..c$....`>...XS.f...gdx.(.....)..x...0\|....@....0\|.?...L....3.X>..Z....pM.....-.[.....<.....0.:4h.1.B.a.4s..4.......\|....@...D.................cP..p,......Q.J...x..<....Q6.zF1c.a....1.B....'.%.J.4/..'.`.4.Q.pT?d.....s.C..j........).........@....Ct%.n\|%......._.7..A))_....i..y...X..lc..8.lw..+.C...R..p.F..\|.Ai..... .w....2.)..SR._...'\|..@!......Y.M.-C..........CIWz`.](i:.L.....L..A`.#..Q@.0U.C!.5$.3.`.0x...0....i..Xz...Tkk...".,.L00...U.I.....Y.t.,..?.....MX......;..<.H<.;..J.F...c..f.C.b(....R... (......F.....(

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.99878098397268
Encrypted:	true
SSDEEP:	24576:RzZsH0QT7F6ivZj9OcVXNOZl/4k44OmLg:RWznlvZjccNC/J44Xc
MD5:	B6948842AADA45687229C7D36E57929E
SHA1:	2058439143B283403F5EAE9739D99760160F4D00
SHA-256:	ADE06227DF530B213446F4604DD0FE2ACF20226B7C85CFBDA7CD2CF40D612C61
SHA-512:	274FCC88F72DC76006D0D2C03B0BC1BA368FA6179260F966D5F32EBFB35FA4EB2C21E3419BD4BF9B6C89FC093FE0F77AC0CBF78EA967FEB1B5F14DD297DE87A0
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/video/background.webm:2f845e8567d88d:7
Preview:	...8.b.... dB^..9h....r.y.T.v.#..9.....sM..[.c.\|..-..R......fV{.,...]...]......D.@../...K.._..I...<..$.xP........M.E...-..!o..o..B.A..ie).c.TU6u..E.c:^...V.n<8...a.:..(.P.....^...<.......RZB.WR.......3..0....bk..q.y.2.mC%..j.-nx.D..<.9..b.a.QS....7@.8.{...(......<f4.r.>h.C.hN...c,...4.3....c.;+F....O.w..M.k; j.8.NWK6O(4F.57.x.].z..+...R.P...5....p!..[..D.Mks.............N....j=.r....l.(..&D.H. ...5.QdQ`Z.........}..\.x....'...;\..._.e._q..K.?...n..L...j..yh..K...F..]~........Rw....k.u.ot...u.)..r.5k".p~.{....9..l)<..k.d.c.X....2ych.....S......g.7.G...Q.uD..a.-.8N...Wp....d..2b.n......r.X..t.CPQf1..y..w..A...K...m..._$.9...+._..).{..8....v.Md.e7.e.CE...;..^....V.. ..\|~d.~TA........HM...a.g..D..W......E.........i.<.!.b.f..b.+9{. @.....q.@....>D.0..x...LhE.iZ{..3......L.i%..^G....~..G.......$.........Ju.N`NX.7..0,.<p~..4>x......n~.s.....=}..Cp...?..O../f#1.X.........1...$rQ..}...G* P....(S}R...RW)..5.w(&L..{.d..h.*..]P.G-3.U# V..F .

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39041), with no line terminators
Category:	downloaded
Size (bytes):	39041
Entropy (8bit):	5.189965884495659
Encrypted:	false
SSDEEP:	768:Ph+fXU3o1crs6glkTvQ0WEJTsMB7aD0LCzllwVNSUjswwYRYTPb0Aio:J+fXU7QQohzYNaHPbr
MD5:	6A8D4AC2108D83BC1F7C3ED73AD157E7
SHA1:	C983C4DAE489E477D3509FB5FD3F365087CAEE6B
SHA-256:	2E10FCE252E15745C499DE4A297A61ECCC6907C91AD253957AB8A6B705B79A2E
SHA-512:	1C4739FCEB2D730E099EA636DF8F67193E8642D936E5DE6F3F0034F7292F012006C9B2C02EAFF9A8BE8EE1AFBA6C857AA7C08C5116EE55D7D6A5315C8E13254A
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/js/alpinejs.bdf191b9eca6a35ac57f.js
Preview:	"use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["alpinejs"],{4306:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Cn});var r,i,o,a,s=!1,l=!1,c=[];function u(e){!function(e){c.includes(e)\|\|c.push(e);l\|\|s\|\|(s=!0,queueMicrotask(d))}(e)}function f(e){let t=c.indexOf(e);-1!==t&&c.splice(t,1)}function d(){s=!1,l=!0;for(let e=0;e<c.length;e++)c[e]();c.length=0,l=!1}var _=!0;function p(e){i=e}var h=[],m=[],x=[];function g(e,t){"function"==typeof t?(e._x_cleanups\|\|(e._x_cleanups=[]),e._x_cleanups.push(t)):(t=e,m.push(t))}function v(e,t){e._x_attributeCleanups&&Object.entries(e._x_attributeCleanups).forEach((([n,r])=>{(void 0===t\|\|t.includes(n))&&(r.forEach((e=>e())),delete e._x_attributeCleanups[n])}))}var y=new MutationObserver($),b=!1;function w(){y.observe(document,{subtree:!0,childList:!0,attributes:!0,attributeOldValue:!0}),b=!0}function E(){(k=k.concat(y.takeRecords())).length&&!A&&(A=!0,queueMicrotask((()=>{$(k),k.length=0,A=!1}))),y.disconnect(),b=!1}var k=[],A=!1;function O(e){

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	260760
Entropy (8bit):	5.5598854597523415
Encrypted:	false
SSDEEP:	3072:zawiztGbETra0oHy0E5CptDY8/I8+yr/OUYhcDmKD0C8Gp/Rhl:aGbg+0oWM/GUTx0C8Gp/Rn
MD5:	7A7940CA7B00B9F525B5D1F7EF325458
SHA1:	9D3877F56C4419BDA734A40831C709EAAA49FB7A
SHA-256:	7F71CC7516FBEAD60888B50144B7B52F67B82BCA4AEEDBEC0B0634BD12A9521B
SHA-512:	07A7AD619848566A3796148C162B2F8EFA7E47AB90DCDF6827DA4C835F616E49BC210888A7E62C1AA56285A559570416FAA358AEDB19A89DFD7F675F806B53EB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-403308866&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-403308866","tag_id":108},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_isManualEnabled":false,"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":104},{"function":"__ccd_ads_first","priority":3,"vtp_instanceDestinationId":"AW-403308866","tag_id":109},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-403308866","tag_id":107},{"function":"__rep","vtp_containerId":"AW-403308866","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":102},{"function":"__ccd_ads_last","priority":0,"vtp_instanceDestinationId":"AW-403308866","tag_id":106}],. "predicates":[{"function":"_eq","arg0":["macro",

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 579x635, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	40630
Entropy (8bit):	7.994219547480843
Encrypted:	true
SSDEEP:	768:pCCJ9Nk5jsobBPEjKESk5HXFKsDjFQnQHr0NYLEYvIsbZHlLley:YCJY/Palh7D6QHr0NKFDey
MD5:	99FAD2EDE3702BFF02BA09FC807BA9E4
SHA1:	6822B2AA5C3385EE1C297DCEEE9DD94B5EEE343B
SHA-256:	7409DB6FBC409EBE597FD3130F3F36A7C0481CC0A56D9C7B8C266CE5D16AC926
SHA-512:	E3FAECD2C3F41C1C8C84589260C96D643014CAD56C30EAD29BE96C1903A9735F10AEB530FB979E28BB82BB4024EA7779CF4EA666CC2300329158AA21417B2428
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/img/static/wlc-img.webp
Preview:	RIFF....WEBPVP8 .........C.{.>)..C!.!.Y.......DP.i.At:>..TD.._..._...x..N...G.q....2....C&...^v\|...?../............~[.......w......}}..J......._...?..o>..{...U..w.../t...............[..d................_.....g._....._........_....../......?.7...g..v{[.o......S.....?.}.........+...........K._..........;..._....R..~_./Y..........o....../...../.....?u.)~....W....$...........Y@.y..?l(K+...5=m....hLQ..h..qv.b7Gu..._%F....+.........<R.c...Up..d.$Z....TG.(3..j.y^..t=3k.....%\|...v".PM:..<@A..y5.....i.21nhz.q......y...>....<Q........"f>.......k6.M.nkZ>4j!..;..=_...}U~..1....j...7.B..#j......D...5...F8.9. o..tK........`%.P..... .uNq-E..$d...J.PLP.oA.YboH.`>G...3/..?.nI..Y...Z...........o.+..E.Y.E.~. \..X.e._k+..Hx.&....w.X[O.~..}."_..........{:3....K...d.....:...~.......!..:s'z...\K.!%.#.Gb.....E...(K...6M.n).W.R.28.+<...zp:....R..Y{.7CH..!x....c+..3.PZu.W`z.....dE....}...J.t.......IG_....q^,..\|#....5..[i..(1.........?$@8.?......d.o...b....J.lR.o@..>

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 18 names, Macintosh
Category:	downloaded
Size (bytes):	66124
Entropy (8bit):	6.078434368036658
Encrypted:	false
SSDEEP:	768:fP00ix3+ZkJztDIIY4NJJLYKAHkSwBaOwcEFKPS9Nsscegwlqc:H00en3I94tpS+PSXtgex
MD5:	90ED6E2BAD4AA92681BE2E0134207E99
SHA1:	19A096E797CB7388ACCCA99363D3A12D489497EB
SHA-256:	C7113FF1C6C7114F13F0B3127FC8704419FAA2B4A675CCCFEE5D31DC1A15D769
SHA-512:	934F39BE5B98555F5ED0D95E40EE62714A4F06C8318572CBA23E2485AC08247C81F47372C1D5E4A165DFB1BD2151BDB09D1BAD97D9DB1A34F675909B64B78D17
Malicious:	false
Reputation:	low
URL:	https://di7qaez2koc7r.cloudfront.net/build/fonts/5a4ed10e.ttf
Preview:	...........pFFTM...O...0....GDEF.\|.........TGPOS.IZ.......HVGSUB]]K.........OS/2i.e>...x...`cmap.........fgasp............glyf.v9]........head.C.........6hhea...R...4...$hmtxj.2.........loca.e.f........maxp.B.L...X... name...........posto......@...i..........J6_.<...........c#......c#.\|...............................\|.T...........................I.................@.........].........X...K...X...^.2./............................UKWN.@. ........................... .....].....M.........8...-...........(...7...-.6.2.6.....-...<...-...<...-.1.....#.....J.#.Y...e...R.".J.......d.#.J.....-...-.).2...<.).A.:.#...(.......A...$...A.r.A.N.A...$...A...A.l.....A.>.A.R.A...A.'.$...A.#.$...A.....}.....;.................z.".X.A.1...X...D.".b.&......."...A.D."...".S.".......".k.A...5.......A...A...A.k.A.b."...A..."...A.........k.<.?...,..."...I.....(.j.-...<.j...K.2...-.@.#...+.p.........<.0.-.H....."...<.G.<...". ....."...<._...g.............-...........<.%...$...\|...&.#............................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 17:23:00.305813074 CET	49674	443	192.168.2.6	173.222.162.64
Oct 31, 2024 17:23:00.305824041 CET	49673	443	192.168.2.6	173.222.162.64
Oct 31, 2024 17:23:00.633912086 CET	49672	443	192.168.2.6	173.222.162.64
Oct 31, 2024 17:23:09.916259050 CET	49674	443	192.168.2.6	173.222.162.64
Oct 31, 2024 17:23:09.948081017 CET	49673	443	192.168.2.6	173.222.162.64
Oct 31, 2024 17:23:10.241436005 CET	49672	443	192.168.2.6	173.222.162.64
Oct 31, 2024 17:23:10.670253038 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:10.670269012 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:10.670326948 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:10.670931101 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:10.670942068 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.531691074 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.532304049 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.532324076 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.533340931 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.533405066 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.536562920 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.536627054 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.537271976 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.537280083 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.584903002 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.832905054 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.832928896 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.832950115 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.832958937 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.832973003 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.832983971 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.833002090 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.833013058 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.833045959 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.952301979 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.952330112 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.952394009 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:11.952404976 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:11.952450991 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.060050964 CET	443	49698	173.222.162.64	192.168.2.6
Oct 31, 2024 17:23:12.060188055 CET	49698	443	192.168.2.6	173.222.162.64
Oct 31, 2024 17:23:12.072370052 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.072393894 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.072439909 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.072449923 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.072494030 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.072511911 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.080624104 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:12.080653906 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:12.080729961 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:12.081337929 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:12.081350088 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:12.191560984 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.191617012 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.191657066 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.191668987 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.191713095 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.310760975 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.310817957 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.310846090 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.310854912 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.310903072 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.321799040 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.321820021 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.321878910 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.321997881 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.322055101 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.322113037 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.322163105 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.322191000 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.322232962 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.322654963 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.322689056 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.322894096 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.322906971 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.323136091 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.323149920 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.430119991 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.430197954 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.430222034 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.430236101 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.430274963 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.430293083 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.549402952 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.549451113 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.549508095 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.549516916 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.549566984 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.591089964 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.591135025 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.591197968 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.591206074 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.591260910 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.674232006 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.674333096 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.674340963 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.674398899 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.674428940 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.674541950 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.676194906 CET	49708	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:12.676203012 CET	443	49708	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:12.693377972 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.693423986 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.693526983 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.693964005 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:12.693979025 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:12.934441090 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:12.978872061 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:12.993098021 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:12.993105888 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:12.994707108 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:12.994796038 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:13.027920008 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:13.028009892 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:13.070446014 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:13.070457935 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:13.120917082 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:13.177058935 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.178054094 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.178067923 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.178962946 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.179023981 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.180874109 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.180965900 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.181649923 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.181658983 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.181823969 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.182235956 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.182252884 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.183743000 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.183835030 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.185734034 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.185813904 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.186153889 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.193192959 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.193202019 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.193784952 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.193823099 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.195297003 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.195365906 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.197796106 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.197896957 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.198229074 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.198244095 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.225615978 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.244616032 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.244621038 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.278928041 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:13.278959036 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:13.279189110 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:13.283432007 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:13.283454895 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:13.543260098 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.543553114 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.543567896 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.544998884 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.545064926 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.545814037 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.545888901 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.546120882 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.546128988 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.593291998 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.796020985 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.796061039 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.796137094 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.796149969 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.796188116 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.796191931 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.796232939 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.895411968 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.913929939 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:13.944256067 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.961633921 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.998985052 CET	49713	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:13.999018908 CET	443	49713	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.012531042 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.012542009 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.012556076 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.012579918 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.012597084 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.012631893 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.012639999 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.012693882 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.019113064 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.019123077 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.019177914 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.019182920 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030210972 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030263901 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030284882 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030303001 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030334949 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.030343056 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030364037 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030391932 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.030391932 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.030391932 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.030431032 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.030447006 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.032947063 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.032960892 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.033004999 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.033045053 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.033070087 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.033070087 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.033070087 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.033097029 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.033118963 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.033154011 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.033154011 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.033181906 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.072640896 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.129637003 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.129647017 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.133246899 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.150141001 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.150197029 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.150240898 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.150254011 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.150299072 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.150299072 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.150398016 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.151803970 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.151858091 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.151901007 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.151926041 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.151952982 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.151972055 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.188111067 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:14.188122034 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:14.188177109 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:14.188329935 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.188411951 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.189049959 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:14.189064026 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:14.195355892 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.203593016 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.203620911 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.203856945 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.246876955 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.246886015 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.246912956 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.246922016 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.246956110 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.246967077 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.247000933 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.247028112 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.258692980 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.269429922 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.269458055 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.269504070 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.269527912 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.269646883 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.269654989 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.269701958 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.270608902 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.270639896 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.270699978 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.270759106 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.270787001 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.270811081 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.368043900 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.368052959 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.368081093 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.368109941 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.368115902 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.368172884 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.388756037 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.388812065 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.388845921 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.388859034 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.388897896 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.388906002 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.388962984 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.389019012 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.389025927 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.389107943 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.389161110 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.389693975 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.389719963 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.389763117 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.389797926 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.389827013 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.389847040 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.390161991 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.390235901 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.390285969 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.481509924 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.481527090 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.481590986 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.481599092 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.481637955 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.501490116 CET	49711	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.501521111 CET	443	49711	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.505784035 CET	49710	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.505809069 CET	443	49710	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.598552942 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.598571062 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.598625898 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.598635912 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.598673105 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.629673004 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.671331882 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.717103004 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.717120886 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.717168093 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.717175961 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.717228889 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.717279911 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.717335939 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.717417955 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.718223095 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.718256950 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.718303919 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.718971968 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.718997002 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.719464064 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.719477892 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.726238966 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.726254940 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.726309061 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.726315022 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.726361036 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.830368996 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:14.830384016 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:14.830457926 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:14.832031965 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:14.832042933 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:14.843586922 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.843605042 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.843688965 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.843698025 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.843749046 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.884465933 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.884557009 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.884614944 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.886509895 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.886533022 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.886564970 CET	49714	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.886579990 CET	443	49714	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.944943905 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.944955111 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.945050955 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.948875904 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:14.948889971 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:14.957932949 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.957952976 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.957998991 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.958004951 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.958048105 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.960757971 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:14.960815907 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:14.960819960 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.009568930 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.034230947 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.035095930 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.035104036 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.036550999 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.036607027 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.038511038 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.038590908 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.038970947 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.038978100 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.078464031 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.078481913 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.078548908 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.078562975 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.078619003 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.085916042 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.195889950 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.195909023 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.195964098 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.195972919 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.196023941 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.197118998 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.197184086 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.281546116 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.281606913 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.281708002 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.281716108 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.281765938 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.281815052 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.281852007 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.284538031 CET	49715	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:15.284543037 CET	443	49715	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:15.312494040 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.312515974 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.312565088 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.312573910 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.312630892 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.313505888 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.313584089 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.313589096 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.354419947 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.429518938 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.429528952 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.429564953 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.429605961 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.429611921 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.429678917 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.430800915 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.430866003 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.430867910 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.430908918 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.431225061 CET	49712	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.431232929 CET	443	49712	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.561187983 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.561507940 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.561525106 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.561992884 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.562500000 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.562572956 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.562699080 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.570760965 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.571010113 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.571022034 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.571528912 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.571863890 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.571938992 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.571997881 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.603353977 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.606569052 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.606657028 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:15.607788086 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.611057043 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:15.611062050 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.611510038 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.615360022 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.620743036 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:15.663347006 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.805234909 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:15.805339098 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:15.806610107 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.851016045 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.874665022 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.874717951 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.874761105 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.874789000 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:15.874799013 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.874844074 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:15.898257971 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.898287058 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.898350954 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.899527073 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.899539948 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.904459953 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.904478073 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.904812098 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.905100107 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.905109882 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.905191898 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.905478001 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.905488014 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.905736923 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.905746937 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.906280041 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.906289101 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.906348944 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.906652927 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.906662941 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.907715082 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:15.907723904 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:15.908157110 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:15.910470963 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:15.929263115 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.929286003 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.929390907 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.929415941 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.929430008 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.929483891 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.929498911 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.929517031 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.929536104 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.929558039 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.929577112 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.929596901 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:15.929796934 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:15.955326080 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:15.997716904 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.997759104 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.997828007 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:15.997838020 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:15.997893095 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.045763016 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.045783997 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.045825958 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.045850992 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.045867920 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.045902967 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.045933962 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.045957088 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.046120882 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.113023996 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.113054037 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.113097906 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.113109112 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.113159895 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.158901930 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:16.158950090 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:16.159056902 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:16.165342093 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.165406942 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.165437937 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.165458918 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.165493965 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.165527105 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.205749035 CET	49719	443	192.168.2.6	184.28.90.27
Oct 31, 2024 17:23:16.205760002 CET	443	49719	184.28.90.27	192.168.2.6
Oct 31, 2024 17:23:16.232623100 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.232654095 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.232718945 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.232727051 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.232783079 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.261595011 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.282566071 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.282612085 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.282674074 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.282690048 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.282732964 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.302532911 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.327860117 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.351294994 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.351324081 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.351398945 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.351406097 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.351459980 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.381110907 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.381138086 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.381181002 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.381206989 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.381216049 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.381230116 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.381252050 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.381256104 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.381305933 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.382328033 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.386358023 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.386466980 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.386476994 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.386523962 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.386564970 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.399507046 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.399528980 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.399586916 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.399667978 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.399684906 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.399740934 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.399740934 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.470379114 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.470407963 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.470540047 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.470547915 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.470598936 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.517666101 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.517715931 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.517757893 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.517774105 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.517807007 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.517827034 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.532290936 CET	49717	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.532315969 CET	443	49717	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.536926031 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.536987066 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.537091970 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.537410021 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.537444115 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.545325041 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:16.545351028 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:16.545434952 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:16.545672894 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:16.545695066 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:16.589781046 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.589802980 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.589881897 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.589890957 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.589956045 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.626492977 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.626540899 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.626583099 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.626600027 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.626630068 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.626651049 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.636085987 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.636132002 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.636167049 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.636178970 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.636218071 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.636239052 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.636302948 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.680722952 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.707551956 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.707576990 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.707628012 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.707637072 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.707673073 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.707695007 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.747524023 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.747875929 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.747895002 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.748121023 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.748305082 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.748311043 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.749053955 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.749176025 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.749233961 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.749726057 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.749910116 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.749964952 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.750030041 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.750171900 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.750235081 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.750241041 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.752285004 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.752304077 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.752368927 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.752377987 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.752429962 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.753247023 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.753264904 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.753329992 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.753350019 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.753405094 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.755953074 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.756171942 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.756179094 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.756469965 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.756777048 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.756825924 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.756903887 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.782047987 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.782259941 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.782274008 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.783808947 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.783881903 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.784251928 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.784332037 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.784404039 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.784410954 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.791357040 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.792983055 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.799333096 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.828634024 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.828655958 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.828711987 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.828721046 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.828752041 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.828772068 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.839168072 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.869314909 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.869335890 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.869401932 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.869425058 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.869453907 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.869493961 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.947770119 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.947798014 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.947848082 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.947854996 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:16.947906971 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.947935104 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:16.985805035 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.985824108 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.985910892 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:16.985932112 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:16.986016035 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.064816952 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.064837933 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.064918041 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.064927101 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.064994097 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.086658001 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.086754084 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.086813927 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.088493109 CET	49720	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.088504076 CET	443	49720	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.094010115 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.094079971 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.094177961 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.094475031 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.094492912 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.094533920 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.094566107 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.094567060 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.094588041 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.094636917 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.097587109 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.097629070 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.097716093 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.097896099 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.097914934 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.104718924 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.104734898 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.104808092 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.104821920 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.104881048 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.110462904 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.110492945 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.110553026 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.110568047 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.110615969 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.110671997 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.183983088 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.184057951 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.184062958 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.184125900 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.184252024 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.184259892 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.184288979 CET	49718	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.184293032 CET	443	49718	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.220300913 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.220319033 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.220396996 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.220417023 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.220472097 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.240080118 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.240099907 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.240170956 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.240461111 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.240490913 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.240638971 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.241022110 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.241034985 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.243726969 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.243736029 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.243793964 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.244177103 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.244184971 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.244402885 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.244419098 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.246078014 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.246088028 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.246299028 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.246500015 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.246512890 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.247220993 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.247277021 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.247419119 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.247704983 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.247731924 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.337131023 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.337146997 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.337227106 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.337244987 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.337316036 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.337929010 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.337971926 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.337996960 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.338012934 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.338048935 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.338069916 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.374718904 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.374988079 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.375016928 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.376478910 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.376543999 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.376940012 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.377029896 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.377091885 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.377108097 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.400846004 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.400866985 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.400935888 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.400944948 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.400990009 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.401633024 CET	49723	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.401639938 CET	443	49723	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.406443119 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.406466007 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.406533957 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.406764030 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.406774998 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.409910917 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.409945011 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.410110950 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.410327911 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.410347939 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.414587975 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.414942980 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.414954901 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.415237904 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.415672064 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.415729046 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.415817022 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.428714991 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.454463959 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.454480886 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.454577923 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.454598904 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.454667091 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.455909967 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.455924988 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.456017017 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.456031084 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.456085920 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.457705021 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.457726955 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.457735062 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.457803011 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.457813978 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.459338903 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.482964039 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.482988119 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.483072996 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.483082056 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.507920027 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.529156923 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.571727037 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.571743011 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.571846962 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.571866035 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.571922064 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.577523947 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.577532053 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.577552080 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.577559948 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.577573061 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.577580929 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.577588081 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.577635050 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.604814053 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.604825974 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.604851007 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.604877949 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.604883909 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.604935884 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.607441902 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.607498884 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.621272087 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.621298075 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.621366024 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.621404886 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.621455908 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.689275026 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.689291954 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.689390898 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.689430952 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.689532995 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.693010092 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.693027973 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.693077087 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.693088055 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.693130970 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.693480968 CET	49722	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.693490028 CET	443	49722	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.697658062 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.697669983 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.697951078 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.698231936 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.698242903 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.699275970 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.699326038 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.699388027 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.699573040 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.699598074 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.721858978 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.721930981 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.805058956 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.805074930 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.805140972 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.805162907 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.805202961 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.806330919 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.806349039 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.806386948 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.806397915 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.806425095 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.806442976 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.815175056 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.815196037 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.815253019 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.815283060 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.815299988 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.815316916 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.815341949 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.818017960 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.818065882 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.818120003 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.818154097 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.818510056 CET	49725	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.818528891 CET	443	49725	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.840337992 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.840361118 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.840440035 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.840446949 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.840456963 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.840508938 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.840533018 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.840550900 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.840869904 CET	49721	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.840878010 CET	443	49721	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.844909906 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.844964027 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.845179081 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.845396042 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.845422029 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.922729969 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.922751904 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.922787905 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.922827959 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.922877073 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.922910929 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.924587011 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.924606085 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.924654007 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.924669981 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.924699068 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.940160036 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.940510035 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.940522909 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.940809965 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.941237926 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.941289902 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.941391945 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.946381092 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.946636915 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.946660042 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.947145939 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.947485924 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.947588921 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.947603941 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.979736090 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.987345934 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.988142014 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.988697052 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.988735914 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.989228010 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.989239931 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.990607977 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.990634918 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.990703106 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.990722895 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.990746021 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.990768909 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.990791082 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.991239071 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.991334915 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.991734982 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.993412018 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.993432999 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.994240046 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.994246960 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.994574070 CET	49724	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:17.994596958 CET	443	49724	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:17.998960972 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.998987913 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.999258995 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.999458075 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:17.999470949 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:17.999635935 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:17.999974012 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:17.999989033 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.000385046 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.000390053 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.008548021 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.008579016 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.008960009 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.008975983 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.009311914 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.009325981 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.009391069 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.009394884 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.009773970 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.009778976 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.040100098 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.040116072 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.040205002 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.040231943 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.040286064 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.041115046 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.041130066 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.041189909 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.041208029 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.041255951 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.125325918 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.125344992 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.125382900 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.125411034 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.125459909 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.125802040 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.125802040 CET	49732	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.125837088 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.125863075 CET	443	49732	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.128402948 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.128424883 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.128464937 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.131038904 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.131253004 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.131277084 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.131292105 CET	49729	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.131299973 CET	443	49729	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.135874033 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.135883093 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.135977030 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.137217045 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.137269974 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.137417078 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.137629032 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.137638092 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.137797117 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.137828112 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.138464928 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.138518095 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.138674021 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.138719082 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.138726950 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.138736963 CET	49731	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.138740063 CET	443	49731	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.141067028 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.141093969 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.141160011 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.141274929 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.141293049 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.146122932 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.146188021 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.146301031 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.146369934 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.146374941 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.146383047 CET	49728	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.146385908 CET	443	49728	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.147798061 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.147821903 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.147890091 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.147900105 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.147938967 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.147978067 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.148022890 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.148124933 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.148338079 CET	49730	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.148341894 CET	443	49730	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.149909019 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.149956942 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.150194883 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.151067972 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.151093006 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.151506901 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.151515961 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.151576996 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.151705980 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.151715994 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.156217098 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.156234980 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.156265020 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.156294107 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.156317949 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.156352997 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.157355070 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.157373905 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.157429934 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.157444000 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.157474995 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.200375080 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.200537920 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.200639009 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.201376915 CET	49727	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.201392889 CET	443	49727	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.207534075 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.207550049 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.207662106 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.207662106 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.207684994 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.258194923 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.266392946 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.266518116 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.266767979 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.266779900 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.266907930 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.266932964 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.268102884 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.268254995 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.268310070 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.269185066 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.269287109 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.269367933 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.269506931 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.269566059 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.269573927 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.269637108 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.274266958 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.274275064 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.274308920 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.274338961 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.274357080 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.274383068 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.274399996 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.304184914 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.304259062 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.304316044 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.304379940 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.304405928 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.304466963 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.304526091 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.307540894 CET	49726	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.307562113 CET	443	49726	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.313899040 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.313925982 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.318181038 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.318198919 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.318258047 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.318278074 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.318358898 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.319210052 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.319226027 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.319297075 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.319611073 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.319624901 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.391057014 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.391073942 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.391155005 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.391195059 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.391232014 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.391307116 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.393241882 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.393256903 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.393345118 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.393358946 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.393413067 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.435353994 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.435410976 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.435436964 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.435484886 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.436120987 CET	49716	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.436148882 CET	443	49716	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.522603035 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.522716045 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.522787094 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.522794962 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.522851944 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.525418043 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.539124012 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.577781916 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.593775034 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.612701893 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.612771988 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.612848997 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.612860918 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.612904072 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.612912893 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.613044024 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:18.614130974 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:18.677928925 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.721839905 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.841378927 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:18.876502991 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.881474018 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:18.891175032 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.898597002 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.930028915 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.933660984 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.934714079 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:18.946276903 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.948832989 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.978286028 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:18.978291988 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.101634026 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.101665974 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.102314949 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.102327108 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.102457047 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.102484941 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.102591038 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.102653980 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.102653980 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.102801085 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.102938890 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.102952957 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.103903055 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.103960991 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.104316950 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.105266094 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.105348110 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.105778933 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.105844975 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.106307030 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.106523991 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.106652975 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.106719971 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.106740952 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.106762886 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.106837988 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.147335052 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.147344112 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.150721073 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.151335955 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.168983936 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.170799971 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.170816898 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.171593904 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.173033953 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.173129082 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.173217058 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.217863083 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.217899084 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.217969894 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.218535900 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.218550920 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.219206095 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.219225883 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.219274998 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.219332933 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.219734907 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.219747066 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.220359087 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.220369101 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.220449924 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.220870972 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.220884085 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.221540928 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.221560001 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.221609116 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.221995115 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.222003937 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.225146055 CET	49733	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.225155115 CET	443	49733	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.264028072 CET	49734	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.264038086 CET	443	49734	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.267039061 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.267057896 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.267119884 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.267277002 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.267287016 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.268995047 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.269047022 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.269794941 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.269808054 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.270066977 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.270090103 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.270545959 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.270554066 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.270745993 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.270771027 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.271270990 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.271285057 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.271713018 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.271742105 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.272417068 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.272427082 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.273926020 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.273941994 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.274677992 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.274684906 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.387501955 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.387530088 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.387607098 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.387969971 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.387981892 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.391161919 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.391194105 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.391247988 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.391710997 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.391722918 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.630573988 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.630836964 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.631387949 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.631516933 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.631578922 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.631582022 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631592035 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631597996 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631609917 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.631638050 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631659985 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631663084 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631665945 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631678104 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.631679058 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.631709099 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631721020 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631736994 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.631745100 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.631743908 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.631767988 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.631774902 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.631803989 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.631818056 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.631941080 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.631959915 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.632000923 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.632004023 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.632044077 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.632247925 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.632296085 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.632339954 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.632344961 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.632368088 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.632412910 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.632491112 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.632538080 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.635591984 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.635601044 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.635611057 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.635653973 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.635665894 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.635694027 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.635730982 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.636054993 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636063099 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636076927 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636085987 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636090994 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636112928 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.636132956 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636148930 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.636188984 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.636801958 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636838913 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636863947 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.636882067 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.636897087 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.637563944 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.637578964 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.637635946 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.637644053 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.638628960 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.638659000 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.638688087 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.638694048 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.638741016 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.679182053 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.698852062 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.698860884 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.698889017 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.698934078 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.698946953 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.698982000 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.698997021 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.699239969 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.699284077 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.699332952 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.917500973 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.917517900 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.917526960 CET	49739	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.917532921 CET	443	49739	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.920159101 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.920183897 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.920200109 CET	49740	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.920207977 CET	443	49740	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.922528982 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.922570944 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.922584057 CET	49743	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.922590017 CET	443	49743	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.925919056 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.925919056 CET	49742	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.925940037 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.925961971 CET	443	49742	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.929826975 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.929841995 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.929852009 CET	49741	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:19.929856062 CET	443	49741	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:19.972918987 CET	49744	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.972927094 CET	443	49744	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.989094019 CET	49735	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:19.989109039 CET	443	49735	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:19.994446039 CET	49738	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.994456053 CET	443	49738	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.995800018 CET	49737	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.995807886 CET	443	49737	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:19.997121096 CET	49736	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:19.997128010 CET	443	49736	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.047934055 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.047956944 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.048032999 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.051748991 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.051781893 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.051862001 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.059144020 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.059164047 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.059873104 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.060170889 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.061395884 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.061407089 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.061564922 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.061579943 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.061728001 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.061924934 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.062103033 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.062525034 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.062540054 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.062611103 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.063045025 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.063106060 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.063500881 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.063509941 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.063992023 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.064076900 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.064403057 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.064518929 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.064805031 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.064861059 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.065493107 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.065568924 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.065779924 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.065794945 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.066374063 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.066386938 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.066565990 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.066576004 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.068541050 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.068553925 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.068670988 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.069044113 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.069063902 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.070547104 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.070878029 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.070888042 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.071724892 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.071784019 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.073285103 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.073324919 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.073520899 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.074589014 CET	49759	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.074596882 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.074754953 CET	49759	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.077168941 CET	49759	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.077176094 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.106132984 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.107338905 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.107906103 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.107917070 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.109358072 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.109428883 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.111330032 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.118248940 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.118261099 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.118267059 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.123882055 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.123966932 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.125179052 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.125186920 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.164316893 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.179495096 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.349699020 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.349749088 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.349833012 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.350738049 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.350755930 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.503302097 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.509738922 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.521317005 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.521332026 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.521588087 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.521605968 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.521831989 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.522069931 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.523132086 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.523215055 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.523412943 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.523488998 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.524333954 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.524372101 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.538885117 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538902044 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538908005 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538932085 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538942099 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538949013 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.538949966 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538960934 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538979053 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.538999081 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.539019108 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.543770075 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.567337036 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.571329117 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.571800947 CET	49748	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.571811914 CET	443	49748	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.579123974 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.579214096 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.579263926 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.584940910 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.607989073 CET	49746	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.607999086 CET	443	49746	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.672759056 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.672771931 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.672806978 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.672822952 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.672837973 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.672847986 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.672857046 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.672905922 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.765799999 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.776885986 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.776911020 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.776981115 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.776993990 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.777034998 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.777885914 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.777909040 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.777925014 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.777976036 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.777993917 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.778031111 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.778031111 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.779791117 CET	49752	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.779802084 CET	443	49752	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.780762911 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.780780077 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.780786991 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.780811071 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.780822992 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.780828953 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.780860901 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.780872107 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.780890942 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.780916929 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.784034967 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.784101963 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.784111977 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.789927006 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.789940119 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.789994955 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.790009022 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.790009022 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.790028095 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.790050983 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.790064096 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.808510065 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.812335968 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.812890053 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.812902927 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.813421011 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.813426018 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.824549913 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.828640938 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.829160929 CET	49759	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.829181910 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.829241991 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.829579115 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.829590082 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.829668045 CET	49759	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.829672098 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.830035925 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.830039978 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.830430031 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.830714941 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.830735922 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.831072092 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.831078053 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.832606077 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.832959890 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.832982063 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.833487034 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.833492041 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.883723021 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.883733034 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.883774042 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.883790970 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.883801937 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.883838892 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.883857965 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:20.883884907 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.883900881 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:20.896136999 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.896158934 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.896208048 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.896228075 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.896279097 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.896279097 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.901328087 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.901336908 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.901369095 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.901387930 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.901406050 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.901499987 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.901778936 CET	49747	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.901797056 CET	443	49747	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.906655073 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.906723976 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.906743050 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.906749964 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:20.906785011 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.906804085 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:20.950619936 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.950797081 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.950973988 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.952122927 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.952131987 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.952143908 CET	49755	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.952148914 CET	443	49755	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.956902981 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.956923008 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.957034111 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.957422972 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.957437992 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.960458994 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.960813999 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.960867882 CET	49759	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.962122917 CET	49759	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.962131977 CET	443	49759	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.965301037 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.965429068 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.965487957 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.965744019 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.965749025 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.965776920 CET	49757	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.965781927 CET	443	49757	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.967401981 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.967592001 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.967638969 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.967919111 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.967919111 CET	49756	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.967936039 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.967945099 CET	443	49756	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.969629049 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.969649076 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.969784021 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.970077991 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.970163107 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.970227003 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.970308065 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.970308065 CET	49758	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.970314980 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.970324039 CET	443	49758	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.971421957 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.971431971 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.972645044 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.972695112 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.972750902 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.972954035 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.972973108 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.973087072 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.973109961 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.973352909 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.973593950 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.973601103 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.973606110 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.973623991 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:20.973655939 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.973814964 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:20.973829031 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.001353979 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.001374960 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.001488924 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.001488924 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.001501083 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.001563072 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.011701107 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.011718988 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.011774063 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.011785984 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.011821032 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.011842012 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.023722887 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.023772955 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.023813009 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.023819923 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.023863077 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.023883104 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.120887041 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.120910883 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.121011972 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.121026039 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.121227980 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.128633976 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.128652096 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.128711939 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.128722906 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.128741980 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.128756046 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.131599903 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.131656885 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.131670952 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.131696939 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.141182899 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.141231060 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.141284943 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.141292095 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.141343117 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.186086893 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.229793072 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.238269091 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.238289118 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.238395929 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.238410950 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.238653898 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.258130074 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.258178949 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.258236885 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.258249998 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.258291006 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.355403900 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.355420113 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.355525970 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.355545044 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.358227968 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.363192081 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.363240004 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.363276005 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.363286018 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.363343954 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.363343954 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.376401901 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.376424074 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.376524925 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.376530886 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.378412962 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.472899914 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.472917080 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.473020077 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.473031044 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.473090887 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.493055105 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.493099928 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.493189096 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.493196011 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.493242979 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.493252993 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.493725061 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.493784904 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.493789911 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.493880033 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.493922949 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.584225893 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.584245920 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.585176945 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.585244894 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.585696936 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.585752964 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.585901022 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.585908890 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.586304903 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.586322069 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.586472034 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.586486101 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.586534977 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.595624924 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.595664978 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.595730066 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.595740080 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.595757961 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.628382921 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.630198956 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.632091045 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.635562897 CET	49745	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.635592937 CET	443	49745	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.647222996 CET	49750	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:21.647232056 CET	443	49750	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:21.699212074 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.712459087 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.712477922 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.712584972 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.712601900 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.712728977 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.721390009 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.724426031 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.743331909 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.757183075 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.760615110 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.761533022 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.778928041 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.787136078 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.787151098 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.790060997 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.790066004 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.790751934 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.790770054 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.791474104 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.791480064 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.792062044 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.792068958 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.792659998 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.792665005 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.793680906 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:21.793689013 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:21.793761015 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:21.794435024 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:21.794441938 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:21.795084000 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.795101881 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.795517921 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.795523882 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.796041012 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.796046972 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.797111034 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.797115088 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.829832077 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.829852104 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.829937935 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.829955101 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.829999924 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.834263086 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.834276915 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.834347963 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.834387064 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.834460020 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.834604979 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.834649086 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.835056067 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.923063993 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.923650026 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.923717022 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.926980019 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.927886009 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.927992105 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.928975105 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.929027081 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.929096937 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.929128885 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.929183006 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.929354906 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.929548025 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.929619074 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:21.929667950 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:21.948117018 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.948133945 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.948195934 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:21.948205948 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:21.952169895 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.033974886 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.033987045 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.033996105 CET	49762	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.034001112 CET	443	49762	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.036421061 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.036458015 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.036494017 CET	49765	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.036514044 CET	443	49765	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.037511110 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.037533045 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.037544012 CET	49766	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.037549019 CET	443	49766	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.041160107 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.041177034 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.041188955 CET	49763	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.041193962 CET	443	49763	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.043025970 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.043030977 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.043077946 CET	49764	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.043081999 CET	443	49764	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.056003094 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.056024075 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.056085110 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.056097031 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.056128025 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.056154013 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.066735029 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.066752911 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.066814899 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.066822052 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.066853046 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.066967964 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.072916985 CET	49769	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.072932959 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.072999954 CET	49769	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.073544025 CET	49760	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.073554039 CET	443	49760	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.082365036 CET	49770	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.082393885 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.082448959 CET	49770	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.090712070 CET	49771	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.090722084 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.090800047 CET	49771	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.106779099 CET	49769	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.106789112 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.109925032 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.109950066 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.110034943 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.110459089 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.110477924 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.112313032 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.112350941 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.112432003 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.112447977 CET	49770	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.112463951 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.112787008 CET	49771	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.112797976 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.115967035 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.115991116 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.175071955 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.175108910 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.175169945 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.175518036 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.175534010 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.178278923 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.178308964 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.178368092 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.178634882 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.178652048 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.183111906 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.183134079 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.183193922 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.183204889 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.183336973 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.290345907 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.290364027 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.290425062 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.290441036 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.290508986 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.301697969 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.301717043 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.301810980 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.301822901 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.301882982 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.417587042 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.417603016 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.417676926 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.417691946 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.417745113 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.482635975 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.483592033 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:22.483603954 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.483897924 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.503329039 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:22.503379107 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.503839016 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.503854036 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.503887892 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:22.503922939 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.503937006 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.503983974 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.535244942 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.535259962 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.535331964 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.535345078 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.535418034 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.547355890 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.834701061 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.834709883 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.834747076 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.834781885 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.834830046 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.834840059 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.834883928 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.835156918 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.835172892 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.835251093 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.835251093 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.835262060 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.835334063 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.835580111 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.835601091 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.835649014 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:22.835655928 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.835670948 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.835730076 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:22.836446047 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.836462021 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.836530924 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.836536884 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.836560011 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.836572886 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.836580038 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.836595058 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.836626053 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.836657047 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.837603092 CET	49768	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:22.837611914 CET	443	49768	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:22.909676075 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.909737110 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.909749031 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.909756899 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.909776926 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.909822941 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.909830093 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.909846067 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.910120010 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.910135984 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.910212994 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.910212994 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:22.910228014 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:22.923090935 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:22.923127890 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:22.923178911 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:22.978044033 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.978523970 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.978924990 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.979016066 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.979032040 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.979487896 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.979492903 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.980515957 CET	49771	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.980532885 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.980562925 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.980918884 CET	49771	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.980925083 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.981295109 CET	49769	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.981306076 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.981921911 CET	49769	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.981925964 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.982543945 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.982635021 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.982697964 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.983176947 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.983192921 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.983576059 CET	49770	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.983594894 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:22.984030962 CET	49770	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:22.984035015 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.008061886 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.008351088 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.008361101 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.008646011 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.009099960 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.009155989 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.009263039 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.012461901 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.012686014 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.012701988 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.012990952 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.013328075 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.013387918 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.013540030 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.026907921 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.026922941 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.026974916 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.026987076 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.027014017 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.027374983 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.027401924 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.027412891 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.027426004 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.027436972 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.027442932 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.027473927 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.027473927 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.051373959 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.059322119 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.117029905 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117094994 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117155075 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.117245913 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117315054 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117480993 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.117500067 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117511988 CET	49772	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.117520094 CET	443	49772	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117573977 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117585897 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.117655993 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.117830992 CET	49769	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.119366884 CET	49769	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.119374037 CET	443	49769	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.119947910 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.119995117 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.120054007 CET	49771	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.120213032 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.120376110 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.120578051 CET	49770	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.120827913 CET	49771	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.120834112 CET	443	49771	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.121491909 CET	49770	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.121509075 CET	443	49770	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.122545004 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.122561932 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.122595072 CET	49773	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.122625113 CET	443	49773	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.132972956 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.133002996 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.133145094 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.134529114 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.134569883 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.134644032 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.135493040 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.135521889 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.135623932 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.135732889 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.135752916 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.135807991 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.135890007 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.135904074 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.135978937 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.136003017 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.136203051 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.136225939 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.136869907 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.136885881 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.137075901 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.137090921 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.137202978 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.137289047 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.137305021 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.143995047 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144009113 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144047976 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.144061089 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144094944 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.144601107 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144608974 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144632101 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144649029 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144659996 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.144661903 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144674063 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144689083 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.144702911 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.144721985 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.187380075 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.261087894 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261096954 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261128902 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261138916 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261154890 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.261176109 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261192083 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.261239052 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.261816025 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261826038 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261850119 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261877060 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261878967 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.261888027 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.261909008 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.261923075 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.262243986 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.262276888 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.262317896 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.262326002 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.262449980 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.262449980 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.264854908 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.265116930 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.265182018 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.266774893 CET	49776	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.266781092 CET	443	49776	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.328079939 CET	49709	443	192.168.2.6	216.58.206.36
Oct 31, 2024 17:23:23.328094006 CET	443	49709	216.58.206.36	192.168.2.6
Oct 31, 2024 17:23:23.378830910 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.378859043 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.378931046 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.378942966 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.378983974 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379002094 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379014969 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.379034042 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379049063 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379060030 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.379086971 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.379544973 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379559994 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379627943 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.379637003 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379795074 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.379832029 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379873037 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.379909039 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.379909039 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.388977051 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.389008999 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.389141083 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.389698029 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.389714956 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.390388966 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.390429020 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.390481949 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.391053915 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.391067982 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.391696930 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.391711950 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.391845942 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.392282009 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.392294884 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.394038916 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.394068003 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.394143105 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.394678116 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.394690990 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.395476103 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.395493984 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.395658016 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.395827055 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.395838022 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.396291971 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.396301985 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.396361113 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.396542072 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.396554947 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.397233963 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.397242069 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.397403955 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.397634029 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:23.397655964 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:23.398933887 CET	49753	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.398946047 CET	443	49753	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.400253057 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:23.400273085 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:23.400475025 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:23.403039932 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:23.403052092 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:23.407331944 CET	49775	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:23.407345057 CET	443	49775	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:23.887393951 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.895709991 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.895728111 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.906069994 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.946106911 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:23.984385014 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:23.988122940 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.089306116 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.092139006 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.092138052 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.109947920 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.187154055 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.187192917 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.187982082 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.187999010 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.188371897 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.188395977 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.188626051 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.188644886 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.189081907 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.189091921 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.189996004 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.190001965 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.190202951 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.190217018 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.190789938 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.190794945 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.191215038 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.191236019 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.192007065 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.192013025 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.195373058 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.195379972 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.195688963 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.247131109 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.250854015 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.250916958 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.251430988 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.251460075 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.251785994 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.252127886 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.253609896 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.253676891 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.254082918 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.263396978 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.264795065 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.272196054 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.274714947 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.282423973 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.287450075 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.295330048 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.295361996 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.322624922 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.322803974 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.322871923 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.323045969 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.323165894 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.323390961 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.324160099 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.324407101 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.324464083 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.325228930 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.325370073 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.325490952 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.329617023 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.329704046 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.329797029 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.413855076 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.413882971 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.414179087 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.414197922 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.414328098 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.414340019 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.414478064 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.414485931 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.414643049 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.414669991 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.414719105 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.414769888 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.414777040 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.414856911 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.414946079 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.415225983 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.415239096 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.415292025 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.415894032 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.415904045 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.415920019 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.415941954 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.415962934 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.415987015 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.416409016 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.416469097 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.416874886 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.417098045 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.418566942 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.418637037 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.419085026 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.419147968 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.419605970 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.419671059 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.419997931 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.420066118 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.420377016 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.420437098 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.420550108 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.420589924 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.420597076 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.420634985 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.420651913 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.420764923 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.420772076 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.422399998 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.422456026 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.422489882 CET	49782	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.422507048 CET	443	49782	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.422806025 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.422823906 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.422848940 CET	49780	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.422859907 CET	443	49780	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.424197912 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.424212933 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.424252033 CET	49779	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.424258947 CET	443	49779	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.425426960 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.425426960 CET	49783	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.425445080 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.425452948 CET	443	49783	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.426944971 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.426944971 CET	49781	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.426950932 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.426958084 CET	443	49781	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.453857899 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.453885078 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.453983068 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.454632044 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454648972 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454655886 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454690933 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.454691887 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454700947 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.454716921 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.454729080 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454751968 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454780102 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.454780102 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.454781055 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454794884 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.454806089 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.454818964 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.454837084 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.466384888 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.466411114 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.467328072 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.467336893 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.467356920 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:24.467390060 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.467523098 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.467533112 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.467745066 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.467752934 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.467811108 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.471498966 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.471544981 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.471668959 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.474663019 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.474673986 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.475461960 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.475491047 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.479814053 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.479947090 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.479947090 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:24.500097036 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.500129938 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.500185966 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.509351969 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:24.509367943 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:24.530488968 CET	49792	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:24.530495882 CET	443	49792	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:24.632500887 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.632524014 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.632546902 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.632620096 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.632667065 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.632742882 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.679012060 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.679030895 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.679120064 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.679137945 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.679188013 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:24.692246914 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:24.777616024 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.090907097 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.090970039 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.090987921 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091034889 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091145039 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091178894 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091191053 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091208935 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091217041 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091222048 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091249943 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091286898 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091301918 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091336012 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091341972 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091387033 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.091404915 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.091434002 CET	49785	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091455936 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.091459990 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.091461897 CET	443	49785	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091520071 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.091676950 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091727972 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091734886 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091738939 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091759920 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091768026 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091768026 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091788054 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091805935 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091809988 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091814995 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091836929 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091849089 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091871977 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091872931 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091913939 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.091947079 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091947079 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.091980934 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.092287064 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.092295885 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.092318058 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.092325926 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.092340946 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.092346907 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.092354059 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.092397928 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.093457937 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.093532085 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.093570948 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.095096111 CET	49790	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.095105886 CET	443	49790	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.096330881 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.096355915 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.096381903 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.096410036 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.096532106 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.096548080 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.096590042 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.096604109 CET	49788	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.096610069 CET	443	49788	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.097304106 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.097311974 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.097337008 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.097362995 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.097372055 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.097390890 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.097419024 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.097454071 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.098325968 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098359108 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098368883 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098387957 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098397017 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098406076 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098411083 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.098423958 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098432064 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.098454952 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.098470926 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.098472118 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.098551035 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098561049 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098579884 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.098607063 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.098628998 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.098632097 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.098633051 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.098668098 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.098680019 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.098701954 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.098730087 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.098973036 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.098989964 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.099030972 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.099066019 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.099093914 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.099113941 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.099153042 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.099203110 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.099210024 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.099231005 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.099251986 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.099258900 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.099270105 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.099308968 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.099577904 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.099596024 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.099869013 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.099879980 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.099939108 CET	49786	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.099948883 CET	443	49786	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.100408077 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.100421906 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.100569010 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.101527929 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.101542950 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.102459908 CET	49789	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.102466106 CET	443	49789	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.163306952 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.163331032 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.163383007 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.163407087 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.163449049 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.163449049 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.172100067 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.172120094 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.172198057 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.172211885 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.172272921 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.177236080 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.177247047 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.177524090 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.178009033 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.178049088 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.178292036 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.181030035 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.181039095 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.183248997 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.183264017 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.233077049 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.234302044 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.234322071 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.234384060 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.236911058 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.240041971 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.240046978 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.241486073 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.241514921 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.242199898 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.243443966 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.243451118 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.244066954 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.244101048 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.245229006 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.245240927 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.245404959 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.245424986 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.245431900 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.245470047 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.245485067 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.245495081 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.245502949 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.245520115 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.245547056 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.245564938 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.246957064 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.246970892 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.248387098 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.248394012 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.250751972 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.250760078 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.250794888 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.250808001 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.250808954 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.250827074 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.250855923 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.250878096 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.283493996 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.283516884 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.283565998 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.283586025 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.283616066 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.283633947 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.295866966 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.295883894 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.295953035 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.296371937 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.296382904 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.317238092 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.350971937 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.351016045 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.352153063 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.352159023 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.366821051 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.366831064 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.366869926 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.366894960 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.366904020 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.366955042 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.372370005 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.372416019 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.372606039 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.375992060 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.376003027 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.376013041 CET	49794	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.376017094 CET	443	49794	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.377490997 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.378680944 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.378737926 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.378802061 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.378814936 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.378830910 CET	49793	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.378838062 CET	443	49793	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.379056931 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.379414082 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.379561901 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.379656076 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.379714012 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.379940987 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.379940987 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.379940987 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.381285906 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.381285906 CET	49795	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.381294012 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.381304026 CET	443	49795	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.388662100 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.388698101 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.388777971 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.389650106 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.389662981 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.389890909 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.390253067 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.390280008 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.390820026 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.390830994 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.391630888 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.391663074 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.391741037 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.391875982 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.391891003 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.392652988 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.392669916 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.393373966 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.393646955 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.393659115 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.399466038 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.399486065 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.399545908 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.399563074 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.399593115 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.399614096 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.407145023 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.407159090 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.407226086 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.407239914 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.407263041 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.407289982 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.407303095 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.407341003 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.407347918 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.407393932 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.408560038 CET	49787	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:25.408576965 CET	443	49787	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:25.482954979 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.482970953 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.483031988 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.483045101 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.483073950 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.483083010 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.485579014 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.485902071 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.485955000 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.486046076 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.486046076 CET	49797	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.486063004 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.486074924 CET	443	49797	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.489052057 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.489087105 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.489732027 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.489998102 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.490014076 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.601387978 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.601404905 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.601463079 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.601471901 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.601527929 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.607724905 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.607741117 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.607808113 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.607815027 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.607858896 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.679677963 CET	49796	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:25.679708958 CET	443	49796	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:25.720976114 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.720993996 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.721079111 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.721092939 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.721170902 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.776318073 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.776772976 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.776803017 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.777693987 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.777751923 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.778721094 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.778786898 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.778908968 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.819338083 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.839695930 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.839711905 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.839791059 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.839798927 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.840147018 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.845249891 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.845263958 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.845349073 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.845355988 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.845696926 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.849770069 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.852528095 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.852534056 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.853408098 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.853473902 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.854203939 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.854254007 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.854655027 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.854660034 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.861104965 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.861399889 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.861412048 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.862274885 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.862337112 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.862673044 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.862726927 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.862828016 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.862840891 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.942023039 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.942121029 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.942877054 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.943720102 CET	49798	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.943737030 CET	443	49798	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:25.944380999 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.944391012 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.944730043 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.945864916 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.945929050 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.946386099 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.954607010 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.954890966 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.954901934 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.955269098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.955535889 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.955599070 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.955842972 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.959888935 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.959904909 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.959997892 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.960006952 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.960083961 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.963264942 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.963331938 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:25.963339090 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.987333059 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:25.993494034 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.993676901 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:25.999339104 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.014451027 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.014466047 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.014523029 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.014581919 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.014640093 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.016818047 CET	49803	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.016824007 CET	443	49803	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068064928 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068085909 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068094969 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068149090 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.068151951 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068192005 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068217993 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068238974 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.068238974 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.068242073 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068254948 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.068270922 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.068289042 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.071266890 CET	49804	443	192.168.2.6	206.189.191.166
Oct 31, 2024 17:23:26.071285009 CET	443	49804	206.189.191.166	192.168.2.6
Oct 31, 2024 17:23:26.076450109 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.076512098 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.076523066 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081891060 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081898928 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081919909 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081927061 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081933022 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081949949 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.081959009 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081979036 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.081993103 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.082020998 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.141855955 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.142813921 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.142831087 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.145754099 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.151815891 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.151823997 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.152301073 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.152323961 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.152842045 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.152848005 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.155116081 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.155415058 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:26.155422926 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.155699015 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.156491041 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:26.156543016 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.156774998 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:26.172699928 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.173103094 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.173118114 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.173943996 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.173949003 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.195308924 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.195326090 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.195363998 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.195403099 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.195410967 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.195441008 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.195461988 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.199335098 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.199831009 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.200637102 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.200675011 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.200690985 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.200706005 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.200798035 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.200804949 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.200853109 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.201519012 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.201530933 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.204524040 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.243552923 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.245027065 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.245049953 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.245954990 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.245961905 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.283085108 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.283137083 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.283241034 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.283493042 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.283493042 CET	49807	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.283507109 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.283514977 CET	443	49807	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.284573078 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.284709930 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.284760952 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.284974098 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.284986973 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.284996033 CET	49808	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.285001040 CET	443	49808	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.287976027 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.288023949 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.288099051 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.289221048 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.289242029 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.290169954 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.290198088 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.290463924 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.290601015 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.290611982 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.308654070 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.308811903 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.308888912 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.309107065 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.309118986 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.309129953 CET	49809	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.309134960 CET	443	49809	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.312527895 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.312556982 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.312627077 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.312820911 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.312845945 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.314116001 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.314140081 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.314213991 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.314224005 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.314362049 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.319879055 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.319894075 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.319988966 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.319997072 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.323081017 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.324551105 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.324573040 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.324661970 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.324687004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.324697971 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.324740887 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.335339069 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.335441113 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.335494995 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.345635891 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.345659018 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.345705032 CET	49806	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.345716953 CET	443	49806	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.355412960 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.355432034 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.355523109 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.355694056 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.355705023 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.379050016 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.379122019 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.379364014 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.379395962 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.379410982 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.379421949 CET	49810	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.379426003 CET	443	49810	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.382565975 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.382585049 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.382703066 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.382905960 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:26.382913113 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:26.418584108 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.418601036 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.418653011 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:26.418664932 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.418700933 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.418747902 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:26.421530962 CET	49805	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:26.421540976 CET	443	49805	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:26.432873964 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.432892084 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.432967901 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.432980061 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.433886051 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.438771009 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.438785076 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.438859940 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.438873053 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.439081907 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.445807934 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.445817947 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.445837975 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.445843935 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.445871115 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.445882082 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.445908070 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.445943117 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.449919939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.449928045 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.449954033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.449980974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.449995041 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.450001955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.450051069 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.450061083 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.551549911 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.551605940 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.551620007 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.551640034 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.551673889 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.557512999 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.557528019 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.557562113 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.557585955 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.557595015 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.557636976 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.557646990 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.564310074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.564359903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.564373970 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.564392090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.564409018 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.615591049 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.673528910 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.673547029 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.673604012 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.673619032 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.673650026 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.673664093 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.675270081 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.675295115 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.675321102 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.675354958 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.675364017 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.675400019 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.675417900 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.676654100 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.676667929 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.676731110 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.676738024 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.676892996 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.681154966 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.681173086 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.681256056 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.681262970 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.681340933 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.683372974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.683383942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.683409929 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.683434010 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.683449030 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.683459997 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.683496952 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.731468916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.731479883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.731508970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.731539011 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.731549978 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.731600046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.789069891 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.789088011 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.789160013 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.789177895 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.789285898 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795079947 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795094013 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795156956 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795165062 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795208931 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795473099 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795491934 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795530081 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795537949 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795564890 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795578003 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795830011 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795845032 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795876026 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795881987 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.795913935 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.795938969 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.805541039 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.805565119 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.805628061 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.805639029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.805679083 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.909862995 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.909884930 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.909945965 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.909959078 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.909991980 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.910010099 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.912827969 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.912852049 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.912911892 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.912920952 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.912982941 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.914073944 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.914089918 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.914163113 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.914170027 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.914243937 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.922149897 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.922168016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.922233105 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.922252893 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.922291994 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.970805883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.970823050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.970906973 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:26.970930099 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:26.970988035 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.027170897 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.027173996 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.027192116 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.027198076 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.027343988 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.027354956 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.027376890 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.027384996 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.027415037 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.027442932 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.032274961 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.032322884 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.032366037 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.032373905 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.032418966 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.032731056 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.032763004 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.032804012 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.032818079 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.032831907 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.032855034 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.033905029 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.033946037 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.034039974 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.034048080 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.034132004 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.034435034 CET	49799	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.034442902 CET	443	49799	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.044461966 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.044483900 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.044548988 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.044570923 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.046241045 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.052047014 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.058790922 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.067202091 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.067272902 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.068084002 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.068113089 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.069089890 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.069104910 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.069924116 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.069932938 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.072833061 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.072906971 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.072994947 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.073259115 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.073307991 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.091207981 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.091823101 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.091856003 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.092286110 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.092298031 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.118160009 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.118688107 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.118709087 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.119158030 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.119163990 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.137904882 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.138334036 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.138346910 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.138752937 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.138757944 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.150873899 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.150895119 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.150959969 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.150975943 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.151262999 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.151428938 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.151487112 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.151487112 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.151499033 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.151546955 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.160430908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.160451889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.160506964 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.160523891 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.160749912 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.166652918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.166666985 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.166728973 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.166738033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.166768074 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.215110064 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.215300083 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.215367079 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.215507030 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.215524912 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.215543032 CET	49814	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.215553045 CET	443	49814	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.217135906 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.217345953 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.217406988 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.217607021 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.217607021 CET	49813	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.217641115 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.217664957 CET	443	49813	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.218947887 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.218964100 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.219249010 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.219444036 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.219455004 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.219597101 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.219633102 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.219820023 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.219912052 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.219922066 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.231744051 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.232209921 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.232296944 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.232353926 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.232367039 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.232394934 CET	49815	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.232423067 CET	443	49815	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.234364986 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.234406948 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.234484911 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.234605074 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.234620094 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.256702900 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.256763935 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.256906986 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.256925106 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.256932020 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.256939888 CET	49816	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.256943941 CET	443	49816	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.259167910 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.259188890 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.259272099 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.259412050 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.259419918 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.263902903 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.263926029 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.263964891 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.263981104 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.264014959 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.264054060 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.269365072 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.269381046 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.269442081 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.269455910 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.269509077 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.269993067 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.270006895 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.270057917 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.270066977 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.270104885 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.280783892 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.280802011 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.280852079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.280858994 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.280863047 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.280922890 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.280924082 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.280962944 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.281306982 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.281315088 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.281410933 CET	49817	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.281414986 CET	443	49817	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.283674955 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.283701897 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.283786058 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.283910036 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.283931017 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.288397074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.288417101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.288470030 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.288476944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.288676977 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.382937908 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.382958889 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.382994890 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.383038044 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.383054018 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.383068085 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.383115053 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.383889914 CET	49791	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.383898973 CET	443	49791	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.389559984 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.389614105 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.389702082 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.390316010 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.390341997 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.403158903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.403181076 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.403244972 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.403263092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.403294086 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.406476974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.406506062 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.406543970 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.406548977 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.406594992 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.519681931 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.519700050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.519789934 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.519805908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.519920111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.573163986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.573180914 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.573612928 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.573621035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.573657036 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.666587114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.666604996 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.666663885 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.666677952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.667006969 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.668737888 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.668754101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.668812990 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.668818951 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.668890953 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.786184072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.786204100 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.786333084 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.786351919 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.786427021 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.787480116 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.787492990 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.787554026 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.787559032 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.787821054 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.905350924 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.905368090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.905421972 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.905436039 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.905473948 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.906711102 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.906724930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.906775951 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.906780958 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.906819105 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.907032013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.907071114 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.938507080 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.938761950 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.938805103 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.939101934 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.939483881 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.939552069 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.939624071 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.968034029 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.968586922 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.968605042 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.969069958 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.969075918 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.971993923 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.972399950 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.972414970 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.972839117 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.972842932 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.975384951 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.975402117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.975444078 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.975451946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:27.975475073 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.975492001 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:27.983350992 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:27.992038012 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:27.994965076 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.995326042 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.995337009 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:27.995707035 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:27.995712042 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.019088030 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.019438982 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.019473076 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.019839048 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.019850969 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.025943041 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.025958061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.026024103 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.026032925 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.026070118 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.051325083 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.051928043 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.051955938 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.052226067 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.052243948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.052313089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.052330971 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.052370071 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.052463055 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.052474022 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.103051901 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.103111029 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.103285074 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.103635073 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.103655100 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.103666067 CET	49820	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.103671074 CET	443	49820	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.106796026 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.106834888 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.106933117 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.107130051 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.107145071 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.107738018 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.107888937 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.107953072 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.107975960 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.107986927 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.107995987 CET	49819	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.108000994 CET	443	49819	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.110558987 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.110584021 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.110707045 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.110872030 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.110883951 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.128514051 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.128582954 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.128624916 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.130141973 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.130156994 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.130166054 CET	49822	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.130171061 CET	443	49822	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.133976936 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.134016991 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.134181976 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.134357929 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.134375095 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.144582033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.144604921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.144658089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.144665003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.144695997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.145991087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.146006107 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.146059036 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.146064997 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.146169901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.159061909 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.159224033 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.159291983 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.159364939 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.159364939 CET	49821	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.159398079 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.159426928 CET	443	49821	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.161588907 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.161633968 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.161753893 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.161919117 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.161950111 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.186789036 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.187385082 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.187443018 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.187478065 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.187478065 CET	49823	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.187494993 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.187521935 CET	443	49823	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.189500093 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.189522028 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.189826012 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.189945936 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.189961910 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.192003965 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.214153051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.214168072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.214207888 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.214216948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.214257956 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.241621971 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.244436979 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.245312929 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.245337009 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.245697021 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.246488094 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.246563911 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.246846914 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.265264988 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.265281916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.265358925 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.265372038 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.265592098 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.290102959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.290138006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.290159941 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.290165901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.290214062 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.291330099 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.315376043 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.315387011 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.315411091 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.315424919 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.315443993 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.315444946 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.315473080 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.315510988 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.315510988 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.315542936 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.383709908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.383734941 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.383800983 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.383827925 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.383871078 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.384960890 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.384974003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.385040998 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.385046959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.385081053 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.410307884 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.410327911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.410422087 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.410442114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.410603046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.419843912 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:28.419902086 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:28.420021057 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:28.437045097 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.437057018 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.437089920 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.437164068 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.437184095 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.437221050 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.437242985 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.441443920 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.441461086 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.441534042 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.441548109 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.442214966 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.463491917 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:28.463525057 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:28.503386021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.503413916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.503463984 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.503473997 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.503523111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.504257917 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.504271030 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.504332066 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.504338980 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.504343987 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.504388094 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.529514074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.529531002 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.529608011 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.529613972 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.529658079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.545320988 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.559309006 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.559357882 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.559423923 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.559443951 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.559473991 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.600218058 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.631287098 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.631297112 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.631366014 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.631414890 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.631427050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.631444931 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.631475925 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.631475925 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.631494999 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.631503105 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.631511927 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.631521940 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.631541014 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.631545067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.631580114 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.631639004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.631652117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.631680965 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.631689072 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.631694078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.631705999 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.631731033 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.640198946 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.640223026 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.640306950 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.640328884 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.640408993 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.695475101 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.695485115 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.695508957 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.695564985 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.695580959 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.695628881 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.695652008 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.696995974 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.697011948 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.697113037 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.697127104 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.697319031 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.697354078 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.697381020 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.701450109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.701474905 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.701560974 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.701569080 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.701605082 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.746835947 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.746857882 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.746957064 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.747004032 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.747349024 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.750000000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.750020981 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.750088930 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.750099897 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.750153065 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.750844002 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.750858068 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.750924110 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.750930071 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.751089096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.771687031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.771704912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.771784067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.771790981 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.771823883 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.777906895 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.849334955 CET	49818	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.849370003 CET	443	49818	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.863759995 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.863785982 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.863861084 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.863886118 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.863917112 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.864003897 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.864074945 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.865654945 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.865672112 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.865741968 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.865757942 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.865971088 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.866163969 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.866383076 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.866441965 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.868707895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.868725061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.868787050 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.868793011 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.869038105 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.869647026 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.869659901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.869731903 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.869739056 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.869787931 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.891278982 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.891294003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.891376019 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.891381025 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.891429901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.902467012 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.905761003 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.920703888 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.923190117 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.923199892 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.924896002 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.924900055 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.925698996 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.925704956 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.926636934 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.926641941 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.929044962 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.929065943 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.932818890 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.932825089 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.935292959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.935326099 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.935367107 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.935372114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.935429096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.935893059 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.935956955 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.955147982 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.957900047 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.960113049 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.960130930 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.960773945 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.960781097 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.961023092 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.961064100 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.961704016 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:28.961735010 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:28.982997894 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.983016968 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.983089924 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.983114004 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:28.983164072 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:28.989696980 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.989713907 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.989768028 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.989778042 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.989809990 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.992345095 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.992357969 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.992412090 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:28.992419004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:28.992455006 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.057219028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.057235003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.057296991 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.057313919 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.057662010 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.061153889 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.061323881 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.061383009 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.063657999 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.063721895 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.064129114 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.070106030 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.071875095 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.072599888 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.093986034 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.094057083 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.094196081 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.098289967 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.098325968 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.098403931 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.098427057 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.098457098 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.098536968 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.100584030 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.100600004 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.100663900 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.100678921 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.100754023 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.107763052 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.107939959 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.108110905 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.108113050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.108130932 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.108181953 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.108198881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.108515024 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.108812094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.108825922 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.108880997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.108886957 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.108925104 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.126117945 CET	49827	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.126132011 CET	443	49827	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.129951954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.129970074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.130016088 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.130042076 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.130065918 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.130084991 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.177644014 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.177659035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.177728891 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.177736998 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.177787066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.215735912 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.215758085 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.215818882 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.215838909 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.215869904 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.215892076 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.217129946 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.217144966 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.217206001 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.217223883 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.217255116 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.217405081 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.230171919 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.230214119 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.230226994 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.230232000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.230274916 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.230825901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.230839968 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.230891943 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.230901003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.231256008 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.250835896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.250850916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.250921011 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.250929117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.250961065 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.297883987 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.297899008 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.297976971 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.297985077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.298028946 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.305686951 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:29.333889008 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.333931923 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.333971977 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.334008932 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.334058046 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.334155083 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.350289106 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.350322962 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.350409985 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.350419044 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.350460052 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.351067066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.351080894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.351141930 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.351146936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.351181984 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.357429028 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:29.359507084 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.359535933 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.359551907 CET	49830	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.359563112 CET	443	49830	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.362313986 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.362313986 CET	49829	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.362350941 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.362373114 CET	443	49829	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.364131927 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.364141941 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.364166021 CET	49828	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.364171982 CET	443	49828	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.365236998 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.365255117 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.365267038 CET	49826	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.365272999 CET	443	49826	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.372715950 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.372731924 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.372797012 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.372802973 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.372840881 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.379436016 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.379451036 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.379511118 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.379529953 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.379584074 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.416683912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.416701078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.416753054 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.416762114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.416814089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.436095953 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.442231894 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:29.442250967 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:29.443283081 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:29.443295002 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:29.443351984 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:29.449007034 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:29.449074030 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:29.450149059 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:29.450158119 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:29.450531006 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.450567961 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.450603008 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.450633049 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.450670004 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.450694084 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.468374968 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.468393087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.468460083 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.468467951 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.468513012 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.469542980 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.469562054 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.469641924 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.469645977 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.469685078 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.483931065 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.488368988 CET	49833	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.488389969 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.488506079 CET	49833	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.491965055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.491981983 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.492063046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.492069006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.492106915 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.492753983 CET	49833	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.492765903 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.496682882 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.496706963 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.496867895 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.496901989 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.497009993 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.500225067 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.500247955 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.500355005 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.500674009 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:29.500830889 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.500842094 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.502871990 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.502886057 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.503083944 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.503376961 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.503387928 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.504136086 CET	49836	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.504168987 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.504231930 CET	49836	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.504333973 CET	49836	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.504348040 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.511209011 CET	49837	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.511275053 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.511755943 CET	49837	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.512967110 CET	49837	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:29.513000965 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:29.535437107 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.535451889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.535516024 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.535526991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.535578966 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.567421913 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.567440987 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.567605019 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.567637920 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.567699909 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.587714911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.587729931 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.587790966 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.587799072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.587837934 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.587858915 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.588742971 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.588757038 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.588818073 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.588823080 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.588877916 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.589862108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.589875937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.589952946 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.589957952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.589994907 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.612159967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.612174034 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.612258911 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.612266064 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.612323046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.613611937 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.613629103 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.613720894 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.613756895 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.613945007 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.678277969 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.678292036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.678364038 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.678370953 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.678406000 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.689456940 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.689475060 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.689574003 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.689594984 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.689656019 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.704370022 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.704385042 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.704458952 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.704478979 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.704565048 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.714158058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.714174986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.714224100 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.714241028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.714258909 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.714282036 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.729506016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.729522943 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.729571104 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.729578018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.729614973 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.744195938 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.744210958 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.744281054 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.744288921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.744400978 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.806957960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.806973934 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.807044029 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.807051897 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.807109118 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.818463087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.818476915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.818559885 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.818569899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.818603992 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.822302103 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.822323084 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.822424889 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.822443962 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.822501898 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.837553978 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.837569952 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.837641954 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.837658882 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.837713957 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.858704090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.858720064 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.858778954 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.858786106 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.858836889 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.874979019 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.874999046 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.875071049 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.875077963 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.875108004 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.890057087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.890070915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.890070915 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.890090942 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.890144110 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.890151024 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:29.890203953 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:29.890217066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:29.890227079 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:29.890376091 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.136307001 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.136327982 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.136441946 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.136470079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.136535883 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.136913061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.136924982 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.136980057 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.136986017 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.137042999 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.137382984 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.137404919 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.137474060 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.137473106 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.137496948 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.137511969 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.137556076 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.137602091 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.139375925 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.139398098 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.139441013 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.139448881 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.139478922 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.139494896 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.139506102 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.139512062 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.139553070 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.139561892 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.139632940 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.140283108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.140296936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.140352964 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.140358925 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.140408993 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.140708923 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.140724897 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.140780926 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.140804052 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.140811920 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.140826941 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.140835047 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.140892029 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.140897989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.140948057 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.141745090 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.141757965 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.141762018 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.141769886 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.141823053 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.141839027 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.141875982 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.141880989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.141882896 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.141923904 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.142678022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.142689943 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.142743111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.142748117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.142926931 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.142940998 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.142992973 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.143002987 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.143022060 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.144237995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.144252062 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.144316912 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.144323111 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.144422054 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.157211065 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.157223940 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.157283068 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.157289028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.157341003 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.158494949 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.158508062 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.158562899 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.158567905 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.158591986 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.158606052 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.160202026 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.160214901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.160264969 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.160269022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.160278082 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.160295010 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.160304070 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.160307884 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.160345078 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.160371065 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.164875984 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.164897919 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.164953947 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.164974928 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.165004969 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.167057991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.167073965 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.167136908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.167143106 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.167222023 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.173877001 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.173969984 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.174792051 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.174848080 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.174851894 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.174890041 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.195755005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.195771933 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.195847034 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.195852995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.195894003 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.203258991 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.203283072 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.203352928 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.203387022 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.203413010 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.204281092 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.204294920 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.204341888 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.204356909 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.204385042 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.204615116 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.216418982 CET	49831	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.216439009 CET	443	49831	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.227987051 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.228008032 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.228163004 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.228605986 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.228614092 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.228712082 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.228724957 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.228770018 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.228776932 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.228801966 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.228826046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.229218960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.229231119 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.229288101 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.229291916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.229335070 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.230499029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.230513096 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.230576038 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.230576038 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.230587006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.230602026 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.230626106 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.230654001 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.230657101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.230736971 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.253441095 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.253462076 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.253739119 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.254230976 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:30.254240990 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:30.282135963 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.282222986 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.282843113 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.282857895 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.282927036 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.282949924 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.282979965 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.283796072 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.286798954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.286817074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.286870956 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.286878109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.286917925 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.296267033 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.296278000 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.296890974 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.299561977 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.302012920 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.302028894 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.303256035 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.303263903 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.303886890 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.303914070 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.304804087 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.304807901 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.310705900 CET	49836	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.310723066 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.312329054 CET	49836	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.312334061 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.312947989 CET	49833	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.312963009 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.314151049 CET	49833	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.314156055 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.316211939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.316226959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.316283941 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.316289902 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.316327095 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.322307110 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.324428082 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.324450016 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.324527979 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.324547052 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.324656963 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.331113100 CET	49837	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.331197023 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.331983089 CET	49837	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.332004070 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.349332094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.349349976 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.349428892 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.349438906 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.349493027 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.350063086 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.350076914 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.350135088 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.350140095 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.350188971 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.350266933 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.350281000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.350336075 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.350341082 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.350383997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.351660967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.351674080 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.351742029 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.351747990 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.351784945 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.399209976 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.399241924 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.399303913 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.399352074 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.399401903 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.399401903 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.400343895 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.400365114 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.400424957 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.400439978 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.400490999 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.406286001 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.406302929 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.406352997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.406359911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.406400919 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.435386896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.435404062 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.435487986 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.435497046 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.435533047 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.440252066 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.440857887 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.440946102 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.441114902 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.441142082 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.441204071 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.441277981 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.441318989 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.441984892 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.442082882 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.442985058 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.446260929 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.447570086 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.449088097 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.449152946 CET	49836	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.451766014 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.451839924 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.451927900 CET	49833	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.470001936 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.470088005 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.470158100 CET	49837	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.471330881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.471352100 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.471425056 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.471431017 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.471473932 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.472239017 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.472251892 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.472311020 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.472322941 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.472335100 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.472408056 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.473495960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.473507881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.473563910 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.473570108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.494503021 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.494924068 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.516617060 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.516659021 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.516710997 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.516748905 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.516788006 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.516875982 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.517139912 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.517205000 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.517219067 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.517246962 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:30.517297983 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:30.522921085 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.522934914 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.522999048 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.523008108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.523050070 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.527641058 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.527650118 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.527684927 CET	49835	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.527689934 CET	443	49835	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.530426025 CET	49833	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.530430079 CET	443	49833	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.531630039 CET	49837	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.531678915 CET	443	49837	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.534698963 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.534704924 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.534715891 CET	49834	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.534719944 CET	443	49834	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.537220001 CET	49836	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.537235975 CET	443	49836	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.554792881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.554810047 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.554888964 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.554896116 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.554944992 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.555887938 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.555902004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.555955887 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.555960894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.556025028 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.592281103 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.592294931 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.592353106 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.592359066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.592394114 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.593614101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.593626022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.593678951 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.593683958 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.593729973 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.593900919 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.593913078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.593959093 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.593967915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.593988895 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.594002008 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.594542980 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.594554901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.594594955 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.594599962 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.594649076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.650342941 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.680871964 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.680892944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.680951118 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.680958986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.681001902 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.681103945 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.681116104 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.681158066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.681165934 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:30.681188107 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.681202888 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:30.689348936 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:30.689361095 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:30.689481020 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.149198055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149210930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149255991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149338007 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.149348974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149390936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149393082 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.149401903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149420023 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149442911 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.149447918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149457932 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.149480104 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.149558067 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149570942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149599075 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.149604082 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.149625063 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.149647951 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.150645018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.150659084 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.150718927 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.150724888 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.150729895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.150744915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.150789976 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.150794029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.150825977 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.151962996 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.151976109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.152024031 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.152033091 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.152919054 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.152937889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.152966976 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.152972937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.152993917 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.153019905 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.153213978 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.153227091 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.153270960 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.153275013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.153306007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.153321028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.153348923 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.153354883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.153373957 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.153403044 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.154755116 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.154767036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.154828072 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.154834032 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.154889107 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.155549049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.155563116 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.155613899 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.155620098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.157771111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.158390999 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.158404112 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.158457994 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.158462048 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.158853054 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.158859015 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.158916950 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.160192013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.160206079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.160254955 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.160260916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.160541058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.160563946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.160589933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.160595894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.160617113 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.160646915 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.161798000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.161813021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.161861897 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.161869049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.161912918 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.162786961 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.162801981 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.162846088 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.162851095 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.162870884 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.162890911 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.163870096 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.163886070 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.163929939 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.163938046 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.164468050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.164484024 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.164530039 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.164535999 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.164547920 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.164568901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.165752888 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.165767908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.165806055 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.165810108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.165857077 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.166085005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.166098118 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.166157007 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.166162014 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.166212082 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.167335033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.167347908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.167392969 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.167401075 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.167444944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.167467117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.167486906 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.167494059 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.167509079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.167536974 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.169034004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.169045925 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.169100046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.169105053 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.169688940 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.169704914 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.169749022 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.169754028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.169796944 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.171412945 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.171425104 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.171467066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.171475887 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.171487093 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.171518087 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.173255920 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.173273087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.173316002 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.173319101 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.173326015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.173341036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.173358917 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.173387051 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.173391104 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.174153090 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.175513983 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.175525904 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.175574064 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.175578117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.175609112 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.175631046 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.175654888 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.175659895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.175677061 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.175703049 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.176316023 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.176330090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.176364899 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.176373959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.176388979 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.176403999 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.178021908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.178034067 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.178083897 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.178088903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.178168058 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.196310043 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.196325064 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.196394920 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.196400881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.196434021 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.197189093 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.197201967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.197251081 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.197256088 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.197829962 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.197845936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.197873116 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.197879076 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.197894096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.197923899 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.198287964 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.198301077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.198362112 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.198367119 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.199004889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.199022055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.199058056 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.199064016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.199086905 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.199130058 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.209805012 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.214262962 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.282645941 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.282666922 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.282737017 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.282742977 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.282790899 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.285320044 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.285332918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.285389900 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.285396099 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.286319017 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.296677113 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.296691895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.296782970 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.296793938 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.298161983 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.318286896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.318303108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.318378925 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.318384886 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.318427086 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.318983078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.318995953 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319051027 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.319056988 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319251060 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319268942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319304943 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.319309950 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319329977 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.319356918 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.319716930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319730043 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319791079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.319797993 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.319807053 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.320785999 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.320810080 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.320857048 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.320862055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.320898056 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.320911884 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.321562052 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.321580887 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.321608067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.321614027 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.321655989 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.321655989 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.403667927 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.403685093 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.403774977 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.403780937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.403825045 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.405194044 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.405214071 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.405278921 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.405284882 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.405337095 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.417370081 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.417385101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.417462111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.417468071 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.417506933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.439004898 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439019918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439093113 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.439099073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439136982 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.439439058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439450979 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439507008 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.439511061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439532995 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.439551115 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.439927101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439939976 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.439989090 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.439994097 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.440017939 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.440824032 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.440859079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.440913916 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.440921068 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.440957069 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.441473007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.441487074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.441531897 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.441536903 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.441540956 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.441553116 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.441582918 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.441587925 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.441602945 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.441631079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.490559101 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.490576982 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.491940022 CET	49841	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.491955042 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.492053986 CET	49841	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.522277117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.522295952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.522368908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.522383928 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.522428036 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.524312973 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.524327993 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.524410009 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.524415970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.524451971 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.536005974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.536020041 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.536084890 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.536091089 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.536140919 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.537983894 CET	49824	443	192.168.2.6	18.239.63.153
Oct 31, 2024 17:23:31.538048983 CET	443	49824	18.239.63.153	192.168.2.6
Oct 31, 2024 17:23:31.538976908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.538990021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.539037943 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.539042950 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.539083958 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.542325020 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.542834997 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.542845011 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.543210030 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.543217897 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.543764114 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.543776989 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.543837070 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.544383049 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.544393063 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.544436932 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.546540022 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.546590090 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.547523022 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.547576904 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.548305035 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.548310041 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.548554897 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.548559904 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.560746908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.560762882 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.560837030 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.560847998 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.560889006 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.561206102 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.561223984 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.561276913 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.561280966 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.561304092 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.561321020 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.562186003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.562199116 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.562241077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.562254906 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.562262058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.562298059 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.562344074 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.563323021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.563335896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.563399076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.563405037 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.564125061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.564142942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.564198971 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.564204931 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.564246893 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.591799974 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.593777895 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.669008970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.669025898 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.669111967 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.669118881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.669159889 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.669595957 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.669610023 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.669625044 CET	49841	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.669634104 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.669672012 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.669681072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.669722080 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.670536995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.670551062 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.670595884 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.670603991 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.670614004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.670648098 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.670685053 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.678956032 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.678967953 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.679043055 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.679049015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.680013895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.680032015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.680103064 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.680109024 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.680529118 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.680546045 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.680602074 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.680608034 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.680638075 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.681386948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.681402922 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.681443930 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.681448936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.681479931 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.681902885 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.681914091 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.681967974 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.681972980 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.682459116 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.682481050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.682516098 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.682521105 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.682544947 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.706156015 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.706175089 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.706242085 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.707232952 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.707242012 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.707390070 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.710614920 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.710697889 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.710777998 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.735809088 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.744962931 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.744975090 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.745062113 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.745070934 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.745240927 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:31.745282888 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:31.754962921 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.788408995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.788429022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.788484097 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.788492918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.788538933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.788928986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.788944006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.788989067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.788995028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.789100885 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.789455891 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.789469004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.789522886 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.789529085 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.789689064 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.789745092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.789757967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.789802074 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.789808035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.789895058 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.791397095 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.791415930 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.791491032 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.791498899 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.791589975 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.793026924 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.793035030 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.793109894 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.796063900 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.796072960 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.796128035 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.798408031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.798423052 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.798504114 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.798508883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.798546076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.799360991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.799375057 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.799448013 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.799452066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.799488068 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.800319910 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.800333023 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.800390005 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.800394058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.800430059 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.801634073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.801646948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.801702023 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.801707029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.801765919 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.802586079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.802598953 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.802647114 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.802651882 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.802704096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.803662062 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.803674936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.803757906 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.803762913 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.803802967 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.850878000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.850893974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.850954056 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.850960970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.850999117 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.906244040 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.906297922 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.906353951 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:31.906357050 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.906421900 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.908731937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.908749104 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.908881903 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.908891916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.909617901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.909635067 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.909686089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.909692049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.910372019 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.911403894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.911417961 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.911472082 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.911478043 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.912218094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.912235975 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.912271023 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.912276030 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.912306070 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.912332058 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.917664051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.917676926 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.917742968 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.917747974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.917798042 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.920773029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.920787096 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.920849085 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.920854092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.920907021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.920922041 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.920926094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.920937061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.920974016 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.921015978 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.921597004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.921611071 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.921660900 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.921665907 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.922579050 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.922688007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.922700882 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.922750950 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.922755957 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.922791004 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.923695087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.923710108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.923768997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.923773050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.924405098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.924420118 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.924448013 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.924452066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:31.924475908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.924499035 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.950381994 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:31.958539963 CET	49839	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:31.958547115 CET	443	49839	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.027925014 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.027940989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.028043032 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.028053045 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.028157949 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.029057980 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.029077053 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.029158115 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.029164076 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.029217005 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.029592991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.029606104 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.029664993 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.029670000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.029948950 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.030524015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.030535936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.030585051 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.030590057 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.030642033 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.031449080 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.031461954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.031510115 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.031514883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.031555891 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.037641048 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.037658930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.037722111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.037729025 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.037770033 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.039489985 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.039503098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.039557934 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.039563894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.039604902 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.039925098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.039937019 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.039999962 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.040004969 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.040056944 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.040688992 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.040700912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.040749073 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.040755033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.040806055 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.041492939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.041506052 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.041578054 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.041584015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.041672945 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.042475939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.042488098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.042543888 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.042548895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.042579889 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.042722940 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.043870926 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.043885946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.043935061 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.043941021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.043983936 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.147593021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.147608995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.147680044 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.147687912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.147722006 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.148237944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.148251057 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.148303032 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.148308039 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.148360014 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.149136066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.149148941 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.149204969 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.149209976 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.149243116 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.150177002 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.150194883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.150250912 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.150257111 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.150306940 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.151141882 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.151154995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.151194096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.151207924 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.151220083 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.151240110 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.157088995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.157104969 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.157200098 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.157206059 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.157244921 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.158463955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.158478975 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.158535957 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.158540964 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.158579111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.159308910 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.159327984 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.159394026 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.159399986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.159436941 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.160245895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.160259008 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.160314083 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.160319090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.161199093 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.161216974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.161247969 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.161252022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.161274910 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.161317110 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.162215948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.162230015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.162285089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.162292004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.162318945 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.162336111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.162816048 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.162827969 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.162883043 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.162889004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.164875031 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.241414070 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.266712904 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.266730070 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.266818047 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.266829967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.266993999 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.267587900 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.267601013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.267659903 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.267666101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.267838955 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.268079996 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.268091917 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.268141985 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.268146992 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.268228054 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.269378901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.269392014 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.269460917 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.269465923 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.270201921 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.270333052 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.270348072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.270402908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.270406961 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.274455070 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.276055098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.276067019 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.276124954 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.276130915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.276906013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.276927948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.276962996 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.276967049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.276989937 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.277019024 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.279083014 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.279100895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.279154062 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.279159069 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.279712915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.279728889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.279762030 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.279767036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.279795885 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.279824018 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.280505896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.280518055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.280579090 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.280582905 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.280616045 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.281413078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.281425953 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.281483889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.281488895 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.281497002 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.281508923 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.281531096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.281538010 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.281575918 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.282903910 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.282916069 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.282988071 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.282999039 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.283030987 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.287619114 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.295605898 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.295610905 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.296540976 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.296550035 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.297238111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.386096001 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.386111021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.386156082 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.386164904 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.386209965 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.386220932 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.386959076 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.386976004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.387006998 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.387012005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.387048006 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.387558937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.387572050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.387612104 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.387617111 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.387635946 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.387658119 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.388370037 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.388385057 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.388427019 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.388432026 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.388469934 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.389173031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.389188051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.389234066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.389239073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.389383078 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.390126944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.390139103 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.390182018 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.390187025 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.390235901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.396094084 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.396110058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.396168947 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.396177053 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.396214008 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.397587061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.397603035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.397654057 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.397659063 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.397696972 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.398690939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.398705006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.398737907 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.398741961 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.398793936 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.399610996 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.399626970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.399673939 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.399678946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.399709940 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.399724960 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.400110960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.400124073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.400167942 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.400171995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.400206089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.401041031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.401056051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.401086092 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.401091099 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.401120901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.402019978 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.402034998 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.402084112 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.402089119 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.402205944 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.402534962 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.402548075 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.402584076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.402589083 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.402606964 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.402633905 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.421228886 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.428564072 CET	49841	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.428577900 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.429286957 CET	49841	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.429291010 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.429759979 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.431864023 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.432045937 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.432125092 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.432564020 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.432574034 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.432583094 CET	49840	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.432586908 CET	443	49840	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.439327002 CET	49845	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.439349890 CET	443	49845	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.439441919 CET	49845	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.439728022 CET	49845	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.439742088 CET	443	49845	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.467861891 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.467880964 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.467928886 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.467938900 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.467979908 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.470020056 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.470026016 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.470066071 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.471730947 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.471739054 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.471781015 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.501195908 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.505980968 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.505996943 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.506098032 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.506107092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.506146908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.506867886 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.506881952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.506937027 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.506942987 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.507163048 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.507694960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.507709980 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.507760048 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.507765055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.507869959 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.508095980 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.508371115 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.508390903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.508411884 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.508416891 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.508450985 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.509150982 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.509166956 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.509213924 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.509218931 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.509350061 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.510416985 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.510432959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.510474920 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.510479927 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.510610104 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.510673046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.515211105 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.515631914 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.515650034 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.515690088 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.515696049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.515736103 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.516928911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.516942978 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.516985893 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.516992092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.517029047 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.518127918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.518141031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.518166065 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.518204927 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.518208981 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.518271923 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.518625975 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.518640995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.518682957 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.518687963 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.518711090 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.518727064 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.519474983 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.519489050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.519514084 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.519517899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.519547939 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.519984007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.519999027 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.520060062 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.520065069 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.520098925 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.520644903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.520658970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.520706892 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.520711899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.520761013 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.521835089 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.521850109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.521903038 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.521908998 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.521945000 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.548384905 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.561899900 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.561959028 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.562006950 CET	49841	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.585972071 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.586046934 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.587044001 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.587096930 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.587101936 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.587203026 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.590205908 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.610696077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.610714912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.610781908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.610793114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.610830069 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.626095057 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.626107931 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.626172066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.626179934 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.626224995 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.626707077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.626719952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.626764059 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.626768112 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.627223015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.627238989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.627278090 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.627283096 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.627331972 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.628068924 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.628082991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.628133059 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.628138065 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.628197908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.629580021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.629592896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.629636049 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.629642963 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.629667044 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.629689932 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.634773970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.634788036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.634834051 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.634840012 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.634876966 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.635519028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.635535955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.635570049 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.635574102 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.635602951 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.635621071 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.637069941 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.637083054 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.637130976 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.637135983 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.637170076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.637797117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.637809992 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.637855053 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.637861013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.638026953 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.638637066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.638650894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.638688087 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.638693094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.638721943 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.638735056 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.638904095 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.638917923 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.639029980 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.639034986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.639091969 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.639445066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.639460087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.639507055 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.639513016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.639554977 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.640064001 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.640077114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.640115023 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.640120983 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.640151978 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.640957117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.640969038 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.641021013 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.641026020 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.641123056 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.663315058 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.663343906 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.687757015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.687772989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.687848091 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.687855005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.687891006 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.703557968 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.703569889 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.705213070 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.705223083 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.705713034 CET	49841	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.705720901 CET	443	49841	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.707079887 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.707083941 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.707973003 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.707976103 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.710072994 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.710100889 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.711407900 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.711421967 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.712373018 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.724720955 CET	49838	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.724730968 CET	443	49838	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.741393089 CET	49846	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.741456985 CET	443	49846	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.741532087 CET	49846	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.741950035 CET	49846	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.741983891 CET	443	49846	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.744640112 CET	49847	443	192.168.2.6	57.128.74.66
Oct 31, 2024 17:23:32.744666100 CET	443	49847	57.128.74.66	192.168.2.6
Oct 31, 2024 17:23:32.744854927 CET	49847	443	192.168.2.6	57.128.74.66
Oct 31, 2024 17:23:32.745409966 CET	49847	443	192.168.2.6	57.128.74.66
Oct 31, 2024 17:23:32.745434999 CET	443	49847	57.128.74.66	192.168.2.6
Oct 31, 2024 17:23:32.745497942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.745520115 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.745558023 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.745569944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.745592117 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.745616913 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.746162891 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.746177912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.746229887 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.746236086 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.746292114 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.747945070 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.747958899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.748007059 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.748012066 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.748044014 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.748450041 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.748464108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.748495102 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.748503923 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.748523951 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.748542070 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.749299049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.749311924 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.749360085 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.749365091 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.749416113 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.749911070 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.749923944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.749989986 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.749994040 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.750032902 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.755337954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.755350113 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.755356073 CET	49848	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.755384922 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.755393982 CET	443	49848	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.755394936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.755438089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.755460024 CET	49848	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.755963087 CET	49848	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:32.755979061 CET	443	49848	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:32.756274939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.756289959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.756337881 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.756342888 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.756515026 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.757642984 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.757658005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.757713079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.757716894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.757760048 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.758076906 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.758093119 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.758142948 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.758147955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.758507967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.758526087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.758574009 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.758579016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.758603096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.758630991 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.758956909 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.758972883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.759058952 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.759063959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.759167910 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.759368896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.759385109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.759439945 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.759448051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.759501934 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.759932041 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.759946108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.759999990 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.760005951 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.760091066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.760512114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.760524035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.760581970 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.760586977 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.760782957 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.809566021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.809581041 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.809643030 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.809652090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.809755087 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.838439941 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.838579893 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.838711023 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.840984106 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.841042995 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.841202021 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.843643904 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.843653917 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.843677044 CET	49842	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.843681097 CET	443	49842	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.844132900 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.844332933 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.844424963 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.846513033 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.846551895 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.846580982 CET	49844	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.846596956 CET	443	49844	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.848321915 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.848326921 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.848335981 CET	49843	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.848339081 CET	443	49843	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.854149103 CET	49849	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.854182005 CET	443	49849	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.854273081 CET	49849	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.856786013 CET	49850	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.856811047 CET	443	49850	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.856910944 CET	49850	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.858439922 CET	49851	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.858450890 CET	443	49851	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.858776093 CET	49851	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.858993053 CET	49849	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.859008074 CET	443	49849	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.859358072 CET	49850	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.859380960 CET	443	49850	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.859612942 CET	49851	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:32.859623909 CET	443	49851	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:32.865186930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.865205050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.865262985 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.865268946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.865329027 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.866868973 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.866889000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.866956949 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.866965055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.867001057 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.867446899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.867461920 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.867515087 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.867520094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.867556095 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.867598057 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.867614031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.867656946 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.867661953 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.867707014 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.868596077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.868613005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.868674040 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.868678093 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.868767977 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.868786097 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.868793964 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.868798018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.868848085 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.874289036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.874303102 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.874366045 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.874377966 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.874423027 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.874898911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.874912977 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.874964952 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.874970913 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.875062943 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.876152992 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.876166105 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.876204014 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.876209021 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.876265049 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.877110958 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.877125025 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.877176046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.877181053 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.877217054 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.877677917 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.877695084 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.877742052 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.877747059 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.877876997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.878242016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.878254890 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.878319025 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.878323078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.878371954 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.878612041 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.878626108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.878680944 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.878686905 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.878731012 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.879172087 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.879187107 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.879237890 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.879242897 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.879514933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.879630089 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.879642963 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.879688978 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.879693031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.879930019 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.880131006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.880145073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.880170107 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.880175114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:32.880212069 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:32.892970085 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.196419954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.196459055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.196511030 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.196520090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.196566105 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.196885109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.196899891 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.196962118 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.196968079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.197066069 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.197411060 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.197423935 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.197477102 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.197482109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.197561979 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.198153973 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.198167086 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.198220015 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.198224068 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.198234081 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.198250055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.198255062 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.198278904 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.198282957 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.198298931 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.198328018 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.199146986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.199160099 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.199206114 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.199209929 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.199233055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.199249029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.199265003 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.199269056 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.199304104 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.199335098 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.200124979 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.200141907 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.200190067 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.200198889 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.200208902 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.200242996 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.200269938 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.201111078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.201124907 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.201172113 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.201176882 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.201215029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.201232910 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.201256990 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.201261997 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.201281071 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.202075958 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.202088118 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.202131987 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.202138901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.202764034 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.202781916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.202805042 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.202810049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.202857018 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.203063011 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.203075886 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.203125000 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.203130007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.203155994 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.203174114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.203197002 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.203202963 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.203217983 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.204030991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204049110 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204113007 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.204118967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204559088 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204581022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204615116 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.204622984 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204646111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.204655886 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204668045 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.204705954 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.204710960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.205667973 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.205683947 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.205741882 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.205746889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.206136942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.206149101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.206173897 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.206177950 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.206222057 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.206264019 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.206278086 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.206310987 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.206315994 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.206342936 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.207123995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207139015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207184076 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207190037 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.207194090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207205057 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207227945 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.207232952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207250118 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.207672119 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.207681894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207701921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207741022 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.207746029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207863092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207880020 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207906008 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.207912922 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.207937002 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.208687067 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.208699942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.208745003 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.208750010 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.208772898 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.209207058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.209224939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.209260941 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.209266901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.209286928 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.209383965 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.209395885 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.209434986 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.209440947 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210210085 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210227013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210261106 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.210264921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210274935 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210287094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210294962 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.210341930 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.210346937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210683107 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210700035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210767031 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.210767031 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.210772991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210839033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210851908 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.210911989 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.210911989 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.210918903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.211688995 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.211707115 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.211740971 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.211752892 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.211755037 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.211761951 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.211802006 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.211834908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.212201118 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.212215900 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.212261915 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.212271929 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.212297916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.212313890 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.212320089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.212323904 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.212356091 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.212394953 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.215986013 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.216131926 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.225949049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.225964069 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.226047039 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.226054907 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.226181984 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.226288080 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.226303101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.226352930 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.226357937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.226660967 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.227134943 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227149010 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227196932 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.227201939 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227251053 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.227582932 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227598906 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227647066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.227653027 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227771997 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227792025 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227818966 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.227824926 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.227844954 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.227875948 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.228099108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.228118896 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.228168964 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.228173971 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.228261948 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.228980064 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.228995085 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.229032040 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.229037046 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.229063034 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.229083061 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.229245901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.229260921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.229315996 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.229321003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.229768991 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.232875109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.232892036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.232955933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.232959986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.233028889 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.233144045 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.233163118 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.233196974 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.233201981 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.233233929 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.233247042 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.234751940 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.234766006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.234814882 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.234819889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.234872103 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.235495090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.235510111 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.235567093 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.235572100 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.235903978 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.236968040 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.236980915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237042904 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237046957 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237276077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237277985 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237284899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237309933 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237329960 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237334013 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237355947 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237374067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237617970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237632036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237677097 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237680912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237725973 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237860918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237874985 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237912893 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.237916946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.237972021 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.238151073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238164902 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238209009 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.238214016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238432884 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.238456964 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238471031 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238509893 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.238513947 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238538027 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.238555908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.238843918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238861084 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.238902092 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.238905907 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.239020109 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.330122948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.330138922 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.330198050 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.330204964 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.330249071 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.345590115 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.345603943 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.345688105 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.345694065 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.345736027 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.346162081 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.346174955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.346231937 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.346236944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.346345901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.346796989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.346810102 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.346853971 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.346859932 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.346937895 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.346996069 CET	443	49845	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.347095966 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.347109079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.347151995 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.347157955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.347202063 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.347495079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.347507954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.347558975 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.347563982 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.347923040 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.348218918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.348231077 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.348277092 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.348282099 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.348351955 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.348723888 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.348736048 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.348781109 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.348784924 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.348963022 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.351897955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.351911068 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.351988077 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.351993084 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.352041960 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.352375984 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.352387905 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.352442026 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.352446079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.352549076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.353287935 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.353300095 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.353368044 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.353373051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.353439093 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.354118109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.354131937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.354195118 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.354201078 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.354238987 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.355597019 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.355609894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.355655909 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.355659962 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.355700016 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.356481075 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.356493950 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.356542110 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.356545925 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.356580973 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.356812000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.356823921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.356874943 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.356878996 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357140064 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357157946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357192993 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.357198000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357220888 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.357254028 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.357436895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357449055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357503891 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.357507944 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357605934 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.357739925 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357752085 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357809067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.357812881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357867956 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.357985020 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.357996941 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.358047962 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.358051062 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.358150005 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.358457088 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.358470917 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.358522892 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.358530998 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.358581066 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.359577894 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.359591961 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.359658957 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.359664917 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.359694004 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.360418081 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.374628067 CET	49845	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:33.374644041 CET	443	49845	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.375364065 CET	49845	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:33.375369072 CET	443	49845	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.464880943 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.464899063 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.464955091 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.464960098 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.465018988 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.465339899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.465353012 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.465404987 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.465409040 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.465436935 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.465452909 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.466115952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466130972 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466180086 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.466186047 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466232061 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.466403961 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466423988 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466458082 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.466460943 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466485977 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.466502905 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.466739893 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466753960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.466798067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.466803074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.467102051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.467120886 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.467159986 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.467164993 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.467180967 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.467209101 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.468261003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.468274117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.468332052 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.468337059 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.468429089 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.468558073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.468571901 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.468617916 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.468621016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.468689919 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.471493959 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.471508980 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.471585035 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.471590042 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.471630096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.471853018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.471865892 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.471924067 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.471929073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.472160101 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.473113060 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.473125935 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.473171949 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.473176956 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.474220037 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.474241018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.474267960 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.474273920 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.474293947 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.474322081 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.475152016 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.475164890 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.475203991 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.475208998 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.475233078 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.475246906 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476011992 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476023912 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476068020 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476073027 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476094961 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476113081 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476267099 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476279974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476321936 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476325989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476347923 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476361990 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476577997 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476591110 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476629972 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476634026 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.476649046 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.476671934 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.477019072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477030993 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477068901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.477072954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477438927 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477456093 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477461100 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.477464914 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477487087 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.477519989 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.477675915 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477689028 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477727890 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.477734089 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.477785110 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.478362083 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.478374004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.478410006 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.478414059 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.478509903 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.479017973 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.479031086 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.479072094 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.479077101 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.479121923 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.499562979 CET	443	49846	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.501548052 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.508718014 CET	443	49845	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.509036064 CET	443	49845	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.509197950 CET	49845	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:33.555038929 CET	49846	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:33.584918022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.584938049 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.585061073 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.585069895 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.585114002 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.585421085 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.585436106 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.585494041 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.585499048 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.586182117 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.586620092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.586633921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.586695910 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.586700916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.587044954 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.587063074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.587097883 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.587105989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.587129116 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.587156057 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.587744951 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.587759018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.587816954 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.587821007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.588257074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.588274002 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.588310957 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.588320971 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.588349104 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.588376045 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.588661909 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.588676929 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.588732958 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.588738918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.589765072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.589782000 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.589819908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.589827061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.589853048 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.589879036 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.590209007 CET	443	49847	57.128.74.66	192.168.2.6
Oct 31, 2024 17:23:33.590354919 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.590369940 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.590435028 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.590441942 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.592170000 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.592473030 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.592489958 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.592549086 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.592554092 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.592825890 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.592843056 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.592871904 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.592876911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.592899084 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.592927933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.593689919 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.593703985 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.593761921 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.593769073 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595140934 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595160007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595170021 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.595176935 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595226049 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.595463991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595479012 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595529079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.595535040 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595726967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595747948 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595772982 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.595777988 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.595818996 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.595988989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596003056 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596051931 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.596056938 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596286058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596302986 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596330881 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.596335888 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596374035 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.596556902 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596574068 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596621990 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.596626997 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596853018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596869946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.596919060 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.596925974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.597198009 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.597209930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.597258091 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.597261906 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.597553015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.597568989 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.597598076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.597601891 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.597625971 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.597656012 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.598337889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.598352909 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.598396063 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.598401070 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.598417997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.598438978 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.610667944 CET	443	49848	5.101.37.37	192.168.2.6
Oct 31, 2024 17:23:33.614279032 CET	443	49850	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.619534016 CET	443	49851	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.626744986 CET	443	49849	13.107.253.72	192.168.2.6
Oct 31, 2024 17:23:33.635055065 CET	49847	443	192.168.2.6	57.128.74.66
Oct 31, 2024 17:23:33.667052031 CET	49848	443	192.168.2.6	5.101.37.37
Oct 31, 2024 17:23:33.667152882 CET	49850	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:33.704215050 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.704233885 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.704305887 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.704314947 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.704356909 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.704627037 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.704641104 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.704710007 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.704714060 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.705351114 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.705367088 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.705394030 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.705399036 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.705429077 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.705452919 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.706192017 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.706204891 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.706269026 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.706273079 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.706302881 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.706687927 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.706701040 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.706752062 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.706757069 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.707290888 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.707308054 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.707349062 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.707355022 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.707389116 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.707422972 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.707911015 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.707926035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.707969904 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.707973003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.708017111 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.708779097 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.708791971 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.708838940 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.708843946 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.709363937 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.709379911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.709410906 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.709414005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.709453106 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.711919069 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.711934090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.711993933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.711998940 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.712039948 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.712294102 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.712307930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.712349892 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.712353945 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.712529898 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.712546110 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.712573051 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.712578058 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.712611914 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.713207006 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.713219881 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.713253975 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.713257074 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.713275909 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.713294983 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715070963 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715085030 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715137005 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715142965 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715257883 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715276003 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715301037 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715306044 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715327978 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715353966 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715646029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715658903 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715696096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715704918 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715715885 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715734959 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.715956926 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.715972900 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716029882 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716034889 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716326952 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716344118 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716368914 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716372967 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716396093 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716422081 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716423035 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716433048 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716449976 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716470957 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716475010 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716485977 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716505051 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716759920 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716773987 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716814995 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716818094 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.716839075 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.716857910 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.717073917 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717087030 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717123985 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.717128038 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717418909 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717433929 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717459917 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.717463970 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717482090 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.717510939 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.717714071 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717725992 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717763901 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.717770100 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.717808962 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.763044119 CET	49851	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:33.763150930 CET	49849	443	192.168.2.6	13.107.253.72
Oct 31, 2024 17:23:33.789289951 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.789307117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.789406061 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.789413929 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.789453983 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.823796988 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.823812008 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.823890924 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.823896885 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.823940992 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.824496984 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.824511051 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.824563026 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.824568033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.825583935 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.825602055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.825645924 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.825650930 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.826080084 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.826092958 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.826119900 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.826123953 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.826174021 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.826437950 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.826451063 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.826500893 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.826505899 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.827182055 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.827199936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.827229023 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.827233076 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.827267885 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.827573061 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.827585936 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.827630043 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.827637911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.828325033 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.828341007 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.828367949 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.828372955 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.828411102 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.828823090 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.828835964 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.828881979 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.828888893 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.831279993 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.831300974 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.831346989 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.831352949 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.831391096 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.831414938 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.831592083 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.831604004 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.831655025 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.831660032 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.832015991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.832032919 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.832057953 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.832062960 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.832093000 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.832118034 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.832945108 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.832957983 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.833014011 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.833019018 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.833049059 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.834259987 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834273100 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834320068 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.834326029 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834372044 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.834491968 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834505081 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834536076 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.834539890 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834578037 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.834777117 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834789991 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834819078 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.834824085 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.834842920 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.834862947 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.835120916 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835134983 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835181952 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.835186005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835530043 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835547924 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835577965 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.835582972 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835603952 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.835627079 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.835910082 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835923910 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835956097 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.835959911 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.835983038 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.836010933 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.836247921 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.836261988 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.836309910 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.836316109 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.836766005 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.836782932 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.836812019 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.836816072 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.836834908 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.836865902 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.837116957 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837131023 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837177992 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.837182999 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837450027 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837471008 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837496042 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.837500095 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837532997 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.837555885 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.837717056 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837730885 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.837775946 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.837781906 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.838174105 CET	49800	443	192.168.2.6	18.66.92.98
Oct 31, 2024 17:23:33.943038940 CET	443	49800	18.66.92.98	192.168.2.6
Oct 31, 2024 17:23:33.943056107 CET	443	49800	18.66.92.98	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 17:23:09.244679928 CET	192.168.2.6	1.1.1.1	0xd09a	Standard query (0)	travelbusinessclass.us5.list-manage.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:09.246548891 CET	192.168.2.6	1.1.1.1	0x4766	Standard query (0)	travelbusinessclass.us5.list-manage.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:10.624427080 CET	192.168.2.6	1.1.1.1	0x598a	Standard query (0)	travelbusinessclass.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:10.624874115 CET	192.168.2.6	1.1.1.1	0x8d8e	Standard query (0)	travelbusinessclass.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:12.068969965 CET	192.168.2.6	1.1.1.1	0xa861	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:12.070046902 CET	192.168.2.6	1.1.1.1	0x5454	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:12.298767090 CET	192.168.2.6	1.1.1.1	0xe753	Standard query (0)	di7qaez2koc7r.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:12.302481890 CET	192.168.2.6	1.1.1.1	0x474b	Standard query (0)	di7qaez2koc7r.cloudfront.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:14.162249088 CET	192.168.2.6	1.1.1.1	0x56c6	Standard query (0)	di7qaez2koc7r.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:14.162789106 CET	192.168.2.6	1.1.1.1	0xa271	Standard query (0)	di7qaez2koc7r.cloudfront.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:25.130747080 CET	192.168.2.6	1.1.1.1	0x2a10	Standard query (0)	travelbusinessclass.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:25.130955935 CET	192.168.2.6	1.1.1.1	0x49c2	Standard query (0)	travelbusinessclass.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:28.391629934 CET	192.168.2.6	1.1.1.1	0x80c5	Standard query (0)	code-eu1.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:28.391827106 CET	192.168.2.6	1.1.1.1	0xaa78	Standard query (0)	code-eu1.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:30.236494064 CET	192.168.2.6	1.1.1.1	0x30f8	Standard query (0)	code-eu1.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:30.236829996 CET	192.168.2.6	1.1.1.1	0xf00b	Standard query (0)	code-eu1.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:32.734167099 CET	192.168.2.6	1.1.1.1	0x9dd4	Standard query (0)	node-ya-10.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:32.735358000 CET	192.168.2.6	1.1.1.1	0xe119	Standard query (0)	node-ya-10.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:34.874825001 CET	192.168.2.6	1.1.1.1	0x78b7	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.875257015 CET	192.168.2.6	1.1.1.1	0x852a	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:34.877996922 CET	192.168.2.6	1.1.1.1	0xc8b5	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.878616095 CET	192.168.2.6	1.1.1.1	0x507e	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 31, 2024 17:23:34.880491972 CET	192.168.2.6	1.1.1.1	0x3b1	Standard query (0)	cloud.roistat.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.880940914 CET	192.168.2.6	1.1.1.1	0xb36d	Standard query (0)	cloud.roistat.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:34.954142094 CET	192.168.2.6	1.1.1.1	0x9f5b	Standard query (0)	node-ya-10.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.954525948 CET	192.168.2.6	1.1.1.1	0x6ea8	Standard query (0)	node-ya-10.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:35.741305113 CET	192.168.2.6	1.1.1.1	0x3e3b	Standard query (0)	code.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.741657019 CET	192.168.2.6	1.1.1.1	0x2ab2	Standard query (0)	code.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:35.760554075 CET	192.168.2.6	1.1.1.1	0xe19b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.760814905 CET	192.168.2.6	1.1.1.1	0xea75	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:35.887969017 CET	192.168.2.6	1.1.1.1	0x22fc	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.888186932 CET	192.168.2.6	1.1.1.1	0x1a2b	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 31, 2024 17:23:36.890618086 CET	192.168.2.6	1.1.1.1	0x7ed4	Standard query (0)	cloud.roistat.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:36.891185045 CET	192.168.2.6	1.1.1.1	0xc57c	Standard query (0)	cloud.roistat.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:36.892735004 CET	192.168.2.6	1.1.1.1	0x2669	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:36.893028975 CET	192.168.2.6	1.1.1.1	0x8f8c	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:37.131450891 CET	192.168.2.6	1.1.1.1	0x809f	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.131602049 CET	192.168.2.6	1.1.1.1	0x7ea3	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 31, 2024 17:23:37.187732935 CET	192.168.2.6	1.1.1.1	0xbaa8	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.187881947 CET	192.168.2.6	1.1.1.1	0xbce3	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:37.218744993 CET	192.168.2.6	1.1.1.1	0xca08	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.219127893 CET	192.168.2.6	1.1.1.1	0xc4e0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:37.263813019 CET	192.168.2.6	1.1.1.1	0x2c98	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.263956070 CET	192.168.2.6	1.1.1.1	0xc316	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:37.603267908 CET	192.168.2.6	1.1.1.1	0x8d6d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.603754997 CET	192.168.2.6	1.1.1.1	0xe24f	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:38.690121889 CET	192.168.2.6	1.1.1.1	0xf822	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:38.690902948 CET	192.168.2.6	1.1.1.1	0x2f96	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 31, 2024 17:23:42.662343979 CET	192.168.2.6	1.1.1.1	0x21b4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:42.662575006 CET	192.168.2.6	1.1.1.1	0xa6ac	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:42.663523912 CET	192.168.2.6	1.1.1.1	0x4e92	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:42.663661957 CET	192.168.2.6	1.1.1.1	0x3ee	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:43.425604105 CET	192.168.2.6	1.1.1.1	0x22d1	Standard query (0)	telephony.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:43.425769091 CET	192.168.2.6	1.1.1.1	0x3f37	Standard query (0)	telephony.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:43.897427082 CET	192.168.2.6	1.1.1.1	0x4ceb	Standard query (0)	vi-ya-6.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:44.018714905 CET	192.168.2.6	1.1.1.1	0x6dc4	Standard query (0)	vi-ya-6.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:45.850145102 CET	192.168.2.6	1.1.1.1	0x406d	Standard query (0)	telemetry.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:45.850289106 CET	192.168.2.6	1.1.1.1	0xe59a	Standard query (0)	telemetry.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:46.224781036 CET	192.168.2.6	1.1.1.1	0x654e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.224996090 CET	192.168.2.6	1.1.1.1	0x8acb	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 17:23:46.228363991 CET	192.168.2.6	1.1.1.1	0xa6fb	Standard query (0)	code.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.228496075 CET	192.168.2.6	1.1.1.1	0xfd08	Standard query (0)	code.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:46.393929958 CET	192.168.2.6	1.1.1.1	0xa984	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.394157887 CET	192.168.2.6	1.1.1.1	0x2f58	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 31, 2024 17:23:46.412349939 CET	192.168.2.6	1.1.1.1	0xf800	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.412972927 CET	192.168.2.6	1.1.1.1	0xcac1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:46.413532019 CET	192.168.2.6	1.1.1.1	0x6e1f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.413939953 CET	192.168.2.6	1.1.1.1	0x9782	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 31, 2024 17:23:46.565058947 CET	192.168.2.6	1.1.1.1	0xa6b8	Standard query (0)	telephony.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.565625906 CET	192.168.2.6	1.1.1.1	0x890f	Standard query (0)	telephony.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:24:03.029218912 CET	192.168.2.6	1.1.1.1	0x6082	Standard query (0)	files.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:24:03.029485941 CET	192.168.2.6	1.1.1.1	0x3b58	Standard query (0)	files.jivosite.com	65	IN (0x0001)	false
Oct 31, 2024 17:24:04.329418898 CET	192.168.2.6	1.1.1.1	0x8f5b	Standard query (0)	files.jivosite.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:24:04.329706907 CET	192.168.2.6	1.1.1.1	0x444d	Standard query (0)	files.jivosite.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 17:23:09.255970955 CET	1.1.1.1	192.168.2.6	0xd09a	No error (0)	travelbusinessclass.us5.list-manage.com	swc.list-manage.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:09.281867981 CET	1.1.1.1	192.168.2.6	0x4766	No error (0)	travelbusinessclass.us5.list-manage.com	swc.list-manage.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:10.663058996 CET	1.1.1.1	192.168.2.6	0x598a	No error (0)	travelbusinessclass.com		206.189.191.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:12.076848984 CET	1.1.1.1	192.168.2.6	0xa861	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:12.077815056 CET	1.1.1.1	192.168.2.6	0x5454	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 17:23:12.319864035 CET	1.1.1.1	192.168.2.6	0xe753	No error (0)	di7qaez2koc7r.cloudfront.net		18.66.92.98	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:12.319864035 CET	1.1.1.1	192.168.2.6	0xe753	No error (0)	di7qaez2koc7r.cloudfront.net		18.66.92.208	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:12.319864035 CET	1.1.1.1	192.168.2.6	0xe753	No error (0)	di7qaez2koc7r.cloudfront.net		18.66.92.4	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:12.319864035 CET	1.1.1.1	192.168.2.6	0xe753	No error (0)	di7qaez2koc7r.cloudfront.net		18.66.92.143	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:14.187194109 CET	1.1.1.1	192.168.2.6	0x56c6	No error (0)	di7qaez2koc7r.cloudfront.net		18.239.63.153	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:14.187194109 CET	1.1.1.1	192.168.2.6	0x56c6	No error (0)	di7qaez2koc7r.cloudfront.net		18.239.63.32	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:14.187194109 CET	1.1.1.1	192.168.2.6	0x56c6	No error (0)	di7qaez2koc7r.cloudfront.net		18.239.63.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:14.187194109 CET	1.1.1.1	192.168.2.6	0x56c6	No error (0)	di7qaez2koc7r.cloudfront.net		18.239.63.192	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:14.827928066 CET	1.1.1.1	192.168.2.6	0x6d86	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:14.827928066 CET	1.1.1.1	192.168.2.6	0x6d86	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:14.827928066 CET	1.1.1.1	192.168.2.6	0x6d86	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:22.838709116 CET	1.1.1.1	192.168.2.6	0xd309	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:22.838709116 CET	1.1.1.1	192.168.2.6	0xd309	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:25.158843040 CET	1.1.1.1	192.168.2.6	0x2a10	No error (0)	travelbusinessclass.com		206.189.191.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:28.406707048 CET	1.1.1.1	192.168.2.6	0xaa78	No error (0)	code-eu1.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:28.407428026 CET	1.1.1.1	192.168.2.6	0x80c5	No error (0)	code-eu1.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:28.407428026 CET	1.1.1.1	192.168.2.6	0x80c5	No error (0)	cl-5bf28185.edgecdn.world		5.101.37.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:30.244223118 CET	1.1.1.1	192.168.2.6	0x30f8	No error (0)	code-eu1.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:30.244223118 CET	1.1.1.1	192.168.2.6	0x30f8	No error (0)	cl-5bf28185.edgecdn.world		5.101.37.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:30.252273083 CET	1.1.1.1	192.168.2.6	0xf00b	No error (0)	code-eu1.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:32.743894100 CET	1.1.1.1	192.168.2.6	0x9dd4	No error (0)	node-ya-10.jivosite.com		57.128.74.66	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.882137060 CET	1.1.1.1	192.168.2.6	0x78b7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.882137060 CET	1.1.1.1	192.168.2.6	0x78b7	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.882685900 CET	1.1.1.1	192.168.2.6	0x852a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.882685900 CET	1.1.1.1	192.168.2.6	0x852a	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 17:23:34.882685900 CET	1.1.1.1	192.168.2.6	0x852a	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 17:23:34.883052111 CET	1.1.1.1	192.168.2.6	0xa27f	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.883052111 CET	1.1.1.1	192.168.2.6	0xa27f	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.883052111 CET	1.1.1.1	192.168.2.6	0xa27f	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.884934902 CET	1.1.1.1	192.168.2.6	0xc8b5	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.884934902 CET	1.1.1.1	192.168.2.6	0xc8b5	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.884934902 CET	1.1.1.1	192.168.2.6	0xc8b5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.884934902 CET	1.1.1.1	192.168.2.6	0xc8b5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.885601044 CET	1.1.1.1	192.168.2.6	0x507e	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.885601044 CET	1.1.1.1	192.168.2.6	0x507e	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:34.887511015 CET	1.1.1.1	192.168.2.6	0x3b1	No error (0)	cloud.roistat.com		81.163.20.5	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.887511015 CET	1.1.1.1	192.168.2.6	0x3b1	No error (0)	cloud.roistat.com		77.223.118.104	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:34.961765051 CET	1.1.1.1	192.168.2.6	0x9f5b	No error (0)	node-ya-10.jivosite.com		57.128.74.65	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.748341084 CET	1.1.1.1	192.168.2.6	0x3e3b	No error (0)	code.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:35.748341084 CET	1.1.1.1	192.168.2.6	0x3e3b	No error (0)	cl-5bf28185.edgecdn.world		5.101.37.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.748907089 CET	1.1.1.1	192.168.2.6	0x2ab2	No error (0)	code.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:35.767539978 CET	1.1.1.1	192.168.2.6	0xe19b	No error (0)	stats.g.doubleclick.net		64.233.166.154	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.767539978 CET	1.1.1.1	192.168.2.6	0xe19b	No error (0)	stats.g.doubleclick.net		64.233.166.157	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.767539978 CET	1.1.1.1	192.168.2.6	0xe19b	No error (0)	stats.g.doubleclick.net		64.233.166.156	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.767539978 CET	1.1.1.1	192.168.2.6	0xe19b	No error (0)	stats.g.doubleclick.net		64.233.166.155	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.898806095 CET	1.1.1.1	192.168.2.6	0x22fc	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:35.898806095 CET	1.1.1.1	192.168.2.6	0x22fc	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:35.898806095 CET	1.1.1.1	192.168.2.6	0x22fc	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:35.898806095 CET	1.1.1.1	192.168.2.6	0x22fc	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:35.898853064 CET	1.1.1.1	192.168.2.6	0x1a2b	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:35.898853064 CET	1.1.1.1	192.168.2.6	0x1a2b	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:36.171075106 CET	1.1.1.1	192.168.2.6	0x5bc	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:36.171075106 CET	1.1.1.1	192.168.2.6	0x5bc	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:36.171075106 CET	1.1.1.1	192.168.2.6	0x5bc	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:36.898530960 CET	1.1.1.1	192.168.2.6	0x7ed4	No error (0)	cloud.roistat.com		77.223.118.104	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:36.898530960 CET	1.1.1.1	192.168.2.6	0x7ed4	No error (0)	cloud.roistat.com		81.163.20.5	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:36.899708033 CET	1.1.1.1	192.168.2.6	0x8f8c	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:36.899708033 CET	1.1.1.1	192.168.2.6	0x8f8c	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 17:23:36.899708033 CET	1.1.1.1	192.168.2.6	0x8f8c	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 17:23:36.899826050 CET	1.1.1.1	192.168.2.6	0x2669	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:36.899826050 CET	1.1.1.1	192.168.2.6	0x2669	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.138376951 CET	1.1.1.1	192.168.2.6	0x809f	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:37.138376951 CET	1.1.1.1	192.168.2.6	0x809f	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:37.153178930 CET	1.1.1.1	192.168.2.6	0x7ea3	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:37.153178930 CET	1.1.1.1	192.168.2.6	0x7ea3	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:37.189811945 CET	1.1.1.1	192.168.2.6	0xe3f4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:37.189811945 CET	1.1.1.1	192.168.2.6	0xe3f4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.196186066 CET	1.1.1.1	192.168.2.6	0xbaa8	No error (0)	td.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.225622892 CET	1.1.1.1	192.168.2.6	0xca08	No error (0)	googleads.g.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.226588011 CET	1.1.1.1	192.168.2.6	0xc4e0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 31, 2024 17:23:37.270502090 CET	1.1.1.1	192.168.2.6	0x2c98	No error (0)	stats.g.doubleclick.net		74.125.206.155	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.270502090 CET	1.1.1.1	192.168.2.6	0x2c98	No error (0)	stats.g.doubleclick.net		74.125.206.157	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.270502090 CET	1.1.1.1	192.168.2.6	0x2c98	No error (0)	stats.g.doubleclick.net		74.125.206.154	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.270502090 CET	1.1.1.1	192.168.2.6	0x2c98	No error (0)	stats.g.doubleclick.net		74.125.206.156	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.610589027 CET	1.1.1.1	192.168.2.6	0x8d6d	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:37.610589027 CET	1.1.1.1	192.168.2.6	0x8d6d	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.610589027 CET	1.1.1.1	192.168.2.6	0x8d6d	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.610589027 CET	1.1.1.1	192.168.2.6	0x8d6d	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:37.610589027 CET	1.1.1.1	192.168.2.6	0x8d6d	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:38.697437048 CET	1.1.1.1	192.168.2.6	0xf822	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:38.697592974 CET	1.1.1.1	192.168.2.6	0x2f96	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:42.669593096 CET	1.1.1.1	192.168.2.6	0x21b4	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:42.670402050 CET	1.1.1.1	192.168.2.6	0xa6ac	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 17:23:42.670918941 CET	1.1.1.1	192.168.2.6	0x4e92	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:42.670918941 CET	1.1.1.1	192.168.2.6	0x4e92	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:42.671210051 CET	1.1.1.1	192.168.2.6	0x3ee	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:43.438915014 CET	1.1.1.1	192.168.2.6	0x3f37	No error (0)	telephony.jivosite.com	wm-ya.jivosite.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:43.445533037 CET	1.1.1.1	192.168.2.6	0x22d1	No error (0)	telephony.jivosite.com	wm-ya.jivosite.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:43.445533037 CET	1.1.1.1	192.168.2.6	0x22d1	No error (0)	wm-ya.jivosite.com		185.163.159.177	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:43.906174898 CET	1.1.1.1	192.168.2.6	0x4ceb	No error (0)	vi-ya-6.jivosite.com		57.128.74.66	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:45.857736111 CET	1.1.1.1	192.168.2.6	0x406d	No error (0)	telemetry.jivosite.com		57.128.74.65	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:45.857736111 CET	1.1.1.1	192.168.2.6	0x406d	No error (0)	telemetry.jivosite.com		57.128.74.69	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.232134104 CET	1.1.1.1	192.168.2.6	0x8acb	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 31, 2024 17:23:46.232579947 CET	1.1.1.1	192.168.2.6	0x654e	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.235622883 CET	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	code.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.235622883 CET	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	cl-5bf28185.edgecdn.world		5.101.37.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.235857010 CET	1.1.1.1	192.168.2.6	0xfd08	No error (0)	code.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.401109934 CET	1.1.1.1	192.168.2.6	0xa984	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.401109934 CET	1.1.1.1	192.168.2.6	0xa984	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.401503086 CET	1.1.1.1	192.168.2.6	0x2f58	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.401503086 CET	1.1.1.1	192.168.2.6	0x2f58	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.419368982 CET	1.1.1.1	192.168.2.6	0xf800	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.420156956 CET	1.1.1.1	192.168.2.6	0xcac1	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 17:23:46.420428991 CET	1.1.1.1	192.168.2.6	0x6e1f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.420428991 CET	1.1.1.1	192.168.2.6	0x6e1f	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:23:46.421264887 CET	1.1.1.1	192.168.2.6	0x9782	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.573275089 CET	1.1.1.1	192.168.2.6	0x890f	No error (0)	telephony.jivosite.com	wm-ya.jivosite.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.579427958 CET	1.1.1.1	192.168.2.6	0xa6b8	No error (0)	telephony.jivosite.com	wm-ya.jivosite.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:23:46.579427958 CET	1.1.1.1	192.168.2.6	0xa6b8	No error (0)	wm-ya.jivosite.com		185.163.159.177	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:24:03.038543940 CET	1.1.1.1	192.168.2.6	0x6082	No error (0)	files.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:24:03.038543940 CET	1.1.1.1	192.168.2.6	0x6082	No error (0)	cl-5bf28185.edgecdn.world		5.101.37.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:24:03.047808886 CET	1.1.1.1	192.168.2.6	0x3b58	No error (0)	files.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:24:03.702519894 CET	1.1.1.1	192.168.2.6	0x9492	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:24:03.702519894 CET	1.1.1.1	192.168.2.6	0x9492	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:24:04.352914095 CET	1.1.1.1	192.168.2.6	0x8f5b	No error (0)	files.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:24:04.352914095 CET	1.1.1.1	192.168.2.6	0x8f5b	No error (0)	cl-5bf28185.edgecdn.world		5.101.37.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 17:24:04.356365919 CET	1.1.1.1	192.168.2.6	0x444d	No error (0)	files.jivosite.com	cl-5bf28185.edgecdn.world		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:24:21.092521906 CET	1.1.1.1	192.168.2.6	0x7bdd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 17:24:21.092521906 CET	1.1.1.1	192.168.2.6	0x7bdd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49708	206.189.191.166	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:11 UTC	863	OUT	GET /?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445 HTTP/1.1 Host: travelbusinessclass.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:11 UTC	931	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.0.3 Set-Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; path=/; secure; HttpOnly; SameSite=none Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: did=7ac0ab0c4e946fa8b3e139ebf8e6feefc64d8a75915832c837558bc85f5a191ea%3A2%3A%7Bi%3A0%3Bs%3A3%3A%22did%22%3Bi%3A1%3Bs%3A37%3A%22AUTO_3fce6d1eefd539e49d5645ee4fa12400%22%3B%7D; expires=Fri, 31-Oct-2025 16:23:11 GMT; Max-Age=31536000; path=/; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains Set-Cookie: did=zr2/pmcjru+H/ej0BEUHAg==; expires=Fri, 31-Oct-25 16:23:11 GMT; domain=travelbusinessclass.com; path=/ P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
2024-10-31 16:23:11 UTC	15453	IN	Data Raw: 31 64 63 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 Data Ascii: 1dc8<!DOCTYPE html><html lang="en" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb#"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,minimum-scale=1,initial-scale=1.0"> <link rel="shortcut icon" href="
2024-10-31 16:23:11 UTC	16384	IN	Data Raw: 6e 74 2d 62 6f 6c 64 20 70 78 2d 38 20 70 79 2d 33 2e 35 20 6d 74 2d 34 22 3e 43 61 6c 6c 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 2d 62 6c 61 63 6b 20 62 67 2d 6f 70 61 63 69 74 79 2d 35 30 20 72 6f 75 6e 64 65 64 2d 62 2d 31 31 78 Data Ascii: nt-bold px-8 py-3.5 mt-4">Call</a> </div> </div> </div> </div> </div> </div> </section> <div class="bg-black bg-opacity-50 rounded-b-11x
2024-10-31 16:23:12 UTC	16384	IN	Data Raw: 6d 2d 33 30 2e 38 37 35 20 31 2e 36 32 35 41 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 39 2e 37 35 20 34 32 2e 32 35 61 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 31 2e 36 32 35 20 31 2e 36 32 35 41 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 31 33 20 34 32 2e 32 35 61 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 2d 31 2e 36 32 35 2d 31 2e 36 32 35 7a 6d 34 2e 38 37 35 20 30 61 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 2d 31 2e 36 32 35 20 31 2e 36 32 35 20 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 31 2e 36 32 35 20 31 2e 36 32 35 20 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 31 2e 36 32 35 2d 31 2e 36 32 35 20 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 2d 31 2e 36 32 35 2d 31 2e 36 32 35 7a 6d 34 2e 38 37 35 20 30 41 31 2e 36 33 20 31 2e 36 33 20 30 20 30 30 31 Data Ascii: m-30.875 1.625A1.63 1.63 0 009.75 42.25a1.63 1.63 0 001.625 1.625A1.63 1.63 0 0013 42.25a1.63 1.63 0 00-1.625-1.625zm4.875 0a1.63 1.63 0 00-1.625 1.625 1.63 1.63 0 001.625 1.625 1.63 1.63 0 001.625-1.625 1.63 1.63 0 00-1.625-1.625zm4.875 0A1.63 1.63 0 001
2024-10-31 16:23:12 UTC	16384	IN	Data Raw: 72 61 74 69 6f 6e 3d 22 31 32 30 30 22 20 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 34 30 30 22 20 64 61 74 61 2d 61 6f 73 2d 6f 66 66 73 65 74 3d 22 33 30 30 22 20 64 61 74 61 2d 61 6f 73 2d 65 61 73 69 6e 67 3d 22 65 61 73 65 2d 6f 75 74 2d 65 78 70 6f 22 20 64 61 74 61 2d 61 6f 73 2d 61 6e 63 68 6f 72 3d 22 23 74 72 69 70 61 64 76 69 73 6f 72 2d 72 65 76 69 65 77 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 69 37 71 61 65 7a 32 6b 6f 63 37 72 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 62 75 69 6c 64 2f 69 6d 67 2f 73 74 61 74 69 63 2f 74 72 75 73 74 70 69 6c 6f 74 2d 72 61 74 69 6e 67 2e 70 6e 67 22 20 77 69 64 74 68 3d 22 32 32 32 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 61 6c 74 Data Ascii: ration="1200" data-aos-delay="400" data-aos-offset="300" data-aos-easing="ease-out-expo" data-aos-anchor="#tripadvisor-reviews"> <img src="https://di7qaez2koc7r.cloudfront.net/build/img/static/trustpilot-rating.png" width="222" height="42" alt
2024-10-31 16:23:12 UTC	16384	IN	Data Raw: 78 20 66 6c 65 78 2d 73 68 72 69 6e 6b 2d 30 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 77 2d 36 20 68 2d 36 20 66 69 6c 6c 2d 63 75 72 72 65 6e 74 20 74 65 78 74 2d 67 72 65 79 2d 37 30 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: x flex-shrink-0 items-center"> <svg class="w-6 h-6 fill-current text-grey-700" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"> <path fill-rule="evenodd"
2024-10-31 16:23:12 UTC	16384	IN	Data Raw: 72 73 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6d 74 2d 32 2e 35 20 6c 67 3a 74 65 78 74 2d 6c 65 61 64 22 20 64 61 74 61 2d 61 6f 73 3d 22 66 61 64 65 2d 75 70 22 20 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 35 30 22 20 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 32 30 30 22 20 64 61 74 61 2d 61 6f 73 2d 65 61 73 69 6e 67 3d 22 65 61 73 65 2d 6f 75 74 2d 65 78 70 6f 22 20 64 61 74 61 2d 61 6f 73 2d 6f 66 66 73 65 74 3d 22 33 30 30 22 20 64 61 74 61 2d 61 6f 73 2d 61 6e 63 68 6f 72 3d 22 23 73 75 62 73 63 72 69 62 65 53 65 63 74 69 6f 6e 22 3e 42 65 20 74 68 65 20 66 69 72 73 74 20 74 6f 20 72 65 63 65 69 76 65 20 75 70 64 61 74 65 73 20 6f 6e 20 6f 75 72 20 65 78 63 6c 75 73 Data Ascii: rs</h2> <p class="mt-2.5 lg:text-lead" data-aos="fade-up" data-aos-delay="550" data-aos-duration="1200" data-aos-easing="ease-out-expo" data-aos-offset="300" data-aos-anchor="#subscribeSection">Be the first to receive updates on our exclus
2024-10-31 16:23:12 UTC	16384	IN	Data Raw: 65 74 73 2f 69 6d 61 67 65 2f 6f 66 66 65 72 5f 70 61 67 65 5f 33 32 39 2f 64 65 35 63 38 2f 61 69 72 6c 69 6e 65 2d 4c 75 66 74 68 61 6e 73 61 5f 5f 66 69 78 5f 34 35 33 5f 33 32 30 2e 77 65 62 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 6c 6f 61 64 69 6e 67 3d 6c 61 7a 79 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 76 65 6c 62 75 73 69 6e 65 73 73 63 6c 61 73 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 2f 6f 66 66 65 72 5f 70 61 67 65 5f 33 32 39 2f 66 65 65 64 66 2f 61 69 72 6c 69 6e 65 2d 4c 75 66 74 68 61 6e 73 61 5f 5f 66 69 78 5f 34 35 33 5f 33 32 30 2e 6a 70 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 42 75 73 69 6e 65 73 73 20 63 6c 61 73 73 20 66 6c 69 67 Data Ascii: ets/image/offer_page_329/de5c8/airline-Lufthansa__fix_453_320.webp"> <img loading=lazy src="https://travelbusinessclass.com/assets/image/offer_page_329/feedf/airline-Lufthansa__fix_453_320.jpg" alt="Business class flig
2024-10-31 16:23:12 UTC	16384	IN	Data Raw: 6c 69 63 79 22 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 62 6c 75 65 2d 34 35 30 22 3e 52 65 61 64 20 6d 6f 72 65 2e 2e 2e 3c 2f 61 3e 3c 2f 70 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 41 63 63 65 70 74 20 63 6f 6f 6b 69 65 22 20 40 63 6c 69 63 6b 3d 22 47 44 50 52 2e 6f 6e 41 63 63 65 70 74 28 29 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 2d 67 72 61 64 69 65 6e 74 20 62 74 6e 2d 2d 6d 64 20 6d 74 2d 31 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 63 63 65 70 74 20 63 6f 6f 6b 69 65 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0a 20 Data Ascii: licy" class="text-blue-450">Read more...</a></p> <button type="button" aria-label="Accept cookie" @click="GDPR.onAccept()" class="btn btn--gradient btn--md mt-10"> Accept cookies </button>
2024-10-31 16:23:12 UTC	7236	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 78 2d 64 61 74 61 3d 22 6d 6f 64 61 6c 42 6c 61 63 6b 46 72 69 64 61 79 28 29 22 0a 20 20 20 20 20 20 20 20 78 2d 69 6e 69 74 3d 22 6d 6f 64 61 6c 42 6c 61 63 6b 46 72 69 64 61 79 2e 69 6e 69 74 28 29 22 0a 20 20 20 20 20 20 20 20 78 2d 73 68 6f 77 3d 22 6d 6f 64 61 6c 42 6c 61 63 6b 46 72 69 64 61 79 2e 69 73 4f 70 65 6e 22 0a 20 20 20 20 20 20 20 20 78 2d 63 6c 6f 61 6b 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 66 69 78 65 64 20 7a 2d 35 30 20 69 6e 73 65 74 2d 30 20 6f 76 65 72 66 6c 6f 77 2d 79 2d 61 75 74 6f 22 20 69 64 3d 22 6d 6f 64 61 6c 42 6c 61 63 6b 46 72 69 64 61 79 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c Data Ascii: </div> </div> <div x-data="modalBlackFriday()" x-init="modalBlackFriday.init()" x-show="modalBlackFriday.isOpen" x-cloak class="fixed z-50 inset-0 overflow-y-auto" id="modalBlackFriday" aria-labell

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49712	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:13 UTC	590	OUT	GET /build/css/styles.7327c7dca1b0dc7d3971.css HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:13 UTC	653	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 261499 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:13 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-3fd7b" Expires: Thu, 07 Nov 2024 16:23:13 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 993c0866e705e48daa4fed5e30627712.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: sP863kJjIB0cWvcVOIeqbZErYkqqP6QHQcQHVyVNZnc-we9I3HIesg==
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 77 69 70 65 72 2d 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 20 64 30 39 47 52 67 41 42 41 41 41 41 41 41 5a 67 41 42 41 41 41 41 41 41 44 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 47 52 6c 52 4e 41 41 41 47 52 41 41 41 41 42 6f 41 41 41 41 63 69 36 71 48 6b 55 64 45 52 55 59 41 41 41 57 67 41 41 41 41 49 77 41 41 41 43 51 41 59 41 42 58 52 31 42 50 55 77 41 41 42 68 51 41 41 41 41 Data Ascii: @font-face{font-family:swiper-icons;font-style:normal;font-weight:400;src:url("data:application/font-woff;charset=utf-8;base64, d09GRgABAAAAAAZgABAAAAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGRlRNAAAGRAAAABoAAAAci6qHkUdERUYAAAWgAAAAIwAAACQAYABXR1BPUwAABhQAAAA
2024-10-31 16:23:14 UTC	8369	IN	Data Raw: 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 33 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 33 35 30 22 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 33 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 34 30 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 34 30 30 22 5d 20 Data Ascii: ata-aos-delay="350"] [data-aos]{transition-delay:0s}[data-aos][data-aos][data-aos-delay="350"].aos-animate,body[data-aos-delay="350"] [data-aos].aos-animate{transition-delay:.35s}[data-aos][data-aos][data-aos-duration="400"],body[data-aos-duration="400"]
2024-10-31 16:23:14 UTC	7435	IN	Data Raw: 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 35 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 30 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 30 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 2e 36 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 31 36 30 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 31 36 30 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 7d Data Ascii: s].aos-animate{transition-delay:1.55s}[data-aos][data-aos][data-aos-duration="1600"],body[data-aos-duration="1600"] [data-aos]{transition-duration:1.6s}[data-aos][data-aos][data-aos-delay="1600"],body[data-aos-delay="1600"] [data-aos]{transition-delay:0s}
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 36 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 32 2e 36 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 Data Ascii: [data-aos][data-aos][data-aos-delay="2650"],body[data-aos-delay="2650"] [data-aos]{transition-delay:0s}[data-aos][data-aos][data-aos-delay="2650"].aos-animate,body[data-aos-delay="2650"] [data-aos].aos-animate{transition-delay:2.65s}[data-aos][data-aos][d
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 65 69 65 2d 68 6f 6d 65 2d 70 61 67 65 2d 6c 69 74 74 6c 65 2d 64 65 73 63 6b 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 33 70 78 29 7b 23 66 75 6d 65 69 65 2d 73 77 69 74 63 68 20 64 69 76 20 69 6d 67 23 66 75 6d 65 69 65 2d 68 6f 6d 65 2d 70 61 67 65 2c 23 66 75 6d 65 69 65 2d 73 77 69 74 63 68 20 64 69 76 20 69 6d 67 23 66 75 6d 65 69 65 2d 68 6f 6d 65 2d 70 61 67 65 2d 6c 69 74 74 6c 65 2d 64 65 73 63 6b 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 66 75 6d 65 69 65 2d 73 77 69 74 63 68 7b 68 65 69 67 68 74 3a 33 32 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 70 78 7d 23 66 75 6d 65 69 65 2d 73 77 69 74 63 68 20 64 69 76 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: eie-home-page-little-desckt{display:block}}@media(max-width:1023px){#fumeie-switch div img#fumeie-home-page,#fumeie-switch div img#fumeie-home-page-little-desckt{display:none}#fumeie-switch{height:322px;margin-top:17px}#fumeie-switch div img{display:none}
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 72 65 6d 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 31 2c 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 61 72 74 69 63 6c 65 2d 62 6c 6f 67 5f 5f 64 6f 75 62 6c 65 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 32 2c 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 29 7d 7d 2e 61 72 74 69 63 6c 65 2d 62 6c 6f 67 5f 5f 64 6f 75 62 6c 65 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 61 72 74 69 63 6c 65 2d 62 6c 6f 67 5f 5f 6c 69 73 74 7b 6c 69 73 Data Ascii: rem;grid-template-columns:repeat(1,minmax(0,1fr));margin-bottom:2rem;margin-top:2rem}@media (min-width:1280px){.article-blog__double{grid-template-columns:repeat(2,minmax(0,1fr))}}.article-blog__double img{margin:0;max-height:400px}.article-blog__list{lis
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 74 6f 70 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 38 30 70 78 29 7b 2e 64 61 74 65 70 69 63 6b 65 72 7b 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 32 34 72 65 6d 3b 77 69 64 74 68 3a 34 38 72 65 6d 7d 7d 2e 64 61 74 65 70 69 63 6b 65 72 5f 5f 62 61 63 6b 64 72 6f 70 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 2d 2d 74 77 2d 73 68 61 64 6f 77 3a 30 20 31 34 70 78 20 31 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 62 Data Ascii: top:100%;width:100%}}@media (min-width:1280px){.datepicker{left:auto;margin-top:1rem;right:0;width:24rem;width:48rem}}.datepicker__backdrop{--tw-bg-opacity:1;--tw-shadow:0 14px 14px rgba(0,0,0,.05);background-color:rgba(255,255,255,var(--tw-bg-opacity));b
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 70 61 63 69 74 79 3a 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 38 37 35 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 76 61 72 28 2d 2d 74 77 2d 74 72 61 6e 73 66 6f 72 6d 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 31 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 2c 6f 70 61 63 69 74 79 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 34 2c 31 2e 35 36 2c 2e 36 34 2c 31 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 6c 6c 2d 63 Data Ascii: pacity:0;padding-top:.875rem;position:absolute;right:0;top:0;transform:var(--tw-transform);transform-origin:top;transition-duration:.15s;transition-property:transform,opacity;transition-timing-function:cubic-bezier(.34,1.56,.64,1);visibility:hidden;will-c
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 73 69 74 69 6f 6e 3a 2d 38 35 36 70 78 20 30 3b 68 65 69 67 68 74 3a 31 30 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 37 38 70 78 20 30 3b 68 65 69 67 68 74 3a 31 35 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 30 30 70 78 20 30 3b 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 32 32 70 78 20 30 3b 68 65 69 67 68 74 3a 31 34 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 34 34 70 78 20 30 Data Ascii: sition:-856px 0;height:10px}.iti__flag.iti__cd{background-position:-878px 0;height:15px}.iti__flag.iti__cf{background-position:-900px 0;height:14px}.iti__flag.iti__cg{background-position:-922px 0;height:14px}.iti__flag.iti__ch{background-position:-944px 0
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 6d 5f 5f 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 66 6f 72 6d 5f 5f 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 73 76 67 2f 64 6f 77 6e 2d 61 72 72 6f 77 2d 73 65 6c 65 63 74 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 39 36 25 20 35 35 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 36 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 66 6f 72 6d 5f 5f 65 Data Ascii: m__textarea:focus::placeholder{color:transparent}.form__select{background-image:url(../img/svg/down-arrow-select.svg);background-position:96% 55%;background-repeat:no-repeat;background-size:16px;cursor:pointer;padding-left:1rem;padding-right:1rem}.form__e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49710	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:13 UTC	595	OUT	GET /build/fonts/b439f6e4.ttf HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://travelbusinessclass.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:14 UTC	645	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 67040 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:13 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-105e0" Expires: Thu, 07 Nov 2024 16:23:13 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 3f52d342c56014599dee37446f6c9f2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: zJdHOfOyqOGczXvnRbyoA4a_4Upe-kGIClBtAFX2i91TOcwlG0M6tQ==
2024-10-31 16:23:14 UTC	15739	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 87 9a ec 13 00 01 05 c4 00 00 00 1c 47 44 45 46 0f 7f 10 f3 00 00 b6 14 00 00 00 54 47 50 4f 53 87 0e 57 7a 00 00 bc 38 00 00 49 8a 47 53 55 42 5d 5d 4b b8 00 00 b6 68 00 00 05 d0 4f 53 2f 32 68 ae 62 26 00 00 01 78 00 00 00 60 63 6d 61 70 ab ea a1 85 00 00 09 bc 00 00 04 66 67 61 73 70 ff ff 00 03 00 00 b6 0c 00 00 00 08 67 6c 79 66 15 dc 5c 6b 00 00 12 18 00 00 94 f0 68 65 61 64 15 3e 08 be 00 00 00 fc 00 00 00 36 68 68 65 61 08 09 06 22 00 00 01 34 00 00 00 24 68 6d 74 78 50 f8 43 c6 00 00 01 d8 00 00 07 e4 6c 6f 63 61 87 34 ac ee 00 00 0e 24 00 00 03 f4 6d 61 78 70 02 45 00 4d 00 00 01 58 00 00 00 20 6e 61 6d 65 a2 51 4d 2e 00 00 a7 08 00 00 02 6a 70 6f 73 74 9d ea f5 c4 00 00 a9 74 00 00 0c 95 00 01 00 Data Ascii: pFFTMGDEFTGPOSWz8IGSUB]]KhOS/2hb&x`cmapfgaspglyf\khead>6hhea"4$hmtxPCloca4$maxpEMX nameQM.jpostt
2024-10-31 16:23:14 UTC	15628	IN	Data Raw: 59 4f 39 6c 90 90 6c 83 42 4d 4d 41 79 4e 6e 6e 4e 52 69 69 02 42 88 88 fd b1 96 71 70 95 66 5a fe 0d 5b 68 46 6e a4 6e 6c 54 53 6d 00 00 03 00 2b ff f3 02 39 02 ca 00 03 00 12 00 1d 00 00 01 33 07 23 13 22 26 35 34 36 33 32 17 35 33 11 23 35 06 27 32 36 34 26 23 22 06 15 14 16 01 58 58 61 47 1f 6c 90 90 6c 83 42 4d 4d 41 79 4e 6e 6e 4e 52 69 69 02 ca 88 fd b1 96 71 70 95 66 5a fe 0d 5b 68 46 6e a4 6e 6c 54 53 6d 00 00 00 03 00 2b ff f3 02 39 02 c4 00 06 00 15 00 20 00 00 13 23 37 33 17 23 27 05 11 23 35 06 23 22 26 35 34 36 33 32 17 35 03 32 36 34 26 23 22 06 15 14 16 ee 4f 6c 51 6d 4e 47 01 05 4d 41 84 6c 90 90 6c 83 42 ba 4e 6e 6e 4e 52 69 69 02 40 84 84 5b a8 fe 0d 5b 68 96 71 70 95 66 5a fe 46 6e a4 6e 6c 54 53 6d 00 00 00 03 00 2b ff f3 02 39 02 be Data Ascii: YO9llBMMAyNnnNRiiBqpfZ[hFnnlTSm+93#"&5463253#5'264&#"XXaGllBMMAyNnnNRiiqpfZ[hFnnlTSm+9 #73#'#5#"&546325264&#"OlQmNGMAllBNnnNRii@[[hqpfZFnnlTSm+9
2024-10-31 16:23:14 UTC	829	IN	Data Raw: 43 01 13 fe ed 01 17 0f 77 4a 53 82 fd 44 01 13 47 01 1a 54 39 3a 53 00 00 00 02 00 2b ff f3 02 39 01 ff 00 0e 00 19 00 00 05 22 26 35 34 36 33 32 17 35 33 11 23 35 06 27 32 36 34 26 23 22 06 15 14 16 01 27 6c 90 90 6c 83 42 4d 4d 41 79 4e 6e 6e 4e 52 69 69 0d 96 71 70 95 66 5a fe 0d 5b 68 46 6e a4 6e 6c 54 53 6d 00 02 00 2a ff f4 02 36 02 c8 00 15 00 21 00 00 01 32 16 15 14 06 23 22 26 3d 01 34 36 3b 01 15 23 22 06 1d 01 36 13 32 36 35 34 26 23 22 06 15 14 16 01 3a 6d 8f 8e 6e 7b 95 89 6e c9 c9 4f 5c 41 78 52 69 69 52 4e 6c 6c 01 ed 91 6c 6e 8e 96 78 cc 6f 8b 46 63 51 41 60 fe 4d 67 50 4f 67 69 4d 4e 69 00 00 03 00 4b 00 00 01 d0 01 f3 00 0d 00 16 00 1f 00 00 01 1e 01 15 14 06 2b 01 11 33 32 16 15 14 25 15 33 32 36 35 34 26 23 13 32 36 27 2e 01 2b 01 15 Data Ascii: CwJSDGT9:S+9"&5463253#5'264&#"'llBMMAyNnnNRiiqpfZ[hFnnlTSm*6!2#"&=46;#"62654&#":mn{nO\AxRiiRNlllnxoFcQA`MgPOgiMNiK+32%32654&#26'.+
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: cf e9 5b e6 4f 97 01 f3 f9 f9 d9 fe e6 00 00 00 00 01 00 0b 00 00 02 12 01 f3 00 06 00 00 21 23 0b 01 23 13 33 02 12 53 b0 b1 53 d9 55 01 9f fe 61 01 f3 00 00 01 00 4b 00 00 02 52 01 f3 00 0c 00 00 01 11 23 11 03 23 03 11 23 11 33 1b 01 02 52 4d 8c 55 8c 4d 53 b1 b0 01 f3 fe 0d 01 42 fe be 01 42 fe be 01 f3 fe 61 01 9f 00 00 01 00 4b 00 00 01 ef 01 f3 00 0b 00 00 01 33 11 23 35 21 15 23 11 33 15 21 01 a2 4d 4d fe f6 4d 4d 01 0a 01 f3 fe 0d e1 e1 01 f3 cc 00 00 00 00 02 00 2b ff f3 02 3a 01 ff 00 07 00 11 00 00 04 22 26 34 36 32 16 14 05 32 36 34 26 23 22 06 14 16 01 a4 e2 97 97 e2 96 fe f9 50 6b 6b 50 51 6c 6c 0d 97 e0 95 95 e0 50 6d a4 6e 6e a4 6d 00 00 01 00 4b 00 00 01 ef 01 f3 00 07 00 00 01 11 23 11 21 11 23 11 01 ef 4d fe f6 4d 01 f3 fe 0d 01 ad fe Data Ascii: [O!##3SSUaKR###3RMUMSBBaK3#5!#3!MMMM+:"&462264&#"PkkPQllPmnnmK#!#MM
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: ff ec ff f6 00 00 ff ec ff ec 00 00 ff f6 ff f6 ff f6 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fd 00 0a ff e2 00 00 00 00 ff ce ff ec ff f3 00 00 00 00 00 00 ff d8 00 14 00 00 ff d8 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 00 00 00 ff f6 00 00 ff f6 00 00 00 00 ff f1 ff f1 ff f1 ff f6 ff f1 ff f6 00 00 ff f8 00 00 00 00 00 00 ff ec 00 00 ff f6 ff d8 00 00 ff ec ff ec ff f6 ff ec 00 00 00 00 00 00 ff f6 ff f8 ff ec ff ec ff ec 00 0a 00 00 ff e2 ff e2 00 02 00 1b 00 07 00 07 00 06 00 08 00 08 00 0a 00 09 00 09 00 01 00 0e 00 0e 00 0b 00 20 00 20 00 0b 00 23 00 23 00 02 00 61 00 61 00 0b 00 63 00 63 00 03 00 64 00 64 00 0e 00 65 00 65 00 05 00 66 00 66 00 10 00 68 00 68 00 0d 00 6a 00 6a 00 04 00 Data Ascii: ( ##aaccddeeffhhjj
2024-10-31 16:23:14 UTC	2076	IN	Data Raw: 00 00 00 00 ff e2 ff f6 00 00 00 00 00 00 00 00 00 00 ff ec 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 ff d8 ff e2 00 00 ff e2 ff ec ff ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e2 ff ec 00 00 00 00 00 00 00 00 00 00 ff dd 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 ff f6 00 00 ff e2 ff ec ff ce 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e2 ff f6 ff ec 00 00 00 00 00 00 00 00 ff dd 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec ff f6 ff e2 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 ff ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 00 00 00 ff f4 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 46 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49711	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:13 UTC	595	OUT	GET /build/fonts/5a4ed10e.ttf HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://travelbusinessclass.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:13 UTC	645	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 66124 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:13 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-1024c" Expires: Thu, 07 Nov 2024 16:23:13 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 cb4c4a25e4ef534686959996782c8476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: lTGvslE20BnNL41eAV2b3xRzsPH3oBCASQM-ptVg7Qji6tHxVu3Cyw==
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 46 46 54 4d 87 9a ed 4f 00 01 02 30 00 00 00 1c 47 44 45 46 0f 7c 10 ed 00 00 b3 b4 00 00 00 54 47 50 4f 53 9d 49 5a fc 00 00 b9 d8 00 00 48 56 47 53 55 42 5d 5d 4b b8 00 00 b4 08 00 00 05 d0 4f 53 2f 32 69 de 65 3e 00 00 01 78 00 00 00 60 63 6d 61 70 ab ea a1 85 00 00 09 b0 00 00 04 66 67 61 73 70 ff ff 00 03 00 00 b3 ac 00 00 00 08 67 6c 79 66 aa 76 39 5d 00 00 12 08 00 00 92 80 68 65 61 64 15 43 09 f5 00 00 00 fc 00 00 00 36 68 68 65 61 08 0e 06 52 00 00 01 34 00 00 00 24 68 6d 74 78 6a d9 32 80 00 00 01 d8 00 00 07 d8 6c 6f 63 61 04 65 e0 66 00 00 0e 18 00 00 03 ee 6d 61 78 70 02 42 00 4c 00 00 01 58 00 00 00 20 6e 61 6d 65 fa c6 c6 82 00 00 a4 88 00 00 02 b8 70 6f 73 74 6f 15 de e6 00 00 a7 40 00 00 0c 69 00 01 00 Data Ascii: pFFTMO0GDEF\|TGPOSIZHVGSUB]]KOS/2ie>x`cmapfgaspglyfv9]headC6hheaR4$hmtxj2locaefmaxpBLX nameposto@i
2024-10-31 16:23:14 UTC	15812	IN	Data Raw: 00 28 00 34 00 00 01 14 07 21 1e 01 33 32 37 17 0e 01 23 22 27 15 23 35 06 23 22 26 35 34 36 33 32 17 35 33 15 36 33 32 16 07 2e 01 22 06 07 05 32 36 35 34 26 23 22 06 15 14 16 03 d2 04 fe 78 09 4d 39 4e 20 77 1d 72 4c 6e 3c 76 3b 68 6a 90 90 6a 68 3b 76 3d 69 6e 89 80 05 45 72 4c 07 fe f0 3d 53 53 3d 3e 50 50 01 03 13 22 33 3b 37 24 3a 47 4b 3d 3e 4c 99 72 73 98 4b 3d 40 4e 92 4f 32 40 43 30 be 55 41 40 54 53 41 42 54 00 00 00 00 01 00 22 ff 21 02 25 02 08 00 2a 00 00 25 32 36 37 17 0e 01 0f 01 1e 01 15 14 06 23 22 27 37 16 36 35 34 26 07 37 2e 01 35 34 36 33 32 16 17 07 2e 01 23 22 06 15 14 16 01 2e 2f 44 09 7b 0e 67 4c 0e 20 2a 40 34 3d 2d 10 21 51 3b 1e 1a 64 7f 99 73 61 85 11 7b 09 44 2f 3d 4d 4d 68 30 21 22 37 5c 0d 2e 04 2d 1d 2a 30 22 36 18 05 1c Data Ascii: (4!327#"'#5#"&5463253632."2654&#"xM9N wrLn<v;hjjh;v=inErL=SS=>PP"3;7$:GK=>LrsK=@NO2@C0UA@TSABT"!%%267#"'7654&7.54632.#"./D{gL @4=-!Q;dsa{D/=MMh0!"7\.-*0"6
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: e4 99 78 53 80 53 53 80 00 01 00 41 00 00 02 2f 01 fa 00 07 00 00 01 11 23 11 23 11 23 11 02 2f 84 e6 84 01 fa fe 06 01 86 fe 7a 01 fa 00 00 00 00 02 00 41 ff 2e 02 62 02 08 00 0e 00 1a 00 00 01 32 16 15 14 06 23 22 27 11 23 11 33 15 36 13 32 36 35 34 26 23 22 06 15 14 16 01 69 6a 8f 90 69 67 3d 84 84 3c 51 3e 50 50 3e 3d 53 53 02 08 98 73 72 99 4c fe f0 02 cc 3d 4b fe 60 54 42 41 53 54 40 41 55 00 00 00 00 01 00 22 ff f2 02 25 02 08 00 18 00 00 05 22 26 34 36 33 32 16 17 07 2e 01 23 22 06 15 14 16 33 32 36 37 17 0e 01 01 2f 74 99 99 73 61 85 11 7b 09 44 2f 3d 4d 4d 3d 2f 44 09 7b 11 84 0e 9a e4 98 66 40 23 22 32 57 3e 3d 59 30 21 22 41 64 00 01 00 14 00 00 01 e9 01 fa 00 07 00 00 01 15 23 11 23 11 23 35 01 e9 a9 84 a8 01 fa 74 fe 7a 01 86 74 00 00 01 00 Data Ascii: xSSSA/###/zA.b2#"'#362654&#"ijig=<Q>PP>=SSsrL=K`TBAST@AU"%"&4632.#"3267/tsa{D/=MM=/D{f@#"2W>=Y0!"Ad###5tzt
2024-10-31 16:23:14 UTC	16384	IN	Data Raw: ff ec 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 0a ff d8 00 00 ff f6 00 00 00 00 ff ce 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff df 00 0a ff ee 00 00 ff f8 ff df 00 00 ff ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 00 0a ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 0a ff e3 00 0a 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f1 ff f6 00 00 00 00 ff c9 ff b0 ff ec 00 14 ff bf ff bf 00 00 00 00 00 00 00 14 00 14 ff e2 00 14 00 00 00 14 00 14 ff c4 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 ff f8 ff d8 ff fd ff e2 ff ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ee 00 00 00 Data Ascii:
2024-10-31 16:23:14 UTC	1160	IN	Data Raw: 00 40 00 40 00 05 00 42 00 42 00 14 00 5e 00 5e 00 02 00 60 00 60 00 03 00 62 00 62 00 06 00 6b 00 6b 00 07 00 75 00 75 00 0e 00 78 00 78 00 08 00 7c 00 7c 00 10 01 8a 01 8b 00 09 01 8c 01 8d 00 12 01 8e 01 8e 00 0d 01 8f 01 90 00 12 01 91 01 91 00 0d 01 94 01 94 00 0e 01 95 01 95 00 0d 01 97 01 97 00 07 01 98 01 98 00 08 00 01 00 24 01 b3 00 01 00 08 00 02 00 08 00 08 00 08 00 02 00 08 00 08 00 03 00 08 00 08 00 08 00 08 00 02 00 08 00 02 00 08 00 04 00 0a 00 0c 00 0d 00 0e 00 17 00 0f 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 10 00 05 00 05 00 05 00 11 00 05 00 10 00 00 00 12 00 10 00 10 00 1a 00 1a 00 05 00 1a 00 05 00 1a 00 07 00 13 00 14 00 15 00 15 00 19 00 15 00 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @@BB^^``bbkkuuxx\|\|$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49713	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:13 UTC	575	OUT	GET /build/js/runtime.acf15c91d9fc5d0b2b25.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:13 UTC	675	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3356 Connection: close Server: nginx Date: Wed, 30 Oct 2024 05:02:34 GMT Last-Modified: Tue, 29 Oct 2024 10:02:07 GMT ETag: "6720b29f-d1c" Expires: Wed, 06 Nov 2024 05:02:34 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 891011d51eb2353ebe8601f5b6467070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: Jc6g9S_PF5ijmSn8tvLxDV-wweTEVBZNXAT9S0afG64BmwDZ3Q1TLQ== Age: 127239
2024-10-31 16:23:13 UTC	3356	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6f 2c 6e 2c 61 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6c 29 2c 72 2e 65 78 70 6f 72 74 73 7d 6c 2e 6d 3d 61 2c 65 3d 5b 5d 2c 6c 2e 4f 3d 28 74 2c 72 2c 6f 2c 6e 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 72 2c 6f 2c Data Ascii: (()=>{"use strict";var e,t,r,o,n,a={},i={};function l(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={exports:{}};return a[e].call(r.exports,r,r.exports,l),r.exports}l.m=a,e=[],l.O=(t,r,o,n)=>{if(!r){var a=1/0;for(s=0;s<e.length;s++){for(var[r,o,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49714	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 16:23:14 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=174148 Date: Thu, 31 Oct 2024 16:23:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49715	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:15 UTC	392	OUT	GET /build/js/runtime.acf15c91d9fc5d0b2b25.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:15 UTC	675	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3356 Connection: close Server: nginx Date: Wed, 30 Oct 2024 05:02:34 GMT Last-Modified: Tue, 29 Oct 2024 10:02:07 GMT ETag: "6720b29f-d1c" Expires: Wed, 06 Nov 2024 05:02:34 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cf65dbfe06da8e543052ca7066d0e458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: 2Xr9tHSdhNgS2RkAzvXNoNAC2p92Whd57P7gsfsplPC6vvds6MkmBg== Age: 127241
2024-10-31 16:23:15 UTC	3356	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6f 2c 6e 2c 61 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 69 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6c 29 2c 72 2e 65 78 70 6f 72 74 73 7d 6c 2e 6d 3d 61 2c 65 3d 5b 5d 2c 6c 2e 4f 3d 28 74 2c 72 2c 6f 2c 6e 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 72 2c 6f 2c Data Ascii: (()=>{"use strict";var e,t,r,o,n,a={},i={};function l(e){var t=i[e];if(void 0!==t)return t.exports;var r=i[e]={exports:{}};return a[e].call(r.exports,r,r.exports,l),r.exports}l.m=a,e=[],l.O=(t,r,o,n)=>{if(!r){var a=1/0;for(s=0;s<e.length;s++){for(var[r,o,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49716	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:15 UTC	571	OUT	GET /build/js/app.d1a1183ef278c4f9a168.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:15 UTC	679	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 559903 Connection: close Server: nginx Date: Wed, 30 Oct 2024 05:02:34 GMT Last-Modified: Tue, 29 Oct 2024 10:02:07 GMT ETag: "6720b29f-88b1f" Expires: Wed, 06 Nov 2024 05:02:34 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9015971351bc982a04ee209a022bb1f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: 5xyWiEJY4-gdJbDk-Hh8Sdt6eneSuUO1j3LDywBNE3oSMhMQf1X8LQ== Age: 127241
2024-10-31 16:23:15 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 70 70 22 2c 22 72 65 76 69 65 77 22 5d 2c 7b 39 36 36 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 36 30 39 29 7d 2c 35 34 34 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 38 36 37 29 2c 64 3d 6e 28 36 30 32 36 29 2c 6f 3d 6e 28 34 33 37 32 29 2c 73 3d 6e 28 35 33 32 37 29 2c 69 3d 6e 28 34 30 39 37 29 2c 61 3d 6e 28 34 31 30 39 29 2c 6c 3d 6e 28 37 39 38 35 29 2c 75 3d 6e 28 35 30 36 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d Data Ascii: (self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["app","review"],{9669:(e,t,n)=>{e.exports=n(1609)},5448:(e,t,n)=>{"use strict";var r=n(4867),d=n(6026),o=n(4372),s=n(5327),i=n(4097),a=n(4109),l=n(7985),u=n(5061);e.exports=function(e){return new Prom
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 72 28 22 43 6f 75 6e 74 72 79 20 73 74 61 74 69 73 74 69 63 73 20 61 72 65 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 62 75 69 6c 64 20 6f 66 20 42 72 6f 77 73 65 72 73 6c 69 73 74 22 29 7d 2c 6c 6f 61 64 46 65 61 74 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 72 28 22 53 75 70 70 6f 72 74 73 20 71 75 65 72 69 65 73 20 61 72 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 62 75 69 6c 64 20 6f 66 20 42 72 6f 77 73 65 72 73 6c 69 73 74 22 29 7d 2c 63 75 72 72 65 6e 74 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 28 5b 22 6d 61 69 6e 74 61 69 6e 65 64 20 6e 6f 64 Data Ascii: (){throw new r("Country statistics are not supported in client-side build of Browserslist")},loadFeature:function(){throw new r("Supports queries are not available in client-side build of Browserslist")},currentNode:function(e,t){return e(["maintained nod
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 74 2e 76 65 72 73 69 6f 6e 73 5b 6e 5d 3b 69 66 28 6f 26 26 2d 31 21 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 29 66 6f 72 28 76 61 72 20 73 3d 6f 2e 73 70 6c 69 74 28 22 2d 22 29 2c 69 3d 30 3b 69 3c 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 52 2e 76 65 72 73 69 6f 6e 41 6c 69 61 73 65 73 5b 65 5d 5b 73 5b 69 5d 5d 3d 6f 7d 7d 52 2e 76 65 72 73 69 6f 6e 41 6c 69 61 73 65 73 2e 6f 70 5f 6d 6f 62 5b 35 39 5d 3d 22 35 38 22 2c 52 2e 6e 6f 64 65 56 65 72 73 69 6f 6e 73 3d 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 65 72 73 69 6f 6e 7d 29 29 7d 28 29 2c 65 2e 65 78 70 6f 72 74 73 3d 52 7d 2c 35 37 32 33 3a 65 3d 3e 7b 76 61 72 20 74 3d 2f 5e 5c 73 2b 61 6e 64 5c 73 2b Data Ascii: gth;n++){var o=t.versions[n];if(o&&-1!==o.indexOf("-"))for(var s=o.split("-"),i=0;i<s.length;i++)R.versionAliases[e][s[i]]=o}}R.versionAliases.op_mob[59]="58",R.nodeVersions=r.map((function(e){return e.version}))}(),e.exports=R},5723:e=>{var t=/^\s+and\s+
2024-10-31 16:23:16 UTC	14808	IN	Data Raw: 36 36 39 39 33 39 32 30 30 7d 7d 2c 4d 3a 7b 41 3a 7b 63 3a 2e 32 38 36 36 30 36 7d 2c 42 3a 22 6d 6f 7a 22 2c 43 3a 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 Data Ascii: 669939200}},M:{A:{c:.286606},B:"moz",C:["","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 66 3f 64 3a 66 3c 3d 68 3f 76 6f 69 64 20 30 3d 3d 3d 72 5b 66 2d 31 5d 3f 73 28 69 2c 31 29 3a 72 5b 66 2d 31 5d 2b 73 28 69 2c 31 29 3a 64 7d 6c 3d 72 5b 75 2d 31 5d 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6c 3f 22 22 3a 6c 7d 29 29 7d 7d 2c 37 38 35 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 4d 61 74 68 3d 3d 4d 61 74 68 26 26 65 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 72 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 29 7c 7c 72 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 29 7c 7c 72 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 Data Ascii: f?d:f<=h?void 0===r[f-1]?s(i,1):r[f-1]+s(i,1):d}l=r[u-1]}return void 0===l?"":l}))}},7854:(e,t,n)=>{var r=function(e){return e&&e.Math==Math&&e};e.exports=r("object"==typeof globalThis&&globalThis)\|\|r("object"==typeof window&&window)\|\|r("object"==typeof s
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 2e 33 3a 22 38 33 22 2c 39 2e 34 3a 22 38 33 22 2c 22 31 30 2e 30 22 3a 22 38 35 22 2c 31 30 2e 31 3a 22 38 35 22 2c 31 30 2e 32 3a 22 38 35 22 2c 31 30 2e 33 3a 22 38 35 22 2c 31 30 2e 34 3a 22 38 35 22 2c 22 31 31 2e 30 22 3a 22 38 37 22 2c 31 31 2e 31 3a 22 38 37 22 2c 31 31 2e 32 3a 22 38 37 22 2c 31 31 2e 33 3a 22 38 37 22 2c 31 31 2e 34 3a 22 38 37 22 2c 31 31 2e 35 3a 22 38 37 22 2c 22 31 32 2e 30 22 3a 22 38 39 22 2c 31 32 2e 31 3a 22 38 39 22 2c 31 32 2e 32 3a 22 38 39 22 2c 22 31 33 2e 30 22 3a 22 39 31 22 2c 31 33 2e 31 3a 22 39 31 22 2c 31 33 2e 32 3a 22 39 31 22 2c 31 33 2e 33 3a 22 39 31 22 2c 31 33 2e 34 3a 22 39 31 22 2c 31 33 2e 35 3a 22 39 31 22 2c 31 33 2e 36 3a 22 39 31 22 2c 22 31 34 2e 30 22 3a 22 39 33 22 2c 31 34 2e 31 3a 22 39 33 Data Ascii: .3:"83",9.4:"83","10.0":"85",10.1:"85",10.2:"85",10.3:"85",10.4:"85","11.0":"87",11.1:"87",11.2:"87",11.3:"87",11.4:"87",11.5:"87","12.0":"89",12.1:"89",12.2:"89","13.0":"91",13.1:"91",13.2:"91",13.3:"91",13.4:"91",13.5:"91",13.6:"91","14.0":"93",14.1:"93
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 69 73 2e 5f 61 70 70 65 6e 64 4c 69 73 74 49 74 65 6d 73 28 74 68 69 73 2e 63 6f 75 6e 74 72 69 65 73 2c 22 69 74 69 5f 5f 73 74 61 6e 64 61 72 64 22 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 72 6f 70 64 6f 77 6e 43 6f 6e 74 61 69 6e 65 72 3f 28 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 45 6c 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 22 69 74 69 20 69 74 69 2d 2d 63 6f 6e 74 61 69 6e 65 72 22 7d 29 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 6f 75 6e 74 72 79 4c 69 73 74 29 29 3a 74 68 69 73 2e 66 6c 61 67 73 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 6f 75 6e 74 72 79 4c 69 73 74 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f Data Ascii: is._appendListItems(this.countries,"iti__standard"),this.options.dropdownContainer?(this.dropdown=this._createEl("div",{class:"iti iti--container"}),this.dropdown.appendChild(this.countryList)):this.flagsContainer.appendChild(this.countryList)),this.optio
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 65 66 6f 72 65 28 74 68 69 73 2e 74 65 6c 49 6e 70 75 74 2c 6e 29 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 2c 64 65 6c 65 74 65 20 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 47 6c 6f 62 61 6c 73 2e 69 6e 73 74 61 6e 63 65 73 5b 74 68 69 73 2e 69 64 5d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 45 78 74 65 6e 73 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 55 74 69 6c 73 3f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 55 74 69 6c 73 2e 67 65 74 45 78 74 65 6e 73 69 6f 6e 28 74 68 69 73 2e 5f 67 65 74 46 75 6c 6c 4e 75 6d 62 65 72 28 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 43 6f 75 6e 74 72 79 44 61 74 61 2e 69 73 Data Ascii: efore(this.telInput,n),n.parentNode.removeChild(n),delete window.intlTelInputGlobals.instances[this.id]}},{key:"getExtension",value:function(){return window.intlTelInputUtils?intlTelInputUtils.getExtension(this._getFullNumber(),this.selectedCountryData.is
2024-10-31 16:23:16 UTC	321	IN	Data Raw: 2c 2c 2c 2c 2c 2c 2c 5b 39 5d 5d 2c 5b 2c 2c 22 32 5c 5c 64 28 3f 3a 5b 30 31 33 34 5d 5b 32 35 2d 39 5d 7c 5b 32 35 2d 39 5d 5c 5c 64 29 5c 5c 64 7b 35 7d 22 2c 2c 2c 2c 22 32 32 32 31 32 33 34 35 36 22 5d 2c 5b 2c 2c 22 39 5b 31 2d 35 39 5d 5c 5c 64 7b 37 7d 22 2c 2c 2c 2c 22 39 32 33 31 32 33 34 35 36 22 5d 2c 5b 2c 2c 2c 2c 2c 2c 2c 2c 2c 5b 2d 31 5d 5d 2c 5b 2c 2c 2c 2c 2c 2c 2c 2c 2c 5b 2d 31 5d 5d 2c 5b 2c 2c 2c 2c 2c 2c 2c 2c 2c 5b 2d 31 5d 5d 2c 5b 2c 2c 2c 2c 2c 2c 2c 2c 2c 5b 2d 31 5d 5d 2c 5b 2c 2c 2c 2c 2c 2c 2c 2c 2c 5b 2d 31 5d 5d 2c 22 41 4f 22 2c 32 34 34 2c 22 30 30 22 2c 2c 2c 2c 2c 2c 2c 2c 5b 5b 2c 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 32 39 5d 22 5d Data Ascii: ,,,,,,,[9]],[,,"2\\d(?:[0134][25-9]\|[25-9]\\d)\\d{5}",,,,"222123456"],[,,"9[1-59]\\d{7}",,,,"923123456"],[,,,,,,,,,[-1]],[,,,,,,,,,[-1]],[,,,,,,,,,[-1]],[,,,,,,,,,[-1]],[,,,,,,,,,[-1]],"AO",244,"00",,,,,,,,[[,"(\\d{3})(\\d{3})(\\d{3})","$1 $2 $3",["[29]"]
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 5b 2d 31 5d 5d 5d 2c 41 52 3a 5b 2c 5b 2c 2c 22 28 3f 3a 31 31 7c 5b 38 39 5d 5c 5c 64 5c 5c 64 29 5c 5c 64 7b 38 7d 7c 5b 32 33 36 38 5d 5c 5c 64 7b 39 7d 22 2c 2c 2c 2c 2c 2c 2c 5b 31 30 2c 31 31 5d 2c 5b 36 2c 37 2c 38 5d 5d 2c 5b 2c 2c 22 33 38 38 38 5b 30 31 33 2d 39 5d 5c 5c 64 7b 35 7d 7c 33 28 3f 3a 37 28 3f 3a 31 5b 31 35 5d 7c 38 31 29 7c 38 28 3f 3a 32 31 7c 34 5b 31 36 5d 7c 36 39 7c 39 5b 31 32 5d 29 29 5b 34 36 5d 5c 5c 64 7b 35 7d 7c 28 3f 3a 32 39 28 3f 3a 35 34 7c 36 36 29 7c 33 28 3f 3a 37 28 3f 3a 35 35 7c 37 37 29 7c 38 36 35 29 29 5b 32 2d 38 5d 5c 5c 64 7b 35 7d 7c 28 3f 3a 32 28 3f 3a 32 28 3f 3a 32 5b 35 39 5d 7c 34 34 7c 35 32 29 7c 33 28 3f 3a 32 36 7c 34 34 29 7c 34 37 33 7c 39 28 3f 3a 5b 30 37 5d 32 7c 32 5b 32 36 5d 7c 33 34 Data Ascii: [-1]]],AR:[,[,,"(?:11\|[89]\\d\\d)\\d{8}\|[2368]\\d{9}",,,,,,,[10,11],[6,7,8]],[,,"3888[013-9]\\d{5}\|3(?:7(?:1[15]\|81)\|8(?:21\|4[16]\|69\|9[12]))[46]\\d{5}\|(?:29(?:54\|66)\|3(?:7(?:55\|77)\|865))[2-8]\\d{5}\|(?:2(?:2(?:2[59]\|44\|52)\|3(?:26\|44)\|473\|9(?:[07]2\|2[26]\|34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49717	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:15 UTC	578	OUT	GET /build/js/trustpilot.1e3f9101852f0e7a5a8c.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:16 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23183 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:16 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-5a8f" Expires: Thu, 07 Nov 2024 16:23:16 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 367a4718be97a49df7ac0500a986437a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: b2OtkglXxAl-tZSyeD5qrci-2K8Snjv7kA0zbPyMkc3VpYL1v-0wOw==
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 74 72 75 73 74 70 69 6c 6f 74 22 5d 2c 7b 39 36 36 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 31 36 30 39 29 7d 2c 35 34 34 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 38 36 37 29 2c 6f 3d 72 28 36 30 32 36 29 2c 73 3d 72 28 34 33 37 32 29 2c 61 3d 72 28 35 33 32 37 29 2c 69 3d 72 28 34 30 39 37 29 2c 63 3d 72 28 34 31 30 39 29 2c 75 3d 72 28 37 39 38 35 29 2c 6c 3d 72 28 35 30 36 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 Data Ascii: (self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["trustpilot"],{9669:(e,t,r)=>{e.exports=r(1609)},5448:(e,t,r)=>{"use strict";var n=r(4867),o=r(6026),s=r(4372),a=r(5327),i=r(4097),c=r(4109),u=r(7985),l=r(5061);e.exports=function(e){return new Promis
2024-10-31 16:23:16 UTC	6799	IN	Data Raw: 65 70 74 6f 72 73 2e 72 65 73 70 6f 6e 73 65 2e 75 73 65 28 28 65 3d 3e 65 29 2c 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 6f 6e 66 69 67 3b 72 65 74 75 72 6e 20 34 30 31 21 3d 3d 65 2e 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 7c 7c 74 2e 5f 72 65 74 72 79 3f 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 3a 28 74 2e 5f 72 65 74 72 79 3d 21 30 2c 6f 2e 67 65 74 28 22 2f 74 6f 6b 65 6e 2f 67 65 74 22 29 2e 74 68 65 6e 28 28 65 3d 3e 28 73 3d 65 2e 64 61 74 61 2c 6f 28 74 29 29 29 29 29 7d 29 29 3b 63 6f 6e 73 74 20 61 3d 6f 7d 2c 35 32 39 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 28 34 38 32 35 29 3b 76 61 72 20 6e 3d 5b 7b 6c 69 6e 6b 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 72 75 73 74 70 69 6c 6f 74 Data Ascii: eptors.response.use((e=>e),(e=>{const t=e.config;return 401!==e.response.status\|\|t._retry?Promise.reject(e):(t._retry=!0,o.get("/token/get").then((e=>(s=e.data,o(t)))))}));const a=o},5298:(e,t,r)=>{"use strict";r(4825);var n=[{link:"https://www.trustpilot

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49718	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:15 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 30 Oct 2024 23:56:08 GMT ETag: "0x8DCF93E6CAB67A0" x-ms-request-id: 3ed0e151-601e-0032-5264-2beebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162315Z-r1755647c666sbmsukk894ba7n00000007dg0000000098r1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:15 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 16:23:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-31 16:23:16 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 16:23:16 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=174203 Date: Thu, 31 Oct 2024 16:23:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 16:23:16 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49722	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:16 UTC	624	OUT	GET /build/img/static/wlc-img.webp HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:17 UTC	630	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 40630 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-9eb6" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 cb4c4a25e4ef534686959996782c8476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: Hio-6PxCtA1oiyCCP-kBsEkcnPVvivFO8TmlgfndMpo8YQnxghqJSw==
2024-10-31 16:23:17 UTC	7900	IN	Data Raw: 52 49 46 46 ae 9e 00 00 57 45 42 50 56 50 38 20 a2 9e 00 00 10 b5 02 9d 01 2a 43 02 7b 02 3e 29 12 88 43 21 a1 21 11 59 05 80 18 02 84 b2 b7 44 50 b2 69 f2 41 74 3a 3e d0 cc 54 44 e9 de 5f b9 7f bf 5f d2 ff ec 78 a2 f9 4e b0 ec c6 bf 47 ff 71 d4 13 fe 0f 32 00 c9 aa 1f c6 43 26 e6 bb ff fc 5e 76 7c 8f e1 97 d2 3f 17 fb 2f db 17 7f 1d b5 e6 c5 d4 df f5 7f c6 7e 5b fc b8 ff 87 ff af fd 77 f9 ef 8b df ad ff ea fe 7d 7d 0b 7f 4a ff 09 ff 13 fb af fa 5f da 0f a5 3f f2 7f 6f 3e 01 ff 7b ff a9 f9 55 f0 a3 f9 77 f8 ff db 2f 74 ef fb 1f b9 fe f5 bf b0 ff bb f6 19 fe a7 fe 5b ff 0f 64 7f f9 df fb df ff fd d6 bf 9d 7f b4 ff ff ec e5 ff 5f f7 ab e2 07 f9 67 fc 5f dd 0f 86 0f e7 5f e2 ff f9 ff b5 d6 00 f7 5f 9c ff 8e fd d8 f1 2f ce f7 c6 ff 8d ff 3f ff 37 fc b7 bb 67 Data Ascii: RIFFWEBPVP8 *C{>)C!!YDPiAt:>TD__xNGq2C&^v\|?/~[w}}J_?o>{Uw/t[d_g___/?7g
2024-10-31 16:23:17 UTC	16384	IN	Data Raw: a1 44 5b 2e ba 47 ae 76 58 3d 6f 9b e5 b4 e7 be d1 6f 74 a5 54 28 f3 3e 85 d2 8f d2 2b 89 9e 93 7b 13 12 cc 9e ea 6b 73 ae df 93 2d a1 5a 9d 8b c3 b0 3f 3a f8 aa 87 4e 06 24 b5 da 52 1c 05 6f 9e 6d f1 dc 3c 9d 65 54 eb a0 3f a4 1d 47 41 60 08 31 90 94 45 20 a9 80 3d 2e 61 80 79 1e ee 6e 7f dd 6d 5e b8 33 5d 54 aa 73 50 c3 50 2f 80 af d0 56 b1 0a f8 21 21 66 d8 92 b2 b1 73 cb 9f 08 34 af c7 01 54 fa 57 2c 0b 6e b9 70 f9 4f a4 fa f1 bf 38 b1 2a 86 5e b2 24 d7 0d 09 be 37 c7 3e 14 d8 e0 7b 1b 97 05 00 86 1c 02 f8 66 df 2d a4 65 30 23 90 b2 6d ab e4 a7 87 d8 bd c3 92 97 ff bb 80 63 3d 0e 12 1c 17 fe 3f 5c bc 66 86 a6 4d c8 1d 1f a8 78 6e 74 4f 6d d9 24 bd 21 b6 a1 37 42 02 eb 6a 80 fb c7 42 c9 58 83 f9 5c 57 b9 71 ad fd 7c a9 09 c6 00 ec fd d9 a0 87 1a 41 d2 Data Ascii: D[.GvX=ootT(>+{ks-Z?:N$Rom<eT?GA`1E =.aynm^3]TsPP/V!!fs4TW,npO8*^$7>{f-e0#mc=?\fMxntOm$!7BjBX\Wq\|A
2024-10-31 16:23:17 UTC	16346	IN	Data Raw: 4b 7e 4e 9f b4 40 eb f0 04 e2 ea be 79 17 4a 01 78 d6 bd cc 36 d9 ee 00 26 34 a2 2c aa 84 44 1e 5f 19 6f 4b e9 98 c0 4a e7 4b e7 d6 14 c0 64 2a a8 9b 6a 6d 18 95 b1 e0 73 13 e6 05 3e 40 6c 77 25 90 04 9c 7b 57 a5 ef 54 80 aa 8b 5c 42 ed 84 47 e8 ce 16 84 62 33 98 c3 c9 ec 54 26 a3 3b fb a1 a1 ff 94 39 a4 7a 5e f6 a4 67 f9 9f 45 99 df f6 77 7f c3 78 25 cc d9 ba f1 41 a5 ff bf 3e 0e 76 da e0 e0 88 b6 a6 68 d5 8b 32 62 78 ed 7b bb 5f bc 31 88 40 37 e3 8d 81 23 41 cb 7e 32 b2 6e 5c ce 44 ce e2 93 3e c6 ad 81 35 8d 8d 46 b2 d5 9f c1 8a 64 d2 4d 12 11 71 2e b7 3c b6 44 4c 6f e0 be 3d 9c 1b f8 79 92 37 22 0b 52 d8 8d ff 84 19 96 d0 11 11 d0 10 49 1f b2 16 b6 46 f4 61 14 02 ef a7 02 57 10 4c e7 ae 89 3c 8c 57 bb a1 a3 8d 91 55 00 15 cf 6f 3d 01 59 92 76 fb af 89 Data Ascii: K~N@yJx6&4,D_oKJKd*jms>@lw%{WT\BGb3T&;9z^gEwx%A>vh2bx{_1@7#A~2n\D>5FdMq.<DLo=y7"RIFaWL<WUo=Yv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49720	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:16 UTC	668	OUT	GET /build/img/svg/pattern-x.svg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:17 UTC	653	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 389 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:16 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-185" Expires: Thu, 07 Nov 2024 16:23:16 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e44e0b24e706487eaec6b9e01f2166dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: iBA_aC02sQnXwNJFOXo_36zvYYsf7VH9Hj129cjIEaM7bJmEOE41VA==
2024-10-31 16:23:17 UTC	389	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 37 30 20 36 22 3e 3c 64 65 66 73 2f 3e 3c 70 61 74 68 20 73 74 72 6f 6b 65 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 29 22 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3d 22 32 20 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 38 37 30 20 33 48 30 22 20 6f 70 61 63 69 74 79 3d 22 2e 31 22 2f 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 22 20 78 31 3d 22 38 37 30 22 20 78 32 3d 22 38 36 39 2e 39 39 39 22 20 79 31 3d 22 34 22 20 79 32 3d 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 870 6"><defs/><path stroke="url(#paint0_linear)" stroke-dasharray="2 5" stroke-width="6" d="M870 3H0" opacity=".1"/><defs><linearGradient id="paint0_linear" x1="870" x2="869.999" y1="4" y2="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49721	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:16 UTC	633	OUT	GET /build/img/static/fumeie-home-page.webp HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:17 UTC	630	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 50042 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-c37a" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 c2e56cd54e2593df95ccca8a6d98c958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: rIa9XKu2EXiX0Tv-JmzZNBDrv5MzoMF_sS2noZ16US-QwZ9TR9PTyw==
2024-10-31 16:23:17 UTC	7899	IN	Data Raw: 52 49 46 46 72 c3 00 00 57 45 42 50 56 50 38 4c 66 c3 00 00 2f 84 81 b1 10 ff 07 31 b6 6d 55 cd b9 e7 be f7 e0 1b c4 a5 ff 1e d2 47 6a c1 b9 d6 06 c4 da 76 db 36 c0 07 01 d0 e9 bd 67 88 0c 9e 85 32 44 55 35 1b 20 d9 b6 9b 46 92 be a4 14 73 cd 7a 46 cb ed 75 32 b3 6d 81 1c 51 00 08 a0 7a d9 b6 6d ad 6e 73 5d a0 4b 78 6a f6 d6 25 9a 1a 5b ed a6 46 db f6 d7 f6 0b 10 11 f0 cf b0 b9 26 0a 42 7f 09 7c 49 20 03 c9 91 ed 17 99 9f c1 59 54 4d 28 84 00 08 41 00 01 04 10 40 01 85 a0 80 5a fd 44 c4 5f 61 da 01 d1 6b f6 2a ca 51 d9 19 f1 a5 42 e5 5e 9d b7 fa 87 a0 bf 88 4c 82 07 5f 88 77 c7 5c 70 18 9e 53 78 4e 4e 69 36 4b 20 19 44 09 e3 60 73 c2 c8 ea 26 3b bb 3c 4b e8 a6 27 92 6a 25 6d 68 07 d6 b3 e8 66 e4 7c 68 2e 06 66 ca 5c c7 0c 2c 74 9a 94 06 55 a6 09 d0 95 74 Data Ascii: RIFFrWEBPVP8Lf/1mUGjv6g2DU5 FszFu2mQzmns]Kxj%[F&B\|I YTM(A@ZD_ak*QB^L_w\pSxNNi6K D`s&;<K'j%mhf\|h.f\,tUt
2024-10-31 16:23:17 UTC	16384	IN	Data Raw: 66 0e 98 d9 c3 59 8d f3 0b a4 ed e7 d2 33 71 8d 81 c8 0a 7c ce a5 82 38 b3 6d c6 8c 64 46 1a cc 14 5c 11 d5 88 4e 82 a8 91 0a 5e b2 aa c2 0e 6b d9 2a 61 10 69 4f 9e af af 8e 07 c3 7e 49 7b d1 1f 21 e3 b7 01 70 99 84 5c 5c 64 1c 6f 3d c9 37 65 76 95 cc 61 48 a9 08 fa a2 d1 aa 4b 07 4a 26 08 89 15 4e 5a 4a 1a 9c c9 6d 72 c9 9c 85 fa 70 86 5b c8 6e a8 13 30 22 1e 58 63 b0 26 b5 b6 55 9d 92 ea 65 2c 46 62 20 a5 6b e3 6e 59 67 24 bf f7 21 ae 81 f5 07 a4 83 e2 ba aa e2 ad 03 70 c5 13 bb 0c e1 43 01 5a da d0 ee e9 7c 6a 8a 31 23 4a b0 07 b1 b4 bc b4 cc cc 22 12 02 53 23 4c 80 9c 72 d0 49 55 31 94 d6 b8 5b 5c 54 34 6a f3 ba df 65 59 4a bd 93 88 5f b6 e7 17 e6 ca fa e3 f5 cf 1f 7c 04 91 16 e8 84 79 0c 04 b9 df 1e 99 da 56 b2 9f fd 00 34 a1 ed e7 33 49 fc 86 d7 58 Data Ascii: fY3q\|8mdF\N^k*aiO~I{!p\\do=7evaHKJ&NZJmrp[n0"Xc&Ue,Fb knYg$!pCZ\|j1#J"S#LrIU1[\T4jeYJ_\|yV43IX
2024-10-31 16:23:17 UTC	1514	IN	Data Raw: 41 a4 25 64 54 ae 3b d0 be 50 bd ec a7 9d 73 df 5e aa f7 70 dd 0d 11 c3 9a 1e cd 18 00 75 5e da 6b 08 11 86 2b 3e 47 a7 16 1b 30 91 7e 55 4c be 3e 8c 40 9f 22 4f 02 d0 14 44 64 34 0d 10 b8 19 7e b0 8f 52 b4 10 6d 64 59 f0 90 90 8c 6f d5 a2 2f f2 b3 bb 04 b4 a4 ca 79 01 be b2 01 34 6e 00 07 26 5d 56 15 c4 54 73 54 8e 3e 20 11 72 84 f2 59 bf f8 95 5c 9d 8b e1 a7 49 55 99 28 c1 2e 56 32 4a 3a e0 f5 3d 7a 5c 91 dc 81 00 1b 33 cc ff 15 57 b8 13 5f a6 53 a9 b2 ba fd 97 50 ae b8 03 28 3a d3 8d ea 78 34 0f b3 ce a3 ce 8e a5 97 61 32 e7 b7 04 dd 1a 0b 18 4c 92 01 bb 18 b4 f5 38 33 83 f9 6e cf 6b 13 e2 58 7b 26 e0 7f c5 71 0b 40 e2 c2 42 d0 e4 a8 53 5e 0c c8 ae 4e 35 7b 03 52 59 88 f6 a7 dc dd fd 51 e8 be ed 88 ea 98 45 51 76 04 3d ba 18 bc fd 14 53 ec 60 2a 5a b7 Data Ascii: A%dT;Ps^pu^k+>G0~UL>@"ODd4~RmdYo/y4n&]VTsT> rY\IU(.V2J:=z\3W_SP(:x4a2L83nkX{&q@BS^N5{RYQEQv=S`*Z
2024-10-31 16:23:17 UTC	6414	IN	Data Raw: 09 c1 44 80 0a a1 13 2b 17 a1 b9 82 c5 64 3b 77 2f 62 f8 ec 0b 0d 2f 84 17 1d c9 cb 17 f5 d6 ac 4a 00 e7 3c 67 0b 91 00 f1 ce c1 8c 22 d8 67 30 c4 4f 3e b3 a8 4a bd 03 4e f4 c6 6e 56 93 52 65 94 0a 2e 03 fa c3 26 73 0c 9d 43 2d 81 d5 a3 2f 9e 05 b0 ba 8a 3d 0f 30 09 20 1b 25 15 c2 73 1d cb 9c 63 8a c8 6c 10 f3 a1 39 91 9f 0d fe 2e c9 e0 07 24 87 af bb 75 f3 c3 5e a2 ce d0 53 12 26 d8 ed 63 5d b9 17 2d 5c ba d2 7e 34 7b 6e a5 95 88 57 b2 b8 9c 13 26 4a 92 c5 7b 0f 38 d7 4d 44 a2 95 d0 10 4d 71 74 c5 2a 5a e1 0f c5 a4 42 99 e1 14 da dc e4 45 d1 ae 93 28 2b 8e 72 45 3b 32 f5 9f 35 bc 39 cb a4 7d a9 22 eb 47 c1 94 f6 e5 93 5d 64 a6 04 09 5d 5b 11 62 7d 30 50 67 9d 0b 38 2f b4 70 d4 2a 52 82 a3 c6 05 31 a8 c8 8a 4f 66 94 37 7d 12 39 2c 52 41 68 52 8a 72 26 73 Data Ascii: D+d;w/b/J<g"g0O>JNnVRe.&sC-/=0 %scl9.$u^S&c]-\~4{nW&J{8MDMqtZBE(+rE;259}"G]d][b}0Pg8/pR1Of7}9,RAhRr&s
2024-10-31 16:23:17 UTC	16384	IN	Data Raw: ca f9 d1 20 e6 64 1d 43 85 33 95 9e 36 a1 71 e4 27 d5 01 f7 c0 c3 80 10 fe 12 d0 cb c6 a1 42 ac 32 ea c2 0c b0 e7 9e 9f 53 a8 1b 6f 04 37 49 d1 9f 72 4a 6b dd 40 79 ef 7f e3 7f 0d b0 75 ec 96 df e0 fd fa 46 3a a3 4a 81 4a 53 4b 6b fb f1 23 a5 63 85 be c3 6e 54 76 dd be b8 33 5b e8 3a 02 0b 05 53 77 27 56 b4 9b ca 3d 88 24 39 aa b0 3b e8 24 6b 9a ac c2 e9 59 6e eb d3 02 15 f0 88 df b8 ae d6 54 66 b5 1b b6 84 92 9c cd 5b f1 f7 1d 0e 74 0b 63 37 fc fa ab 2f c8 3f 79 40 67 04 c8 03 cd 80 63 e5 a5 63 45 85 91 34 a7 da dd 53 89 73 5b 2c a9 d6 f3 b6 06 df a3 b2 4d 7a 8e c9 5f 48 ae 2b 2e 46 55 a1 96 c9 29 49 07 03 1f ff dc f3 55 06 98 d2 b1 c1 2e 93 c7 e3 14 81 76 d9 15 66 16 e4 ba e7 f2 d3 bd ff 51 a4 07 06 c6 ae fd ed 57 5f 78 46 49 65 44 d9 02 bd ed c4 b1 b2 Data Ascii: dC36q'B2So7IrJk@yuF:JJSKk#cnTv3[:Sw'V=$9;$kYnTf[tc7/?y@gccE4Ss[,Mz_H+.FU)IU.vfQW_xFIeD
2024-10-31 16:23:17 UTC	1447	IN	Data Raw: e9 8b 3c f0 f4 2c 05 7d e3 f5 b1 85 a3 d9 6b 45 c5 d4 e3 ea d8 c0 10 e2 87 4e e4 13 a1 c0 57 dc 1b a3 6e 5a c1 ad 4b 03 5c 12 df 4f aa 6d c4 06 6e 3d 33 fe cd c4 dd 4d 15 4c 23 e2 e5 fa 8c 2b 9f a0 48 5a 8c 96 3f d8 e3 98 6e 32 b8 89 c5 66 18 a1 0e b3 6c b7 a8 a5 a9 47 86 cf 88 f2 79 60 c7 e4 ee 6b 09 12 51 00 e3 72 5b 39 de 7a f8 61 18 d1 d9 94 5b a2 30 fd a1 76 06 b4 96 ec a3 8a 3b f8 ec c9 cb a3 0b df 92 2a f0 64 64 24 68 d0 5b f6 99 e2 93 10 24 ab f1 32 c9 ea 1a 3b 07 56 15 5e c0 37 6e 70 45 e7 b3 7d 2c f9 cf 98 85 0d 1a 97 bf b0 36 5e c7 10 ff ba 2a bb 95 a4 a3 0b df dc e5 ff 33 05 19 63 b0 4a 48 53 0b 6e 72 35 85 f2 d6 27 e4 76 30 79 8b 26 0c 55 e7 4f 7c b2 57 39 7d e3 a6 4f 7c 46 af 07 e5 66 f5 39 53 1b 3d fe 62 1d b9 68 06 7e 74 fa 08 bb 0e 45 79 Data Ascii: <,}kENWnZK\Omn=3ML#+HZ?n2flGy`kQr[9za[0v;dd$h[$2;V^7npE},6^3cJHSnr5'v0y&UO\|W9}O\|Ff9S=bh~tEy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49723	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:16 UTC	622	OUT	GET /build/img/static/user-2.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:17 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2973 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-b9d" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 f4137273db9ae377298b8f8daf5b93f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: 0iQF5zFND18nRad1VSSniY_WXVRA1AwfafZnQVZ3jOQb1kYynUGJrQ==
2024-10-31 16:23:17 UTC	2973	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 09 00 05 06 07 08 04 0a 01 03 ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 02 03 05 06 01 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 3f 89 72 f3 Data Ascii: JFIFCCCC?r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49724	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:17 UTC	622	OUT	GET /build/img/static/user-1.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:17 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3997 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-f9d" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 891011d51eb2353ebe8601f5b6467070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: BDa7PjioBuAiAMyjWterntHNRteh2SdFiR-cL07-Aodevn-B9g1wVg==
2024-10-31 16:23:17 UTC	3997	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 08 09 06 07 00 05 0a 04 01 03 ff c4 00 1c 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 03 05 06 07 02 01 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 7f 89 53 Data Ascii: JFIFCCCCS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49725	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:17 UTC	395	OUT	GET /build/js/trustpilot.1e3f9101852f0e7a5a8c.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:17 UTC	672	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23183 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:16 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-5a8f" Expires: Thu, 07 Nov 2024 16:23:16 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b96dc0b769a91a3fe5483b063383b1c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: f030wFA3xTquCJgeDbyfXjnLiae333pmpKpI2Xi05dIg2WC95auMsg== Age: 1
2024-10-31 16:23:17 UTC	15336	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 74 72 75 73 74 70 69 6c 6f 74 22 5d 2c 7b 39 36 36 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 31 36 30 39 29 7d 2c 35 34 34 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 38 36 37 29 2c 6f 3d 72 28 36 30 32 36 29 2c 73 3d 72 28 34 33 37 32 29 2c 61 3d 72 28 35 33 32 37 29 2c 69 3d 72 28 34 30 39 37 29 2c 63 3d 72 28 34 31 30 39 29 2c 75 3d 72 28 37 39 38 35 29 2c 6c 3d 72 28 35 30 36 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 Data Ascii: (self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["trustpilot"],{9669:(e,t,r)=>{e.exports=r(1609)},5448:(e,t,r)=>{"use strict";var n=r(4867),o=r(6026),s=r(4372),a=r(5327),i=r(4097),c=r(4109),u=r(7985),l=r(5061);e.exports=function(e){return new Promis
2024-10-31 16:23:17 UTC	7847	IN	Data Raw: 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 2c 69 73 53 74 61 6e 64 61 72 64 42 72 6f 77 73 65 72 45 6e 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 7c 7c 22 52 65 61 63 74 4e 61 74 69 76 65 22 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 70 72 6f 64 75 63 74 26 26 22 4e 61 74 69 76 65 53 63 72 69 70 74 22 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 70 72 6f 64 75 63 74 26 26 22 4e 53 22 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 70 72 6f 64 75 63 74 29 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 Data Ascii: d"!=typeof URLSearchParams&&e instanceof URLSearchParams},isStandardBrowserEnv:function(){return("undefined"==typeof navigator\|\|"ReactNative"!==navigator.product&&"NativeScript"!==navigator.product&&"NS"!==navigator.product)&&("undefined"!=typeof window&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49727	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:17 UTC	379	OUT	GET /build/img/svg/pattern-x.svg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:18 UTC	660	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 389 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:16 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-185" Expires: Thu, 07 Nov 2024 16:23:16 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d1b1cc661d55a3f8a88f240826e4f38c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: UF9xN3ekuVtVmFMmAkUYwkwbTL8h8_Z0rnItbjE32Z_hrnamQGWJ8w== Age: 2
2024-10-31 16:23:18 UTC	389	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 37 30 20 36 22 3e 3c 64 65 66 73 2f 3e 3c 70 61 74 68 20 73 74 72 6f 6b 65 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 29 22 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3d 22 32 20 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 38 37 30 20 33 48 30 22 20 6f 70 61 63 69 74 79 3d 22 2e 31 22 2f 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 22 20 78 31 3d 22 38 37 30 22 20 78 32 3d 22 38 36 39 2e 39 39 39 22 20 79 31 3d 22 34 22 20 79 32 3d 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 870 6"><defs/><path stroke="url(#paint0_linear)" stroke-dasharray="2 5" stroke-width="6" d="M870 3H0" opacity=".1"/><defs><linearGradient id="paint0_linear" x1="870" x2="869.999" y1="4" y2="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49726	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:17 UTC	622	OUT	GET /build/img/static/user-3.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:18 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2891 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:18 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-b4b" Expires: Thu, 07 Nov 2024 16:23:18 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 93b8205e2f07a7099af2e6fd126d9658.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: vQY0LmkZZpvOFd7pfnRf0tP9YaKxIFMX2ajnFt6Nf_XpIhjNoU-3CA==
2024-10-31 16:23:18 UTC	2891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 09 00 04 06 05 03 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 00 02 05 06 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 aa 72 70 f4 34 e6 4f Data Ascii: JFIFCCCCrp4O

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49732	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162318Z-r1755647c665dwkwce4e7gadz00000000aqg000000000xte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49729	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162318Z-r1755647c665dwkwce4e7gadz00000000ak000000000789t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49731	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 63125a57-c01e-0046-4226-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162318Z-r1755647c66vpf8fnbgmzm21hs0000000atg0000000025w8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49728	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:18 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 67a0dec0-201e-006e-29f9-2abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162318Z-r1755647c665dwkwce4e7gadz00000000apg000000002z20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49730	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:18 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162318Z-r1755647c665dwkwce4e7gadz00000000amg0000000057pd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49734	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:18 UTC	379	OUT	GET /build/img/static/user-2.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:18 UTC	635	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2973 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-b9d" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 52565866975cd7c0daa261ea0388bad4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: iCpWuDb6-3iDyRbH2UxoLeAZfyF_ditvJ5AZOaI4Gc-zohWPUoOEYw== Age: 1
2024-10-31 16:23:18 UTC	2973	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 09 00 05 06 07 08 04 0a 01 03 ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 00 02 03 05 06 01 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 3f 89 72 f3 Data Ascii: JFIFCCCC?r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49733	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:18 UTC	622	OUT	GET /build/img/static/user-4.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:18 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3434 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:18 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-d6a" Expires: Thu, 07 Nov 2024 16:23:18 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 f4137273db9ae377298b8f8daf5b93f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: YrAAo8-3ZaN_fPJpuEm9XRzlA2hXEGZjdmAcMSbb_7cWuN9iptnQyw==
2024-10-31 16:23:18 UTC	3434	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 09 06 08 00 04 05 03 0a ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 00 03 04 06 07 02 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 7f 89 0f 61 c9 Data Ascii: JFIFCCCCa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49735	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	622	OUT	GET /build/img/static/user-5.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:19 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3600 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:19 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-e10" Expires: Thu, 07 Nov 2024 16:23:19 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 c2e56cd54e2593df95ccca8a6d98c958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: ZWqu0M8qHa95jjcvh_SneG5F9F6mP0OAu3KF7boFaWbGHikqU9fS5w==
2024-10-31 16:23:19 UTC	3600	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 07 08 00 06 09 03 04 05 0a ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 07 00 02 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 df ce ea 05 59 Data Ascii: JFIFCCCCY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49737	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	381	OUT	GET /build/img/static/wlc-img.webp HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:19 UTC	637	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 40630 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-9eb6" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 38ff23673937c3eba42a4eefb2007078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: pNnRUBTeQLCnRo5fF_oeZ4TEBVdwqAFedvY-8-rfTgQnIbr2A5xU8Q== Age: 2
2024-10-31 16:23:19 UTC	16384	IN	Data Raw: 52 49 46 46 ae 9e 00 00 57 45 42 50 56 50 38 20 a2 9e 00 00 10 b5 02 9d 01 2a 43 02 7b 02 3e 29 12 88 43 21 a1 21 11 59 05 80 18 02 84 b2 b7 44 50 b2 69 f2 41 74 3a 3e d0 cc 54 44 e9 de 5f b9 7f bf 5f d2 ff ec 78 a2 f9 4e b0 ec c6 bf 47 ff 71 d4 13 fe 0f 32 00 c9 aa 1f c6 43 26 e6 bb ff fc 5e 76 7c 8f e1 97 d2 3f 17 fb 2f db 17 7f 1d b5 e6 c5 d4 df f5 7f c6 7e 5b fc b8 ff 87 ff af fd 77 f9 ef 8b df ad ff ea fe 7d 7d 0b 7f 4a ff 09 ff 13 fb af fa 5f da 0f a5 3f f2 7f 6f 3e 01 ff 7b ff a9 f9 55 f0 a3 f9 77 f8 ff db 2f 74 ef fb 1f b9 fe f5 bf b0 ff bb f6 19 fe a7 fe 5b ff 0f 64 7f f9 df fb df ff fd d6 bf 9d 7f b4 ff ff ec e5 ff 5f f7 ab e2 07 f9 67 fc 5f dd 0f 86 0f e7 5f e2 ff f9 ff b5 d6 00 f7 5f 9c ff 8e fd d8 f1 2f ce f7 c6 ff 8d ff 3f ff 37 fc b7 bb 67 Data Ascii: RIFFWEBPVP8 *C{>)C!!YDPiAt:>TD__xNGq2C&^v\|?/~[w}}J_?o>{Uw/t[d_g___/?7g
2024-10-31 16:23:19 UTC	10463	IN	Data Raw: 4f 99 4c 99 5e 29 d2 e1 ec 9b cb c6 51 33 1b 5d 35 e2 37 b8 39 d4 be 89 d6 b4 cc f8 2b d3 0e 78 53 b7 db 15 50 37 c7 06 1b 21 ec 78 c2 a7 2f e2 d0 b9 de c0 1c e1 d9 99 07 c0 00 26 ea f4 22 cf df 70 9d 25 41 da ce 6b 5f d0 13 20 39 86 2e c4 59 99 7f 68 f9 9e d3 84 84 22 ab 78 5c cd 81 2a e3 14 76 4f f1 04 53 ba 8c 6d e2 ea 74 96 41 34 a6 e4 4a 9b 9d 18 61 40 f0 ea b3 71 9e 90 b5 5f eb 8a 88 f8 b5 c7 69 9f 4a bd 99 43 d6 b7 32 c4 14 04 bd 70 ba 6d d5 c6 66 82 31 b9 64 34 ee cb e8 43 87 06 13 a7 29 57 96 3b a6 78 74 ac 3a 80 6b 6b 13 40 4c c2 c9 9a dc c3 af c9 89 21 34 92 b4 57 e0 d7 49 84 45 65 d6 6c 13 4e dd 57 b4 b7 93 4a 17 57 ba 5a 2d e0 46 95 d2 d4 60 04 d8 c6 12 ad c7 23 54 9b 49 f4 3b 7a 3a d7 88 f5 3d ae f5 f2 e2 36 a7 cf 00 01 a8 0b 11 01 01 52 c0 Data Ascii: OL^)Q3]579+xSP7!x/&"p%Ak_ 9.Yh"x\*vOSmtA4Ja@q_iJC2pmf1d4C)W;xt:kk@L!4WIEelNWJWZ-F`#TI;z:=6R
2024-10-31 16:23:19 UTC	13783	IN	Data Raw: a3 49 62 fc 0a 09 c0 8f bb 76 31 a9 f5 06 fb 3c 95 ef b0 a1 92 68 aa 42 4e 67 b7 45 d6 7a 77 4c b0 53 71 58 54 bf 65 db df 67 89 8d 82 06 cd d7 96 22 dd 02 66 82 cd c9 a1 e3 f8 1d b5 29 63 51 5c 6a 24 45 d8 94 16 3d bd cc 02 d9 65 f5 bb 0b 61 ab fd d9 0e 8b 51 a6 30 97 01 c2 91 70 29 87 43 3a 63 df c6 f3 ff b8 5e 67 80 c3 b9 27 e3 cd fe 15 00 d4 ab 19 21 81 3f 79 92 9a de 15 a3 23 7f 87 4d 2f 4c 7b eb a0 ac 9b bd aa d7 79 75 eb ba 5f e1 5d 0f a6 2d 30 fa 81 22 9a 5b d9 82 2c 26 f3 e7 a6 20 0f 2d e4 2c f5 84 da 3e 5c b8 d8 29 1c 1e 64 c9 17 df ec 04 7a 11 86 48 3e eb 9f 02 32 e6 7e 86 fd 77 fb 51 09 9e 51 b9 1f ad e4 4d e4 17 5d fe 24 d8 38 20 f1 4a 87 f6 a0 67 05 de 0e 3f fb 45 33 4e 18 c0 d5 32 b6 17 ec 5f e1 7d 5d 2e 05 a2 0b 64 f7 44 77 62 b6 c3 66 b5 Data Ascii: Ibv1<hBNgEzwLSqXTeg"f)cQ\j$E=eaQ0p)C:c^g'!?y#M/L{yu_]-0"[,& -,>\)dzH>2~wQQM]$8 Jg?E3N2_}].dDwbf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49736	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	390	OUT	GET /build/img/static/fumeie-home-page.webp HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:19 UTC	637	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 50042 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-c37a" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 0f3cf20f6db29b970aa67df851b05904.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: hugUYM2UPMtITnQGkrorLpELpNtzfB2gZHrWSJkDtdjOQCrEQJHXUw== Age: 2
2024-10-31 16:23:19 UTC	16384	IN	Data Raw: 52 49 46 46 72 c3 00 00 57 45 42 50 56 50 38 4c 66 c3 00 00 2f 84 81 b1 10 ff 07 31 b6 6d 55 cd b9 e7 be f7 e0 1b c4 a5 ff 1e d2 47 6a c1 b9 d6 06 c4 da 76 db 36 c0 07 01 d0 e9 bd 67 88 0c 9e 85 32 44 55 35 1b 20 d9 b6 9b 46 92 be a4 14 73 cd 7a 46 cb ed 75 32 b3 6d 81 1c 51 00 08 a0 7a d9 b6 6d ad 6e 73 5d a0 4b 78 6a f6 d6 25 9a 1a 5b ed a6 46 db f6 d7 f6 0b 10 11 f0 cf b0 b9 26 0a 42 7f 09 7c 49 20 03 c9 91 ed 17 99 9f c1 59 54 4d 28 84 00 08 41 00 01 04 10 40 01 85 a0 80 5a fd 44 c4 5f 61 da 01 d1 6b f6 2a ca 51 d9 19 f1 a5 42 e5 5e 9d b7 fa 87 a0 bf 88 4c 82 07 5f 88 77 c7 5c 70 18 9e 53 78 4e 4e 69 36 4b 20 19 44 09 e3 60 73 c2 c8 ea 26 3b bb 3c 4b e8 a6 27 92 6a 25 6d 68 07 d6 b3 e8 66 e4 7c 68 2e 06 66 ca 5c c7 0c 2c 74 9a 94 06 55 a6 09 d0 95 74 Data Ascii: RIFFrWEBPVP8Lf/1mUGjv6g2DU5 FszFu2mQzmns]Kxj%[F&B\|I YTM(A@ZD_ak*QB^L_w\pSxNNi6K D`s&;<K'j%mhf\|h.f\,tUt
2024-10-31 16:23:19 UTC	16384	IN	Data Raw: ce 0c 6e 40 43 7f 62 fa a0 5c 6b 63 7d 87 b3 67 08 ec f9 94 1b ee 98 45 66 be 02 69 5f 70 08 6b 61 d3 cc ac 9c 9c b2 10 cf 4c 24 d6 78 b7 02 25 17 a2 3c 07 0d f8 dd a7 cb 8e 80 e3 02 5c 9c b2 63 7f af 7a 23 7a bb 5d 5a 6c 6b 8a 6d 3a 6a 2f f8 f6 b9 50 a3 81 bc ce a9 24 04 69 3e af f8 1b f0 1c e8 54 ea b4 cc 74 99 cd 9a c5 4a 69 76 48 19 2e f2 b4 db d2 56 fa c4 cb 56 23 22 25 78 c7 a2 04 70 74 02 2c 7c 80 a0 a4 ec 44 43 ff 62 74 62 ea 9e 8c ff 9d fc de 9a db db 9a 12 b1 71 bc 4a c2 06 41 b7 3d a9 93 6d ef 33 5c ad 3a 79 77 72 98 55 65 c2 75 63 66 c6 19 2f 1d 2b 85 62 73 43 75 b3 68 21 8b 7c 3a cc e5 2d ff a9 a1 50 98 b4 3d 17 0c aa 28 98 f2 81 71 52 c0 68 04 5a 76 a2 be 6f 29 36 89 3f 06 53 26 6f 6f 43 db fc d4 f8 75 91 9d 89 d5 fc 7d 19 e9 e4 39 95 e2 d0 Data Ascii: n@Cb\kc}gEfi_pkaL$x%<\cz#z]Zlkm:j/P$i>TtJivH.VV#"%xpt,\|DCbtbqJA=m3\:ywrUeucf/+bsCuh!\|:-P=(qRhZvo)6?S&ooCu}9
2024-10-31 16:23:19 UTC	16384	IN	Data Raw: 56 c6 48 04 28 9f b1 2b 98 6c 44 e6 25 98 70 3a 1c 95 cd 5b 6d 02 13 c5 c9 fc 6a 59 b4 2b 77 4f ec 71 b9 a4 c8 88 f4 8f 52 b2 70 b6 c2 1a 60 7d 34 1e c8 31 24 61 36 e1 4a 14 f0 04 a0 ee 96 91 b4 ab fc 14 6c dd 0f f2 c2 50 57 2c 30 15 0e 76 77 30 d3 c4 25 56 40 00 25 c2 eb cd 67 6e ad e9 52 d0 7f 14 f6 7a 64 a4 1e a0 27 1f 74 3c be 27 c7 ad 65 2d 18 e7 ba a5 be 51 18 0f b0 1a 36 05 c5 c1 a6 d1 8a 58 28 89 f8 f8 d1 bf 97 df 45 90 f8 97 83 09 0c 14 c6 48 99 94 52 d6 87 a3 93 20 2e a6 e4 32 fa 47 90 71 b6 f7 3a 74 cf 5b a7 d0 9c b3 27 9f 21 93 3e e7 ed 93 cd fc e9 13 84 54 d4 39 15 33 4b 60 a2 0e b1 10 c5 04 85 cc 3c 34 cc 0f c1 3e bb 0d b7 1f f6 db ce e7 70 4e a1 5c c2 4e 4f fc 8c 9e fc 8f 4a 46 de 69 0d 86 fa 64 29 d4 2d 1a 27 a1 89 0d f5 75 28 a4 a6 bb 36 Data Ascii: VH(+lD%p:[mjY+wOqRp`}41$a6JlPW,0vw0%V@%gnRzd't<'e-Q6X(EHR .2Gq:t['!>T93K`<4>pN\NOJFid)-'u(6
2024-10-31 16:23:19 UTC	890	IN	Data Raw: e6 b4 f1 fc 2e 5a 89 4d 5e ab cb 58 9c d0 87 6c c6 d8 41 62 75 26 51 ff 2c 4a ed 12 97 c8 37 63 ad 3d b7 89 95 ed 3b af 8e 31 bc b8 7d 6b b7 e5 29 06 2f 15 35 f7 1d cc 4a e3 cf dc b2 d4 97 c5 9f 23 b8 30 f4 15 91 f0 03 7c 7b 71 ae 3c 09 ca b1 f6 df 36 2b ca e5 5c a9 f3 50 dc e2 b4 f8 7e 43 88 00 53 e5 42 95 fa a8 21 fe 3a f3 0a 99 84 59 7a 9c cb e3 e5 77 b7 b6 a0 4a 51 54 6b 5a db 2b 81 02 9a 2d 07 44 1c e6 4a 9b 82 2c e7 12 c0 7f 2e 3e 85 1a f0 58 f0 bd 8d 92 8a e6 f2 71 86 f7 10 9d 82 b0 68 a2 72 08 b6 63 39 51 c4 e6 24 4d 73 8c a2 f1 dd 4b 83 6d 82 84 2f f2 3b a5 d6 74 ac a2 5c c3 ee 57 fa bb 3a 1d 63 ff 2d fc ab 21 67 56 93 82 71 2c b8 bf 8b ee 24 23 1a d5 88 86 24 79 6b 32 ff 01 48 6f b1 71 2f fc 2b fe ed 32 29 ec 0c 50 3e d6 06 ca f9 19 15 88 a1 1c Data Ascii: .ZM^XlAbu&Q,J7c=;1}k)/5J#0\|{q<6+\P~CSB!:YzwJQTkZ+-DJ,.>Xqhrc9Q$MsKm/;t\W:c-!gVq,$#$yk2Hoq/+2)P>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49738	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	379	OUT	GET /build/img/static/user-1.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:19 UTC	635	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3997 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:17 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-f9d" Expires: Thu, 07 Nov 2024 16:23:17 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 52565866975cd7c0daa261ea0388bad4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: dS--f-0f8Xx-6fI_rTxrlcAOTNy6KA61i9qcR4ZrrpVj6CjlpepM0w== Age: 2
2024-10-31 16:23:19 UTC	3997	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 08 09 06 07 00 05 0a 04 01 03 ff c4 00 1c 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 03 05 06 07 02 01 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 7f 89 53 Data Ascii: JFIFCCCCS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49744	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	379	OUT	GET /build/img/static/user-3.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:19 UTC	635	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2891 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:18 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-b4b" Expires: Thu, 07 Nov 2024 16:23:18 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 cf65dbfe06da8e543052ca7066d0e458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: cqdJhJquP3qx2E6WH6n7G6H8qu80cIU0DadgXi0cFuLuoKIGbX5edA== Age: 1
2024-10-31 16:23:19 UTC	2891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 09 00 04 06 05 03 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 00 02 05 06 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 aa 72 70 f4 34 e6 4f Data Ascii: JFIFCCCCrp4O

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49742	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:19 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162319Z-r1755647c66gqcpzhw8q9nhnq00000000aeg000000008pec x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:19 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49743	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:19 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d6813257-101e-0034-034f-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162319Z-17fbfdc98bbgnnfwq36myy7z0g0000000a9g0000000080ed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:19 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49739	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1041074d-101e-0034-30b5-2596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162319Z-r1755647c66hbclz9tgqkaxg2w0000000bcg000000003337 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49740	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162319Z-17fbfdc98bbx59j5xd9kpbrs84000000098g000000005ukc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49741	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:19 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162319Z-17fbfdc98bbwmxz5amc6q625w000000005t00000000060sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49745	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	666	OUT	GET /build/img/flags/flags.png HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:20 UTC	630	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 70857 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-114c9" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 e44e0b24e706487eaec6b9e01f2166dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: IUMN5HE8ZAV7Saad54YTkUhqj8VtjSPGsrdabdh_HOvVgzglUVVGEg==
2024-10-31 16:23:20 UTC	15754	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 16 14 00 00 00 0f 08 06 00 00 00 a2 db e1 dd 00 01 14 90 49 44 41 54 78 da ec 9d 75 9c 5d d5 f5 f6 bf 7b 9f 73 fd 8e 7b 46 e2 ee 21 4e 82 bb 4b b1 e2 b4 b8 94 42 91 d2 e2 a5 b4 45 5a b4 b4 d0 42 a1 b8 06 77 08 0e 21 c4 93 89 4d 6c 32 19 f7 ab 47 f6 fb c7 b9 33 99 49 46 93 19 a4 ef 6f f7 43 67 32 f7 de 7d f7 d9 b2 e4 59 6b 3d 5b bc 78 c9 5d aa 70 e6 58 ee f8 a4 8a 17 17 d5 f0 fe 90 cd 20 05 fb ad ce e7 c8 a4 06 ae 3b b8 80 2d 81 6c 4e fd e7 52 8c 48 14 a1 49 94 02 21 00 40 29 da b7 75 b7 3a af e4 3e d3 ee 15 4d b3 b0 ea 52 78 e8 b6 7b 38 ff 8c f7 30 ea 34 74 cd 72 fa b0 04 32 5d 51 f3 ef 5c 36 5d 35 02 3d dd 40 59 a2 5d b7 93 ea bf 10 00 0a da f5 bb 2e d5 c3 a1 c7 0f 66 5d 9a 67 87 57 7a d8 ee 5a d2 f2 Data Ascii: PNGIHDRIDATxu]{s{F!NKBEZBw!Ml2G3IFoCg2}Yk=[x]pX ;-lNRHI!@)u:>MRx{804tr2]Q\6]5=@Y].f]gWzZ
2024-10-31 16:23:20 UTC	16384	IN	Data Raw: fb fa 7c f8 45 e7 94 11 d7 0d 3a a9 6f 4f cd 86 fb 7b 20 35 1d b2 6a 3b 2a 48 3f ac 8e a4 a9 cd 54 3c 9d 05 76 cf f4 b9 52 e0 d6 05 45 99 5e d6 95 47 d0 35 08 c7 2c 66 8d 48 69 25 13 d6 a4 60 4c 81 9f 31 05 7e 4e 9d 93 cd fd ef 6c e5 e5 6f aa f1 b9 65 87 b7 dd 77 cb b7 20 44 7b eb ac 87 16 8e 42 62 a1 3b 51 35 ab 8a 01 34 33 41 53 cc 18 91 e4 10 08 ef 39 96 82 69 e3 60 f4 08 f0 24 b5 7e ae ae ae 96 f3 f7 9f cc c6 75 a5 64 66 79 c9 dd 13 d6 6f d8 b8 83 e3 d4 f7 ed 94 d4 ab 39 f1 e7 85 1c 3b a0 8c 0f 17 1b 8c cb 7e 17 94 62 f9 05 37 b3 5f c5 47 bc fa 75 8c c7 97 fa a8 a1 01 29 6d 0a 0a 52 d9 ba b5 99 6d db 9a 01 83 29 53 0a 98 33 a7 90 7b ef fd 1a 29 dd ad c3 94 02 52 a5 41 5a b8 9e b8 ee 26 59 33 11 7d 41 06 af 76 70 6a 95 c0 52 3b 27 b4 db 4a 3a 74 f0 3d Data Ascii: \|E:oO{ 5j;*H?T<vRE^G5,fHi%`L1~Nloew D{Bb;Q543AS9i`$~udfyo9;~b7_Gu)mRm)S3{)RAZ&Y3}AvpjR;'J:t=
2024-10-31 16:23:20 UTC	73	IN	Data Raw: 7a cb c2 5d bf 1e 3f b7 ac 97 9c 9f 52 96 83 a8 b1 f3 7a 72 fd 6e 8e 99 55 42 20 1c 4f ab 71 c9 bb 2f ed a7 8d ac a6 98 39 4c 0b ad b4 98 c2 85 0f 91 b5 e4 db 34 5d f9 43 f8 20 66 cf 94 cf 49 d9 17 ef e2 9c 37 27 e5 5c Data Ascii: z]?RzrnUB Oq/9L4]C fI7'\
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 9b a0 2a 83 93 58 8f f4 e8 2a 92 b0 e4 ae 9f c3 30 8c 60 98 86 a7 5e 25 ba b3 06 b1 07 40 12 dd 59 43 c3 53 af 92 75 e4 01 68 be fe 0b 82 fc b7 df de e7 ed 2a 40 4c 55 79 77 c7 0e ce 3a e9 24 90 92 77 17 2d e2 f8 8f 3f c6 67 9a 7b d6 05 a6 37 0d 49 81 36 2e 8e 92 6b 80 14 58 15 b6 21 a8 95 25 10 b9 06 6a 59 02 63 b3 0b e1 ec 7f 7e 02 b8 7b 1d 34 21 25 49 97 ca e6 9b 2e 62 ec 9f ff 49 f3 d1 f3 c1 92 38 96 6d 61 c7 0d 17 33 f9 be 67 d0 63 a6 4d 90 dd cf a5 57 fc e6 0f 4c 6e a8 40 48 c9 d2 e2 71 08 60 5a bd 5d 74 ff 45 e9 58 96 54 4a 0e 2b dd 02 c0 e7 95 93 90 df 14 4c 3b de 2e e6 dd fd fd 12 c1 8a e2 31 70 be cd c0 79 e8 98 f9 14 64 14 f2 f8 17 7f a5 24 ab 94 98 91 24 d3 e5 c5 30 62 3c f8 de 6f 79 63 eb ab 5c bf e0 66 8e f5 1f 90 ca 19 11 43 9e 57 25 e5 6a Data Ascii: X0`^%@YCSuh*@LUyw:$w-?g{7I6.kX!%jYc~{4!%I.bI8ma3gcMWLn@Hq`Z]tEXTJ+L;.1pyd$$0b<oyc\fCW%j
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 0a a6 16 b4 70 d6 b4 cd bc b6 71 12 d5 9d 7e 0c eb ab 69 98 21 84 c0 b2 2c 4c d3 24 10 08 e0 74 38 d0 dd 0e 72 8d 3a 7e 99 fb 04 e2 63 81 40 30 33 cb 20 37 56 4e 28 31 91 48 38 44 22 99 20 27 27 07 cb b2 6c 3c 62 af e3 38 23 6b 37 25 55 9b 77 d6 4a b9 54 96 9a 92 c9 bb fb a3 ba 8e 7b da 4c 1a eb ab d9 d9 f6 34 e3 b2 1f a5 e8 b6 48 77 73 9c a1 0e 4d f6 e1 6c ef f9 58 4a 40 b1 08 c7 bc fc 71 61 0b 0e 4a 89 c7 76 80 a2 e0 75 bb 08 9b 0e 50 5c 36 bb e6 80 f3 28 31 a5 4e 47 db 68 ea 1c 59 c4 32 ea 40 18 b4 84 4b f0 b4 c5 29 94 db bb 8b e4 d3 c7 8a 24 89 44 82 e1 4e b5 34 4d 93 dc dc 1c 0a ca 4a 68 5f f8 0c 72 ec 78 1c e5 63 70 4e 98 44 64 ed 2a da fe f9 04 85 d7 5d 44 ae 2b 8c 69 19 69 1d 74 21 04 86 ee e2 a6 cf ff c9 b4 93 e7 a3 4c 9c 86 8c ee 56 98 6b 59 08 Data Ascii: pq~i!,L$t8r:~c@03 7VN(1H8D" ''l<b8#k7%UwJT{L4HwsMlXJ@qaJvuP\6(1NGhY2@K)$DN4MJh_rxcpNDd*]D+iit!LVkY
2024-10-31 16:23:21 UTC	5878	IN	Data Raw: 39 89 45 0b f0 74 b6 81 c7 0b 45 a3 31 d7 bd 07 ab df 86 40 51 ea 76 38 59 00 20 77 a3 c4 15 ee ff 69 22 ad 64 45 5e 99 17 a1 ef 9e 90 f0 fb 58 b7 b9 91 ff b8 eb 23 6e 3c ff 50 26 56 76 11 b1 22 44 24 14 16 79 68 68 1c c3 4d ff 53 cd ba 4d 8d 10 f0 63 3b ce 88 68 02 fe 52 e4 54 02 b7 37 b0 ed c3 62 12 d2 24 e8 0f 33 f6 a4 2e d6 9e 79 34 bf b6 af e3 d5 65 b3 c1 02 dd 6b e3 48 cd 25 13 4e 01 97 8e 6f 1e 20 37 a6 51 1f 28 a0 1d b7 53 f3 21 81 18 b3 2b 5b d0 3c fd c7 2a 57 ec 0c 79 00 f8 ed 61 06 e7 4f d4 89 5b ae b8 0a 07 84 5f 27 b1 2d 46 f3 fc 6d c4 6b 22 88 a0 9e 42 e7 8d 41 1c f6 ae 2e 08 87 dd df 72 a4 6d d1 29 00 5c d4 f2 5e 46 af 97 6d 42 e1 9a 2d ad 79 35 be c2 dc 3d 3d 24 3c 92 ea fa 2a 30 6c 5e ab 0e 10 8e 9b 34 75 96 a2 05 12 48 69 a6 12 1a 00 f0 Data Ascii: 9EtE1@Qv8Y wi"dE^X#n<P&Vv"D$yhhMSMc;hRT7b$3.y4ekH%No 7Q(S!+[<WyaO[_'-Fmk"BA.rm)\^FmB-y5==$<0l^4uHi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49746	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	676	OUT	GET /build/img/svg/down-arrow-select.svg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://di7qaez2koc7r.cloudfront.net/build/css/styles.7327c7dca1b0dc7d3971.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:20 UTC	653	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 294 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-126" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4d0ae7ca3bb5e2d6eaa1450e1906adb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: b9BamAv8MOz8of5WBXKmcOBO13f7RfjG6TEjBliGkclztOAylCZ05A==
2024-10-31 16:23:20 UTC	294	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 41 39 34 45 43 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 2e 31 39 35 20 34 2e 38 36 32 63 2e 32 36 2d 2e 32 36 2e 36 38 33 2d 2e 32 36 2e 39 34 33 20 30 4c 38 20 39 2e 37 32 34 6c 34 2e 38 36 32 2d 34 2e 38 36 32 61 2e 36 36 37 2e 36 36 37 20 30 20 31 31 2e 39 34 33 2e 39 34 33 4c 38 2e 34 37 20 31 31 2e 31 33 38 61 2e 36 36 37 2e 36 36 37 20 30 20 30 31 2d 2e 39 34 32 20 30 4c 32 2e 31 39 35 20 35 2e 38 30 35 61 2e 36 36 37 2e 36 36 37 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 16 16"><defs/><path fill="#4A94EC" fill-rule="evenodd" d="M2.195 4.862c.26-.26.683-.26.943 0L8 9.724l4.862-4.862a.667.667 0 11.943.943L8.47 11.138a.667.667 0 01-.942 0L2.195 5.805a.667.667 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49747	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	576	OUT	GET /build/js/alpinejs.bdf191b9eca6a35ac57f.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:20 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 39041 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-9881" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 018ffb575888f1c9ec960e3e977c042e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: wLd0xiVNQNKOVwBwSEnAQ9SpLACT2XHQsb_xwKcXLfD2RIDdbsmK_Q==
2024-10-31 16:23:20 UTC	15719	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 6c 70 69 6e 65 6a 73 22 5d 2c 7b 34 33 30 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 43 6e 7d 29 3b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 3d 21 31 2c 6c 3d 21 31 2c 63 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 69 6e 63 6c 75 64 65 73 28 65 29 7c 7c 63 2e 70 75 73 68 28 65 29 3b 6c 7c 7c 73 7c 7c 28 73 3d 21 30 2c 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 64 29 29 7d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b Data Ascii: "use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["alpinejs"],{4306:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Cn});var r,i,o,a,s=!1,l=!1,c=[];function u(e){!function(e){c.includes(e)\|\|c.push(e);l\|\|s\|\|(s=!0,queueMicrotask(d))}(e)}function f(e){
2024-10-31 16:23:20 UTC	9022	IN	Data Raw: 53 74 79 6c 65 73 3d 4e 65 28 65 2c 74 29 7d 28 65 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6c 61 73 73 22 3a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 78 5f 75 6e 64 6f 41 64 64 65 64 43 6c 61 73 73 65 73 26 26 65 2e 5f 78 5f 75 6e 64 6f 41 64 64 65 64 43 6c 61 73 73 65 73 28 29 3b 65 2e 5f 78 5f 75 6e 64 6f 41 64 64 65 64 43 6c 61 73 73 65 73 3d 4d 65 28 65 2c 74 29 7d 28 65 2c 6e 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 5b 6e 75 6c 6c 2c 76 6f 69 64 20 30 2c 21 31 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 5b 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 2c 22 61 72 69 61 2d 65 Data Ascii: Styles=Ne(e,t)}(e,n);break;case"class":!function(e,t){e._x_undoAddedClasses&&e._x_undoAddedClasses();e._x_undoAddedClasses=Me(e,t)}(e,n);break;default:!function(e,t,n){[null,void 0,!1].includes(n)&&function(e){return!["aria-pressed","aria-checked","aria-e
2024-10-31 16:23:20 UTC	14300	IN	Data Raw: 7d 2c 68 61 73 3a 56 74 2c 61 64 64 3a 55 74 2c 73 65 74 3a 48 74 2c 64 65 6c 65 74 65 3a 5a 74 2c 63 6c 65 61 72 3a 59 74 2c 66 6f 72 45 61 63 68 3a 4a 74 28 21 31 2c 21 31 29 7d 2c 65 6e 3d 7b 67 65 74 28 65 29 7b 72 65 74 75 72 6e 20 46 74 28 74 68 69 73 2c 65 2c 21 31 2c 21 30 29 7d 2c 67 65 74 20 73 69 7a 65 28 29 7b 72 65 74 75 72 6e 20 4b 74 28 74 68 69 73 29 7d 2c 68 61 73 3a 56 74 2c 61 64 64 3a 55 74 2c 73 65 74 3a 48 74 2c 64 65 6c 65 74 65 3a 5a 74 2c 63 6c 65 61 72 3a 59 74 2c 66 6f 72 45 61 63 68 3a 4a 74 28 21 31 2c 21 30 29 7d 2c 74 6e 3d 7b 67 65 74 28 65 29 7b 72 65 74 75 72 6e 20 46 74 28 74 68 69 73 2c 65 2c 21 30 29 7d 2c 67 65 74 20 73 69 7a 65 28 29 7b 72 65 74 75 72 6e 20 4b 74 28 74 68 69 73 2c 21 30 29 7d 2c 68 61 73 28 65 29 7b Data Ascii: },has:Vt,add:Ut,set:Ht,delete:Zt,clear:Yt,forEach:Jt(!1,!1)},en={get(e){return Ft(this,e,!1,!0)},get size(){return Kt(this)},has:Vt,add:Ut,set:Ht,delete:Zt,clear:Yt,forEach:Jt(!1,!0)},tn={get(e){return Ft(this,e,!0)},get size(){return Kt(this,!0)},has(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49748	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	571	OUT	GET /build/js/aos.b6c478a457c55ae32cb7.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:20 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13755 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-35bb" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 80a51c83bb9479e2a3aa1ea59b366458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: klWH7-h7Qyq1QMsHQ1wXOGPBSzrd5tZNwJEn3C50ONRq9E3Daoo_cg==
2024-10-31 16:23:20 UTC	13755	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 6f 73 22 5d 2c 7b 32 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 3f 6e 2e 67 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 2c 6f 3d 4e 61 4e 2c 69 3d 22 5b 6f 62 6a 65 63 74 20 53 79 6d 62 6f 6c Data Ascii: (self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["aos"],{2711:function(e,t,n){e.exports=function(){"use strict";var e="undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:{},t="Expected a function",o=NaN,i="[object Symbol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49750	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	574	OUT	GET /build/js/swiper.da46e2bb5a5b941c6f33.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:20 UTC	667	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 150668 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-24c8c" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 83f1b8f73f37458f38e2ee1fc0b9e68c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: f7A3EGgCoNyvMYBHmL6MrJLEKIaiUSS3S6Gttn7yTjOwzCODfDWDQA==
2024-10-31 16:23:20 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 77 69 70 65 72 22 5d 2c 7b 39 34 32 31 3a 28 65 2c 74 2c 61 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 7b 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 Data Ascii: "use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["swiper"],{9421:(e,t,a)=>{function i(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function r(e,t){void 0===e&&(e={}),void 0===t&&(t={}),Object.keys(t)
2024-10-31 16:23:20 UTC	15790	IN	Data Raw: 70 3d 73 2e 6d 61 74 63 68 28 2f 28 41 6e 64 72 6f 69 64 29 3b 3f 5b 5c 73 5c 2f 5d 2b 28 5b 5c 64 2e 5d 2b 29 3f 2f 29 2c 63 3d 73 2e 6d 61 74 63 68 28 2f 28 69 50 61 64 29 2e 2a 4f 53 5c 73 28 5b 5c 64 5f 5d 2b 29 2f 29 2c 75 3d 73 2e 6d 61 74 63 68 28 2f 28 69 50 6f 64 29 28 2e 2a 4f 53 5c 73 28 5b 5c 64 5f 5d 2b 29 29 3f 2f 29 2c 68 3d 21 63 26 26 73 2e 6d 61 74 63 68 28 2f 28 69 50 68 6f 6e 65 5c 73 4f 53 7c 69 4f 53 29 5c 73 28 5b 5c 64 5f 5d 2b 29 2f 29 2c 76 3d 22 57 69 6e 33 32 22 3d 3d 3d 72 2c 66 3d 22 4d 61 63 49 6e 74 65 6c 22 3d 3d 3d 72 3b 72 65 74 75 72 6e 21 63 26 26 66 26 26 61 2e 74 6f 75 63 68 26 26 5b 22 31 30 32 34 78 31 33 36 36 22 2c 22 31 33 36 36 78 31 30 32 34 22 2c 22 38 33 34 78 31 31 39 34 22 2c 22 31 31 39 34 78 38 33 34 22 Data Ascii: p=s.match(/(Android);?[\s\/]+([\d.]+)?/),c=s.match(/(iPad).OS\s([\d_]+)/),u=s.match(/(iPod)(.OS\s([\d_]+))?/),h=!c&&s.match(/(iPhone\sOS\|iOS)\s([\d_]+)/),v="Win32"===r,f="MacIntel"===r;return!c&&f&&a.touch&&["1024x1366","1366x1024","834x1194","1194x834"
2024-10-31 16:23:20 UTC	16384	IN	Data Raw: 61 6d 73 2c 69 3d 74 2e 72 74 6c 54 72 61 6e 73 6c 61 74 65 2c 72 3d 74 2e 74 72 61 6e 73 6c 61 74 65 2c 73 3d 74 2e 24 77 72 61 70 70 65 72 45 6c 3b 69 66 28 61 2e 76 69 72 74 75 61 6c 54 72 61 6e 73 6c 61 74 65 29 72 65 74 75 72 6e 20 69 3f 2d 72 3a 72 3b 69 66 28 61 2e 63 73 73 4d 6f 64 65 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 6e 3d 43 28 73 5b 30 5d 2c 65 29 3b 72 65 74 75 72 6e 20 69 26 26 28 6e 3d 2d 6e 29 2c 6e 7c 7c 30 7d 2c 73 65 74 54 72 61 6e 73 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 69 3d 61 2e 72 74 6c 54 72 61 6e 73 6c 61 74 65 2c 72 3d 61 2e 70 61 72 61 6d 73 2c 73 3d 61 2e 24 77 72 61 70 70 65 72 45 6c 2c 6e 3d 61 2e 77 72 61 70 70 65 72 45 6c 2c 6f 3d 61 2e 70 72 6f 67 72 65 73 73 2c Data Ascii: ams,i=t.rtlTranslate,r=t.translate,s=t.$wrapperEl;if(a.virtualTranslate)return i?-r:r;if(a.cssMode)return r;var n=C(s[0],e);return i&&(n=-n),n\|\|0},setTranslate:function(e,t){var a=this,i=a.rtlTranslate,r=a.params,s=a.$wrapperEl,n=a.wrapperEl,o=a.progress,
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 2e 73 65 74 54 72 61 6e 73 6c 61 74 65 28 69 2e 63 75 72 72 65 6e 74 54 72 61 6e 73 6c 61 74 65 29 29 7d 7d 7d 7d 7d 65 6c 73 65 20 69 2e 73 74 61 72 74 4d 6f 76 69 6e 67 26 26 69 2e 69 73 53 63 72 6f 6c 6c 69 6e 67 26 26 61 2e 65 6d 69 74 28 22 74 6f 75 63 68 4d 6f 76 65 4f 70 70 6f 73 69 74 65 22 2c 6c 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 74 2e 74 6f 75 63 68 45 76 65 6e 74 73 44 61 74 61 2c 69 3d 74 2e 70 61 72 61 6d 73 2c 72 3d 74 2e 74 6f 75 63 68 65 73 2c 73 3d 74 2e 72 74 6c 54 72 61 6e 73 6c 61 74 65 2c 6e 3d 74 2e 24 77 72 61 70 70 65 72 45 6c 2c 6f 3d 74 2e 73 6c 69 64 65 73 47 72 69 64 2c 6c 3d 74 2e 73 6e 61 70 47 72 69 64 3b 69 66 28 74 2e 65 6e 61 62 6c 65 64 29 7b 76 61 72 20 64 3d 65 3b Data Ascii: .setTranslate(i.currentTranslate))}}}}}else i.startMoving&&i.isScrolling&&a.emit("touchMoveOpposite",l)}}function U(e){var t=this,a=t.touchEventsData,i=t.params,r=t.touches,s=t.rtlTranslate,n=t.$wrapperEl,o=t.slidesGrid,l=t.snapGrid;if(t.enabled){var d=e;
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 3d 6e 65 77 20 41 72 72 61 79 28 69 29 2c 73 3d 30 3b 73 3c 69 3b 73 2b 2b 29 72 5b 73 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 3b 69 66 28 31 3d 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 72 5b 30 5d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 22 4f 62 6a 65 63 74 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 5b 30 5d 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3f 61 3d 72 5b 30 5d 3a 28 74 3d 72 5b 30 5d 2c 61 3d 72 5b 31 5d 29 2c 61 7c 7c 28 61 3d 7b 7d 29 2c 61 3d 7a 28 7b 7d 2c 61 29 2c 74 26 26 21 61 2e 65 6c 26 26 28 61 2e 65 6c 3d 74 29 2c 61 2e 65 6c 26 26 45 28 61 2e 65 6c 29 2e 6c 65 6e 67 74 68 3e 31 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 45 28 61 2e 65 6c 29 2e 65 61 63 68 28 28 Data Ascii: =new Array(i),s=0;s<i;s++)r[s]=arguments[s];if(1===r.length&&r[0].constructor&&"Object"===Object.prototype.toString.call(r[0]).slice(8,-1)?a=r[0]:(t=r[0],a=r[1]),a\|\|(a={}),a=z({},a),t&&!a.el&&(a.el=t),a.el&&E(a.el).length>1){var n=[];return E(a.el).each((
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 2e 75 70 64 61 74 65 53 6c 69 64 65 73 43 6c 61 73 73 65 73 28 29 2c 61 2e 70 61 72 61 6d 73 2e 66 72 65 65 4d 6f 64 65 53 74 69 63 6b 79 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 2e 6d 6f 75 73 65 77 68 65 65 6c 2e 74 69 6d 65 6f 75 74 29 2c 61 2e 6d 6f 75 73 65 77 68 65 65 6c 2e 74 69 6d 65 6f 75 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 66 3d 61 2e 6d 6f 75 73 65 77 68 65 65 6c 2e 72 65 63 65 6e 74 57 68 65 65 6c 45 76 65 6e 74 73 3b 66 2e 6c 65 6e 67 74 68 3e 3d 31 35 26 26 66 2e 73 68 69 66 74 28 29 3b 76 61 72 20 6d 3d 66 2e 6c 65 6e 67 74 68 3f 66 5b 66 2e 6c 65 6e 67 74 68 2d 31 5d 3a 76 6f 69 64 20 30 2c 67 3d 66 5b 30 5d 3b 69 66 28 66 2e 70 75 73 68 28 64 29 2c 6d 26 26 28 64 2e 64 65 6c 74 61 3e 6d 2e 64 65 6c 74 61 7c 7c 64 2e 64 69 72 65 Data Ascii: .updateSlidesClasses(),a.params.freeModeSticky){clearTimeout(a.mousewheel.timeout),a.mousewheel.timeout=void 0;var f=a.mousewheel.recentWheelEvents;f.length>=15&&f.shift();var m=f.length?f[f.length-1]:void 0,g=f[0];if(f.push(d),m&&(d.delta>m.delta\|\|d.dire
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 72 2d 70 61 72 61 6c 6c 61 78 2d 79 22 29 2c 6c 3d 69 2e 61 74 74 72 28 22 64 61 74 61 2d 73 77 69 70 65 72 2d 70 61 72 61 6c 6c 61 78 2d 73 63 61 6c 65 22 29 2c 64 3d 69 2e 61 74 74 72 28 22 64 61 74 61 2d 73 77 69 70 65 72 2d 70 61 72 61 6c 6c 61 78 2d 6f 70 61 63 69 74 79 22 29 3b 69 66 28 6e 7c 7c 6f 3f 28 6e 3d 6e 7c 7c 22 30 22 2c 6f 3d 6f 7c 7c 22 30 22 29 3a 74 68 69 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 28 29 3f 28 6e 3d 73 2c 6f 3d 22 30 22 29 3a 28 6f 3d 73 2c 6e 3d 22 30 22 29 2c 6e 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 3d 30 3f 70 61 72 73 65 49 6e 74 28 6e 2c 31 30 29 2a 74 2a 72 2b 22 25 22 3a 6e 2a 74 2a 72 2b 22 70 78 22 2c 6f 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 3d 30 3f 70 61 72 73 65 49 6e 74 28 6f 2c 31 30 29 Data Ascii: r-parallax-y"),l=i.attr("data-swiper-parallax-scale"),d=i.attr("data-swiper-parallax-opacity");if(n\|\|o?(n=n\|\|"0",o=o\|\|"0"):this.isHorizontal()?(n=s,o="0"):(o=s,n="0"),n=n.indexOf("%")>=0?parseInt(n,10)tr+"%":ntr+"px",o=o.indexOf("%")>=0?parseInt(o,10)
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 6c 61 7a 79 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 29 3a 45 28 65 29 2c 69 3d 61 5b 30 5d 3d 3d 3d 65 2c 72 3d 69 3f 65 2e 69 6e 6e 65 72 57 69 64 74 68 3a 61 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 73 3d 69 3f 65 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 61 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 6e 3d 74 2e 24 65 6c 2e 6f 66 66 73 65 74 28 29 2c 6f 3d 21 31 3b 74 2e 72 74 6c 54 72 61 6e 73 6c 61 74 65 26 26 28 6e 2e 6c 65 66 74 2d 3d 74 2e 24 65 6c 5b 30 5d 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 3b 66 6f 72 28 76 61 72 20 64 3d 5b 5b 6e 2e 6c 65 66 74 2c 6e 2e 74 6f 70 5d 2c 5b 6e 2e 6c 65 66 74 2b 74 2e 77 69 64 74 68 2c 6e 2e 74 6f 70 5d 2c 5b 6e 2e 6c 65 66 74 2c 6e 2e 74 6f 70 2b 74 2e 68 65 69 67 68 74 5d 2c 5b 6e 2e 6c 65 Data Ascii: lazy.scrollingElement):E(e),i=a[0]===e,r=i?e.innerWidth:a[0].offsetWidth,s=i?e.innerHeight:a[0].offsetHeight,n=t.$el.offset(),o=!1;t.rtlTranslate&&(n.left-=t.$el[0].scrollLeft);for(var d=[[n.left,n.top],[n.left+t.width,n.top],[n.left,n.top+t.height],[n.le
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 29 2c 70 2e 73 6c 69 64 65 53 68 61 64 6f 77 73 29 7b 76 61 72 20 53 3d 63 3f 66 2e 66 69 6e 64 28 22 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 6c 65 66 74 22 29 3a 66 2e 66 69 6e 64 28 22 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 74 6f 70 22 29 2c 4d 3d 63 3f 66 2e 66 69 6e 64 28 22 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 74 22 29 3a 66 2e 66 69 6e 64 28 22 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 62 6f 74 74 6f 6d 22 29 3b 30 3d 3d 3d 53 2e 6c 65 6e 67 74 68 26 26 28 53 3d 45 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 27 2b 28 63 3f 22 6c 65 66 74 22 3a 22 74 6f 70 22 29 2b 27 22 3e 3c 2f 64 69 76 Data Ascii: ),p.slideShadows){var S=c?f.find(".swiper-slide-shadow-left"):f.find(".swiper-slide-shadow-top"),M=c?f.find(".swiper-slide-shadow-right"):f.find(".swiper-slide-shadow-bottom");0===S.length&&(S=E('<div class="swiper-slide-shadow-'+(c?"left":"top")+'"></div
2024-10-31 16:23:21 UTC	3806	IN	Data Raw: 2c 65 2e 61 75 74 6f 70 6c 61 79 2e 61 74 74 61 63 68 4d 6f 75 73 65 45 76 65 6e 74 73 28 29 29 7d 2c 62 65 66 6f 72 65 54 72 61 6e 73 69 74 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 65 2e 61 75 74 6f 70 6c 61 79 2e 72 75 6e 6e 69 6e 67 26 26 28 61 7c 7c 21 65 2e 70 61 72 61 6d 73 2e 61 75 74 6f 70 6c 61 79 2e 64 69 73 61 62 6c 65 4f 6e 49 6e 74 65 72 61 63 74 69 6f 6e 3f 65 2e 61 75 74 6f 70 6c 61 79 2e 70 61 75 73 65 28 74 29 3a 65 2e 61 75 74 6f 70 6c 61 79 2e 73 74 6f 70 28 29 29 7d 2c 73 6c 69 64 65 72 46 69 72 73 74 4d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 75 74 6f 70 6c 61 79 2e 72 75 6e 6e 69 6e 67 26 26 28 65 2e 70 61 72 61 6d 73 2e 61 75 74 6f 70 6c 61 79 2e 64 69 73 61 62 6c 65 4f 6e 49 6e 74 Data Ascii: ,e.autoplay.attachMouseEvents())},beforeTransitionStart:function(e,t,a){e.autoplay.running&&(a\|\|!e.params.autoplay.disableOnInteraction?e.autoplay.pause(t):e.autoplay.stop())},sliderFirstMove:function(e){e.autoplay.running&&(e.params.autoplay.disableOnInt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49753	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	388	OUT	GET /build/js/app.d1a1183ef278c4f9a168.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:20 UTC	679	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 559903 Connection: close Server: nginx Date: Wed, 30 Oct 2024 05:02:34 GMT Last-Modified: Tue, 29 Oct 2024 10:02:07 GMT ETag: "6720b29f-88b1f" Expires: Wed, 06 Nov 2024 05:02:34 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c3d7a569db567dde78a645781f9949a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: dgyaozfrMPE77om0EDuF05dQ91mTJKMN7dsencWr-dxhtCbWkZSWdw== Age: 127246
2024-10-31 16:23:20 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 70 70 22 2c 22 72 65 76 69 65 77 22 5d 2c 7b 39 36 36 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 36 30 39 29 7d 2c 35 34 34 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 38 36 37 29 2c 64 3d 6e 28 36 30 32 36 29 2c 6f 3d 6e 28 34 33 37 32 29 2c 73 3d 6e 28 35 33 32 37 29 2c 69 3d 6e 28 34 30 39 37 29 2c 61 3d 6e 28 34 31 30 39 29 2c 6c 3d 6e 28 37 39 38 35 29 2c 75 3d 6e 28 35 30 36 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d Data Ascii: (self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["app","review"],{9669:(e,t,n)=>{e.exports=n(1609)},5448:(e,t,n)=>{"use strict";var r=n(4867),d=n(6026),o=n(4372),s=n(5327),i=n(4097),a=n(4109),l=n(7985),u=n(5061);e.exports=function(e){return new Prom
2024-10-31 16:23:20 UTC	16384	IN	Data Raw: 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 72 28 22 43 6f 75 6e 74 72 79 20 73 74 61 74 69 73 74 69 63 73 20 61 72 65 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 62 75 69 6c 64 20 6f 66 20 42 72 6f 77 73 65 72 73 6c 69 73 74 22 29 7d 2c 6c 6f 61 64 46 65 61 74 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 72 28 22 53 75 70 70 6f 72 74 73 20 71 75 65 72 69 65 73 20 61 72 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 62 75 69 6c 64 20 6f 66 20 42 72 6f 77 73 65 72 73 6c 69 73 74 22 29 7d 2c 63 75 72 72 65 6e 74 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 28 5b 22 6d 61 69 6e 74 61 69 6e 65 64 20 6e 6f 64 Data Ascii: (){throw new r("Country statistics are not supported in client-side build of Browserslist")},loadFeature:function(){throw new r("Supports queries are not available in client-side build of Browserslist")},currentNode:function(e,t){return e(["maintained nod
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 74 2e 76 65 72 73 69 6f 6e 73 5b 6e 5d 3b 69 66 28 6f 26 26 2d 31 21 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 29 66 6f 72 28 76 61 72 20 73 3d 6f 2e 73 70 6c 69 74 28 22 2d 22 29 2c 69 3d 30 3b 69 3c 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 52 2e 76 65 72 73 69 6f 6e 41 6c 69 61 73 65 73 5b 65 5d 5b 73 5b 69 5d 5d 3d 6f 7d 7d 52 2e 76 65 72 73 69 6f 6e 41 6c 69 61 73 65 73 2e 6f 70 5f 6d 6f 62 5b 35 39 5d 3d 22 35 38 22 2c 52 2e 6e 6f 64 65 56 65 72 73 69 6f 6e 73 3d 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 65 72 73 69 6f 6e 7d 29 29 7d 28 29 2c 65 2e 65 78 70 6f 72 74 73 3d 52 7d 2c 35 37 32 33 3a 65 3d 3e 7b 76 61 72 20 74 3d 2f 5e 5c 73 2b 61 6e 64 5c 73 2b Data Ascii: gth;n++){var o=t.versions[n];if(o&&-1!==o.indexOf("-"))for(var s=o.split("-"),i=0;i<s.length;i++)R.versionAliases[e][s[i]]=o}}R.versionAliases.op_mob[59]="58",R.nodeVersions=r.map((function(e){return e.version}))}(),e.exports=R},5723:e=>{var t=/^\s+and\s+
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 36 36 39 39 33 39 32 30 30 7d 7d 2c 4d 3a 7b 41 3a 7b 63 3a 2e 32 38 36 36 30 36 7d 2c 42 3a 22 6d 6f 7a 22 2c 43 3a 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 Data Ascii: 669939200}},M:{A:{c:.286606},B:"moz",C:["","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 67 5d 3a 7b 7d 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 75 28 65 2c 67 29 7d 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 3a 72 2c 67 65 74 3a 64 2c 68 61 73 3a 6f 2c 65 6e 66 6f 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 65 29 3f 64 28 65 29 3a 72 28 65 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 69 66 28 21 61 28 74 29 7c 7c 28 6e 3d 64 28 74 29 29 2e 74 79 70 65 21 3d 3d 65 29 74 68 72 6f 77 20 24 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 65 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 6e 7d 7d 7d 7d 2c 37 36 35 39 3a 28 65 Data Ascii: g]:{}},o=function(e){return u(e,g)}}e.exports={set:r,get:d,has:o,enforce:function(e){return o(e)?d(e):r(e,{})},getterFor:function(e){return function(t){var n;if(!a(t)\|\|(n=d(t)).type!==e)throw $("Incompatible receiver, "+e+" required");return n}}}},7659:(e
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: d0 bd d0 b0 20 d0 b8 20 d0 a5 d0 b5 d1 80 d1 86 d0 b5 d0 b3 d0 be d0 b2 d0 b8 d0 bd d0 b0 29 22 2c 22 62 61 22 2c 22 33 38 37 22 5d 2c 5b 22 42 6f 74 73 77 61 6e 61 22 2c 22 62 77 22 2c 22 32 36 37 22 5d 2c 5b 22 42 72 61 7a 69 6c 20 28 42 72 61 73 69 6c 29 22 2c 22 62 72 22 2c 22 35 35 22 5d 2c 5b 22 42 72 69 74 69 73 68 20 49 6e 64 69 61 6e 20 4f 63 65 61 6e 20 54 65 72 72 69 74 6f 72 79 22 2c 22 69 6f 22 2c 22 32 34 36 22 5d 2c 5b 22 42 72 69 74 69 73 68 20 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 22 2c 22 76 67 22 2c 22 31 22 2c 31 31 2c 5b 22 32 38 34 22 5d 5d 2c 5b 22 42 72 75 6e 65 69 22 2c 22 62 6e 22 2c 22 36 37 33 22 5d 2c 5b 22 42 75 6c 67 61 72 69 61 20 28 d0 91 d1 8a d0 bb d0 b3 d0 b0 d1 80 d0 b8 d1 8f 29 22 2c 22 62 67 22 2c 22 33 35 39 22 Data Ascii: )","ba","387"],["Botswana","bw","267"],["Brazil (Brasil)","br","55"],["British Indian Ocean Territory","io","246"],["British Virgin Islands","vg","1",11,["284"]],["Brunei","bn","673"],["Bulgaria ()","bg","359"
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 6f 75 6e 74 72 79 3d 74 68 69 73 2e 70 72 65 66 65 72 72 65 64 43 6f 75 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 70 72 65 66 65 72 72 65 64 43 6f 75 6e 74 72 69 65 73 5b 30 5d 2e 69 73 6f 32 3a 74 68 69 73 2e 63 6f 75 6e 74 72 69 65 73 5b 30 5d 2e 69 73 6f 32 2c 6e 7c 7c 74 68 69 73 2e 5f 73 65 74 46 6c 61 67 28 74 68 69 73 2e 64 65 66 61 75 6c 74 43 6f 75 6e 74 72 79 29 29 2c 6e 7c 7c 69 7c 7c 61 7c 7c 6c 7c 7c 28 74 68 69 73 2e 74 65 6c 49 6e 70 75 74 2e 76 61 6c 75 65 3d 22 2b 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 73 65 6c 65 63 74 65 64 43 6f 75 6e 74 72 79 44 61 74 61 2e 64 69 61 6c 43 6f 64 65 29 29 29 2c 6e 26 26 74 68 69 73 2e 5f 75 70 64 61 74 65 56 61 6c 46 72 6f 6d 4e 75 6d 62 65 72 28 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 69 Data Ascii: ountry=this.preferredCountries.length?this.preferredCountries[0].iso2:this.countries[0].iso2,n\|\|this._setFlag(this.defaultCountry)),n\|\|i\|\|a\|\|l\|\|(this.telInput.value="+".concat(this.selectedCountryData.dialCode))),n&&this._updateValFromNumber(n)}},{key:"_i
2024-10-31 16:23:21 UTC	13584	IN	Data Raw: 2c 6f 29 2c 63 26 26 64 28 72 2c 63 29 2c 6e 7d 28 29 3b 6f 2e 67 65 74 43 6f 75 6e 74 72 79 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 22 68 61 6e 64 6c 65 55 74 69 6c 73 22 29 2c 74 26 26 74 28 29 7d 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 22 72 65 6a 65 63 74 55 74 69 6c 73 53 63 72 69 70 74 50 72 6f 6d 69 73 65 22 29 2c 6e 26 26 6e 28 29 7d 2c 72 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 74 69 2d 6c 6f 61 64 2d 75 74 69 6c 73 22 2c 72 2e 61 73 Data Ascii: ,o),c&&d(r,c),n}();o.getCountryData=function(){return t};var f=function(e,t,n){var r=document.createElement("script");r.onload=function(){u("handleUtils"),t&&t()},r.onerror=function(){u("rejectUtilsScriptPromise"),n&&n()},r.className="iti-load-utils",r.as
2024-10-31 16:23:21 UTC	1576	IN	Data Raw: 22 2c 2c 2c 2c 22 39 30 30 31 32 33 22 2c 2c 2c 5b 36 5d 5d 2c 5b 2c 2c 22 38 30 38 5b 31 2d 39 5d 5c 5c 64 5c 5c 64 22 2c 2c 2c 2c 22 38 30 38 31 32 33 22 2c 2c 2c 5b 36 5d 5d 2c 5b 2c 2c 22 37 30 30 5b 32 2d 39 5d 5c 5c 64 7b 34 7d 22 2c 2c 2c 2c 22 37 30 30 32 31 32 33 34 22 2c 2c 2c 5b 38 5d 5d 2c 5b 2c 2c 2c 2c 2c 2c 2c 2c 2c 5b 2d 31 5d 5d 2c 22 41 4c 22 2c 33 35 35 2c 22 30 30 22 2c 22 30 22 2c 2c 2c 22 30 22 2c 2c 2c 2c 5b 5b 2c 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 2c 34 7d 29 22 2c 22 24 31 20 24 32 22 2c 5b 22 38 30 7c 39 22 5d 2c 22 30 24 31 22 5d 2c 5b 2c 22 28 5c 5c 64 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 34 5b 32 2d 36 5d 22 5d 2c 22 30 24 31 22 5d 2c 5b 2c 22 28 5c 5c 64 7b Data Ascii: ",,,,"900123",,,[6]],[,,"808[1-9]\\d\\d",,,,"808123",,,[6]],[,,"700[2-9]\\d{4}",,,,"70021234",,,[8]],[,,,,,,,,,[-1]],"AL",355,"00","0",,,"0",,,,[[,"(\\d{3})(\\d{3,4})","$1 $2",["80\|9"],"0$1"],[,"(\\d)(\\d{3})(\\d{4})","$1 $2 $3",["4[2-6]"],"0$1"],[,"(\\d{
2024-10-31 16:23:21 UTC	16384	IN	Data Raw: 64 29 5c 5c 64 7b 38 7d 7c 5b 32 33 36 38 5d 5c 5c 64 7b 39 7d 22 2c 2c 2c 2c 2c 2c 2c 5b 31 30 2c 31 31 5d 2c 5b 36 2c 37 2c 38 5d 5d 2c 5b 2c 2c 22 33 38 38 38 5b 30 31 33 2d 39 5d 5c 5c 64 7b 35 7d 7c 33 28 3f 3a 37 28 3f 3a 31 5b 31 35 5d 7c 38 31 29 7c 38 28 3f 3a 32 31 7c 34 5b 31 36 5d 7c 36 39 7c 39 5b 31 32 5d 29 29 5b 34 36 5d 5c 5c 64 7b 35 7d 7c 28 3f 3a 32 39 28 3f 3a 35 34 7c 36 36 29 7c 33 28 3f 3a 37 28 3f 3a 35 35 7c 37 37 29 7c 38 36 35 29 29 5b 32 2d 38 5d 5c 5c 64 7b 35 7d 7c 28 3f 3a 32 28 3f 3a 32 28 3f 3a 32 5b 35 39 5d 7c 34 34 7c 35 32 29 7c 33 28 3f 3a 32 36 7c 34 34 29 7c 34 37 33 7c 39 28 3f 3a 5b 30 37 5d 32 7c 32 5b 32 36 5d 7c 33 34 7c 34 36 29 29 7c 33 33 32 37 29 5b 34 35 5d 5c 5c 64 7b 35 7d 7c 28 3f 3a 32 28 3f 3a 32 38 Data Ascii: d)\\d{8}\|[2368]\\d{9}",,,,,,,[10,11],[6,7,8]],[,,"3888[013-9]\\d{5}\|3(?:7(?:1[15]\|81)\|8(?:21\|4[16]\|69\|9[12]))[46]\\d{5}\|(?:29(?:54\|66)\|3(?:7(?:55\|77)\|865))[2-8]\\d{5}\|(?:2(?:2(?:2[59]\|44\|52)\|3(?:26\|44)\|473\|9(?:[07]2\|2[26]\|34\|46))\|3327)[45]\\d{5}\|(?:2(?:28

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49752	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	379	OUT	GET /build/img/static/user-4.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:20 UTC	635	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3434 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:18 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-d6a" Expires: Thu, 07 Nov 2024 16:23:18 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 033f456f54ceb7135f57b018b334dfdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: P39PzBk3I2FSiGqrgXfbNddC78L1t748IlP_xNiCQdR1zP-b2OXsvw== Age: 2
2024-10-31 16:23:20 UTC	3434	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 09 06 08 00 04 05 03 0a ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 00 03 04 06 07 02 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 7f 89 0f 61 c9 Data Ascii: JFIFCCCCa

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49755	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162320Z-17fbfdc98bbwj6cp6df5812g4s0000000b9g000000005w0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162320Z-17fbfdc98bbjwdgn5g1mr5hcxn00000007q0000000004wch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162320Z-17fbfdc98bb9xxzfyggrfrbqmw0000000950000000001knm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162320Z-17fbfdc98bbfmg5wrf1ctcuuun0000000a70000000003abx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:20 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: b526e42e-401e-005b-10a3-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162320Z-17fbfdc98bb9cv5m0pampz446s0000000950000000007hvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49760	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:21 UTC	379	OUT	GET /build/img/static/user-5.jpg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:21 UTC	635	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3600 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:19 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-e10" Expires: Thu, 07 Nov 2024 16:23:19 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 033f456f54ceb7135f57b018b334dfdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: 0DBqoDxH_55Prsb8FahkLeI53FZf6kepLrXbPPsTFZRIpKW_KyaT5w== Age: 2
2024-10-31 16:23:21 UTC	3600	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 43 00 43 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 07 08 00 06 09 03 04 05 0a ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 07 00 02 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 df ce ea 05 59 Data Ascii: JFIFCCCCY

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:21 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bb58e6ef-e01e-000c-4187-288e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162321Z-r1755647c665dwkwce4e7gadz00000000an0000000004k3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:21 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:21 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162321Z-r1755647c66hlhp26bqv22ant400000009v0000000009pf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:21 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49762	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:21 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 898be286-601e-003d-2804-276f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162321Z-17fbfdc98bb9xxzfyggrfrbqmw000000093g000000003x2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:21 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162321Z-r1755647c66hlhp26bqv22ant400000009y0000000005stz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:21 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162321Z-17fbfdc98bb2xwflv0w9dps90c0000000ar0000000001620 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49768	206.189.191.166	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:22 UTC	915	OUT	GET /build/img/static/trustpilot-rating.png HTTP/1.1 Host: travelbusinessclass.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
2024-10-31 16:23:22 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:22 GMT Content-Type: image/png Content-Length: 2052 Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT Connection: close ETag: "67235597-804" Expires: Thu, 07 Nov 2024 16:23:22 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-10-31 16:23:22 UTC	2052	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 de 00 00 00 2a 08 06 00 00 00 dc 64 e5 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 99 49 44 41 54 78 01 ed 9d 7b 50 54 55 1c c7 bf 0b 0b c8 4b de 08 a9 a5 82 88 a4 94 23 a6 69 93 1a 9a 6f 2d cd d7 e4 38 cd 34 4e f5 47 33 8e 53 e6 2b b3 87 39 63 33 59 d3 a4 e6 94 a5 a6 a6 36 99 9a f8 ca 67 25 22 f2 12 10 90 87 0a 2c 2f 01 61 97 f7 c2 d2 39 37 25 e4 b9 cf 73 77 e1 f7 61 18 f6 de dd 85 dd cf bd bf 73 7f e7 77 ce 59 14 88 5a d7 0c 6b 67 e6 e7 8a 96 db 27 d7 6e 82 42 f1 11 ac 9d e6 e6 8f 31 6b cb a6 96 6d 5b f0 cc 21 d7 42 b0 03 41 10 c2 a1 c0 23 08 19 a0 c0 23 08 19 a0 c0 23 08 19 a0 c0 Data Ascii: PNGIHDR*dpHYssRGBgAMAaIDATx{PTUK#io-84NG3S+9c3Y6g%",/a97%swaswYZkg'nB1km[!BA###

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:22 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: c80232df-501e-00a3-48ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162322Z-r1755647c664nptf1txg2psens00000008h0000000009w4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:22 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162323Z-17fbfdc98bbtf4jxpev5grnmyw00000009z00000000052hk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:22 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162323Z-17fbfdc98bbbnx4ldgze4de5zs00000008fg000000000um7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:22 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:23 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2d06c87c-b01e-0021-139b-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162323Z-17fbfdc98bbtwz55a8v24wfkdw0000000axg0000000066fk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:23 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:22 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162323Z-17fbfdc98bbl4k6fkakdqzw75c00000009d0000000006xnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49775	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:23 UTC	388	OUT	GET /build/js/aos.b6c478a457c55ae32cb7.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:23 UTC	672	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13755 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-35bb" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 033f456f54ceb7135f57b018b334dfdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: CPXrrWCAJoqSYrpQUup1zOkEN4FxI1jK1pdabYCmtkuZiNJoX138LA== Age: 3
2024-10-31 16:23:23 UTC	13755	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 6f 73 22 5d 2c 7b 32 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 3f 6e 2e 67 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 74 3d 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 2c 6f 3d 4e 61 4e 2c 69 3d 22 5b 6f 62 6a 65 63 74 20 53 79 6d 62 6f 6c Data Ascii: (self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["aos"],{2711:function(e,t,n){e.exports=function(){"use strict";var e="undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:{},t="Expected a function",o=NaN,i="[object Symbol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49776	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:23 UTC	387	OUT	GET /build/img/svg/down-arrow-select.svg HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:23 UTC	660	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 294 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-126" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5869d8337913ed7453262c3cf9c9a9e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: cbNUTnmQajAWI27d2CKP6ax9FALDbFeOTCz1yWRf3jJOHcoebS5CDA== Age: 3
2024-10-31 16:23:23 UTC	294	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 64 65 66 73 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 41 39 34 45 43 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 2e 31 39 35 20 34 2e 38 36 32 63 2e 32 36 2d 2e 32 36 2e 36 38 33 2d 2e 32 36 2e 39 34 33 20 30 4c 38 20 39 2e 37 32 34 6c 34 2e 38 36 32 2d 34 2e 38 36 32 61 2e 36 36 37 2e 36 36 37 20 30 20 31 31 2e 39 34 33 2e 39 34 33 4c 38 2e 34 37 20 31 31 2e 31 33 38 61 2e 36 36 37 2e 36 36 37 20 30 20 30 31 2d 2e 39 34 32 20 30 4c 32 2e 31 39 35 20 35 2e 38 30 35 61 2e 36 36 37 2e 36 36 37 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 16 16"><defs/><path fill="#4A94EC" fill-rule="evenodd" d="M2.195 4.862c.26-.26.683-.26.943 0L8 9.724l4.862-4.862a.667.667 0 11.943.943L8.47 11.138a.667.667 0 01-.942 0L2.195 5.805a.667.667 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 1089ebf2-001e-0028-530d-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162324Z-r1755647c66xdwzbrg67s9avs40000000a6g000000006atg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162324Z-17fbfdc98bbds27mnhu6ftg4d8000000086g000000003ta5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 08308beb-701e-001e-43b0-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162324Z-r1755647c66bdj57qqnd8h5hp80000000ab0000000008th7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49783	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 45317ed5-a01e-0098-2767-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162324Z-r1755647c66gqcpzhw8q9nhnq00000000ah0000000006hsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:24 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 789f6287-101e-0065-355f-284088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162324Z-17fbfdc98bblzxqcphe71tp4qw000000052g000000007mgt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:24 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49792	206.189.191.166	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	900	OUT	GET /favicon/tbc/favicon.ico HTTP/1.1 Host: travelbusinessclass.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
2024-10-31 16:23:24 UTC	397	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:24 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Wed, 14 Dec 2022 17:00:58 GMT Connection: close Vary: Accept-Encoding ETag: "639a014a-3aee" Expires: Thu, 07 Nov 2024 16:23:24 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-10-31 16:23:24 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 19 8a 02 4f 19 8a 02 4f 19 8a 02 4f 19 8a 02 4f 19 8a 33 4f 19 8a 97 4f 19 8a de 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f Data Ascii: 00 %6 % h6(0` $OOOOO3OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49785	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	393	OUT	GET /build/js/alpinejs.bdf191b9eca6a35ac57f.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:24 UTC	672	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 39041 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-9881" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9dfbacf2c8a61beb17591bdaab142956.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: 8UC9dS1A8nQudVCiad2hU2iTJuMKrL45Lh0P4EDPBn8-nZaDKSsUkQ== Age: 4
2024-10-31 16:23:24 UTC	15712	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 6c 70 69 6e 65 6a 73 22 5d 2c 7b 34 33 30 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 43 6e 7d 29 3b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 3d 21 31 2c 6c 3d 21 31 2c 63 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 69 6e 63 6c 75 64 65 73 28 65 29 7c 7c 63 2e 70 75 73 68 28 65 29 3b 6c 7c 7c 73 7c 7c 28 73 3d 21 30 2c 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 64 29 29 7d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b Data Ascii: "use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["alpinejs"],{4306:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Cn});var r,i,o,a,s=!1,l=!1,c=[];function u(e){!function(e){c.includes(e)\|\|c.push(e);l\|\|s\|\|(s=!0,queueMicrotask(d))}(e)}function f(e){
2024-10-31 16:23:24 UTC	16384	IN	Data Raw: 64 6f 41 64 64 65 64 53 74 79 6c 65 73 3d 4e 65 28 65 2c 74 29 7d 28 65 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6c 61 73 73 22 3a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 78 5f 75 6e 64 6f 41 64 64 65 64 43 6c 61 73 73 65 73 26 26 65 2e 5f 78 5f 75 6e 64 6f 41 64 64 65 64 43 6c 61 73 73 65 73 28 29 3b 65 2e 5f 78 5f 75 6e 64 6f 41 64 64 65 64 43 6c 61 73 73 65 73 3d 4d 65 28 65 2c 74 29 7d 28 65 2c 6e 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 5b 6e 75 6c 6c 2c 76 6f 69 64 20 30 2c 21 31 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 5b 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 2c Data Ascii: doAddedStyles=Ne(e,t)}(e,n);break;case"class":!function(e,t){e._x_undoAddedClasses&&e._x_undoAddedClasses();e._x_undoAddedClasses=Me(e,t)}(e,n);break;default:!function(e,t,n){[null,void 0,!1].includes(n)&&function(e){return!["aria-pressed","aria-checked",
2024-10-31 16:23:25 UTC	6945	IN	Data Raw: 79 70 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 7b 6c 65 74 20 65 3d 74 2e 69 6e 63 6c 75 64 65 73 28 22 6e 75 6d 62 65 72 22 29 3f 6b 6e 28 6e 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 3a 6e 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 6e 2e 74 61 72 67 65 74 2e 63 68 65 63 6b 65 64 3f 72 2e 63 6f 6e 63 61 74 28 5b 65 5d 29 3a 72 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 28 74 3d 3d 65 29 29 29 7d 72 65 74 75 72 6e 20 6e 2e 74 61 72 67 65 74 2e 63 68 65 63 6b 65 64 7d 69 66 28 22 73 65 6c 65 63 74 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 6d 75 6c 74 69 70 6c 65 29 72 65 74 75 72 6e 20 74 2e 69 6e 63 6c 75 64 65 73 28 22 6e 75 6d 62 65 72 22 29 3f 41 72 72 61 79 Data Ascii: ype){if(Array.isArray(r)){let e=t.includes("number")?kn(n.target.value):n.target.value;return n.target.checked?r.concat([e]):r.filter((t=>!(t==e)))}return n.target.checked}if("select"===e.tagName.toLowerCase()&&e.multiple)return t.includes("number")?Array

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49789	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	594	OUT	GET /build/dynamic/static/css/2.1cb30e7f.chunk.css HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:25 UTC	651	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 21809 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:24 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-5531" Expires: Thu, 07 Nov 2024 16:23:24 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 666eddda46892ed48d8d771b6142ac24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: tk0GLVkTg130PP3RwC0V_NCWem-K0HE6_ka1BxyXf0_w-pzesaBDXg==
2024-10-31 16:23:25 UTC	15733	IN	Data Raw: 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 6f 70 70 65 72 5b 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 74 72 69 61 6e 67 6c 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 6f 70 70 65 72 5b 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 74 6f 70 5d 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 74 72 69 61 6e 67 6c 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 79 65 61 72 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 2e 72 65 61 63 Data Ascii: .react-datepicker-popper[data-placement^=bottom] .react-datepicker__triangle,.react-datepicker-popper[data-placement^=top] .react-datepicker__triangle,.react-datepicker__month-read-view--down-arrow,.react-datepicker__month-year-read-view--down-arrow,.reac
2024-10-31 16:23:25 UTC	6076	IN	Data Raw: 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 2d 69 6e 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d Data Ascii: epicker__month-text.react-datepicker__month--selected:hover,.react-datepicker__month-text.react-datepicker__quarter--in-range:hover,.react-datepicker__month-text.react-datepicker__quarter--selected:hover,.react-datepicker__quarter-text.react-datepicker__m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49788	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	597	OUT	GET /build/dynamic/static/css/main.afd7172b.chunk.css HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:25 UTC	623	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 52 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:24 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-34" Expires: Thu, 07 Nov 2024 16:23:24 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 891011d51eb2353ebe8601f5b6467070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: K3ZB5xnKLI4qRKfR77Azp7rhVA7efBuWS1yhyG6_hdJoMnkYTOSJmA==
2024-10-31 16:23:25 UTC	52	IN	Data Raw: 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6d 61 69 6e 2e 61 66 64 37 31 37 32 62 2e 63 68 75 6e 6b 2e 63 73 73 2e 6d 61 70 20 2a 2f Data Ascii: /# sourceMappingURL=main.afd7172b.chunk.css.map /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49786	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	377	OUT	GET /build/img/flags/flags.png HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:25 UTC	637	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 70857 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-114c9" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 6fe2d3277e4f5f1aafe45d46bdc36cf0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: ryrPQ9tjQSDQ9IOjPpUI_y85VafOM6iP9CROg7EE4WivIrQTJ4XfgQ== Age: 4
2024-10-31 16:23:25 UTC	15747	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 16 14 00 00 00 0f 08 06 00 00 00 a2 db e1 dd 00 01 14 90 49 44 41 54 78 da ec 9d 75 9c 5d d5 f5 f6 bf 7b 9f 73 fd 8e 7b 46 e2 ee 21 4e 82 bb 4b b1 e2 b4 b8 94 42 91 d2 e2 a5 b4 45 5a b4 b4 d0 42 a1 b8 06 77 08 0e 21 c4 93 89 4d 6c 32 19 f7 ab 47 f6 fb c7 b9 33 99 49 46 93 19 a4 ef 6f f7 43 67 32 f7 de 7d f7 d9 b2 e4 59 6b 3d 5b bc 78 c9 5d aa 70 e6 58 ee f8 a4 8a 17 17 d5 f0 fe 90 cd 20 05 fb ad ce e7 c8 a4 06 ae 3b b8 80 2d 81 6c 4e fd e7 52 8c 48 14 a1 49 94 02 21 00 40 29 da b7 75 b7 3a af e4 3e d3 ee 15 4d b3 b0 ea 52 78 e8 b6 7b 38 ff 8c f7 30 ea 34 74 cd 72 fa b0 04 32 5d 51 f3 ef 5c 36 5d 35 02 3d dd 40 59 a2 5d b7 93 ea bf 10 00 0a da f5 bb 2e d5 c3 a1 c7 0f 66 5d 9a 67 87 57 7a d8 ee 5a d2 f2 Data Ascii: PNGIHDRIDATxu]{s{F!NKBEZBw!Ml2G3IFoCg2}Yk=[x]pX ;-lNRHI!@)u:>MRx{804tr2]Q\6]5=@Y].f]gWzZ
2024-10-31 16:23:25 UTC	243	IN	Data Raw: 9a 8c 73 bb c9 94 1a fb fa 7c f8 45 e7 94 11 d7 0d 3a a9 6f 4f cd 86 fb 7b 20 35 1d b2 6a 3b 2a 48 3f ac 8e a4 a9 cd 54 3c 9d 05 76 cf f4 b9 52 e0 d6 05 45 99 5e d6 95 47 d0 35 08 c7 2c 66 8d 48 69 25 13 d6 a4 60 4c 81 9f 31 05 7e 4e 9d 93 cd fd ef 6c e5 e5 6f aa f1 b9 65 87 b7 dd 77 cb b7 20 44 7b eb ac 87 16 8e 42 62 a1 3b 51 35 ab 8a 01 34 33 41 53 cc 18 91 e4 10 08 ef 39 96 82 69 e3 60 f4 08 f0 24 b5 7e ae ae ae 96 f3 f7 9f cc c6 75 a5 64 66 79 c9 dd 13 d6 6f d8 b8 83 e3 d4 f7 ed 94 d4 ab 39 f1 e7 85 1c 3b a0 8c 0f 17 1b 8c cb 7e 17 94 62 f9 05 37 b3 5f c5 47 bc fa 75 8c c7 97 fa a8 a1 01 29 6d 0a 0a 52 d9 ba b5 99 6d db 9a 01 83 29 53 0a 98 33 a7 90 7b ef fd 1a 29 dd ad c3 94 02 52 a5 41 5a b8 9e b8 ee 26 59 33 11 Data Ascii: s\|E:oO{ 5j;*H?T<vRE^G5,fHi%`L1~Nloew D{Bb;Q543AS9i`$~udfyo9;~b7_Gu)mRm)S3{)RAZ&Y3
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 7d 41 06 af 76 70 6a 95 c0 52 3b 27 b4 db 4a 3a 74 f0 3d 64 37 bf e7 99 07 bb 14 97 da c0 02 64 4e 36 e6 ba 12 54 5d 43 b7 0a e8 c2 4e fe 1e 37 6d 5e 7d 7f 03 b3 26 e7 32 7e e4 49 dc f4 92 e2 c6 e3 9e 66 48 1f 92 0a 0b 21 40 2a 1a 42 4e 87 29 01 89 d8 05 ad d4 96 4c f8 ed 45 61 0a a2 36 71 cd 51 be c3 42 16 7b d6 5b 1c 32 d9 ff 3f 45 2a bc ae e1 fb 61 a4 10 ba 4e ca a1 fb e3 1a 90 4b e5 fd ff a6 e1 9d 0f 5b ae f6 e9 55 4b 75 25 63 2b 8b 7b 4b fe c3 eb db 3e e0 da 51 17 71 d2 a9 3f 23 f3 e0 83 a9 78 e6 39 32 4f fd 19 75 21 e7 99 c6 dc f4 1b aa 9f 7c 9e 9c 93 4f 84 cc 64 9e dd fc 1a 7f 2e 7e 90 f5 91 2d a4 b9 52 f0 68 5e ea 7e a2 eb 76 56 fa a1 9c 78 ca 70 8e 4b 8f f0 d6 aa 06 f2 73 be 05 a5 f8 f6 ec 73 d9 ab 62 39 cf 2e 6d e0 cd 55 0d 5c 46 29 01 cb 44 4b Data Ascii: }AvpjR;'J:t=d7dN6T]CN7m^}&2~IfH!@BN)LEa6qQB{[2?EaNK[UKu%c+{K>Qq?#x92Ou!\|Od.~-Rh^~vVxpKssb9.mU\F)DK
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: d2 e2 71 08 60 5a bd 5d 74 ff 45 e9 58 96 54 4a 0e 2b dd 02 c0 e7 95 93 90 df 14 4c 3b de 2e e6 dd fd fd 12 c1 8a e2 31 70 be cd c0 79 e8 98 f9 14 64 14 f2 f8 17 7f a5 24 ab 94 98 91 24 d3 e5 c5 30 62 3c f8 de 6f 79 63 eb ab 5c bf e0 66 8e f5 1f 90 ca 19 11 43 9e 57 25 e5 6a 9a 86 ca bc fc 08 3f cd aa 62 cb 8b f5 5c f8 d7 28 81 88 44 d3 14 96 7c fe 09 df fa d6 0d 6c de ba 99 4b cf 33 f8 c1 b1 f9 64 2d f2 b3 e3 55 b5 ff 85 94 12 91 99 89 52 58 60 c7 15 75 07 4a 49 71 0a 64 db bb 3d ab 69 1a 57 5c 71 05 13 c6 4f 60 cc f8 71 24 3a 42 ec f8 ed 7d 58 e1 08 5a 66 26 3e 69 10 0f 74 d2 fa db df 91 7f c4 3c ce 3c f7 5c 0e 3a f8 60 e6 1f 71 44 9a 76 2f 98 c3 40 84 9e 36 6e d4 d5 f5 a8 33 c9 c6 f1 33 59 7d e8 81 08 4b b0 ce 8a c3 9a 5a c8 56 6c a7 77 d0 1b d7 28 50 Data Ascii: q`Z]tEXTJ+L;.1pyd$$0b<oyc\fCW%j?b\(D\|lK3d-URX`uJIqd=iW\qO`q$:B}XZf&>it<<\:`qDv/@6n33Y}KZVlw(P
2024-10-31 16:23:25 UTC	1514	IN	Data Raw: c4 32 ea 40 18 b4 84 4b f0 b4 c5 29 94 db bb 8b e4 d3 c7 8a 24 89 44 82 e1 4e b5 34 4d 93 dc dc 1c 0a ca 4a 68 5f f8 0c 72 ec 78 1c e5 63 70 4e 98 44 64 ed 2a da fe f9 04 85 d7 5d 44 ae 2b 8c 69 19 69 1d 74 21 04 86 ee e2 a6 cf ff c9 b4 93 e7 a3 4c 9c 86 8c ee 56 98 6b 59 08 b7 07 6b eb 56 4e 78 ea 9f 18 ba 6b 57 f7 d4 34 d6 a9 0f 1c 6d 97 20 b1 24 8a cf c9 e6 0d 36 d9 67 3a 64 c2 bb 0f 1d c1 6c a7 13 81 a0 0b 76 9e aa 3b 98 e5 74 a0 a7 21 a4 1c ca c8 90 d4 d6 ca 7e 12 13 14 98 34 16 7e fe 17 b8 ee 02 93 3b 6e b4 7d fd a7 5f 87 00 09 02 69 02 df 12 89 ae 0a aa 5b e3 44 13 26 6e 87 6a cf 9b 10 dd 39 9d 62 b7 f5 ed 12 18 aa d2 77 a1 ee d2 8a d0 c0 72 c6 2a c4 28 ff 0e 00 cd 91 2c a8 0c a5 5d 74 6b 76 b5 15 37 0d 04 a9 ce 12 42 c1 14 d9 d4 90 47 4d 52 f2 e6 Data Ascii: 2@K)$DN4MJh_rxcpNDd]D+iit!LVkYkVNxkW4m $6g:dlv;t!~4~;n}_i[D&nj9bwr(,]tkv7BGMR
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: cd 9e ca 31 27 9d 45 52 28 bc fa 69 15 cb 36 7d 86 b2 0f c9 f9 9b fd d0 e6 84 63 eb e0 a5 c9 0a fe 8b be 46 f1 79 0e d4 a2 dc b4 f0 cc 6e a2 0d 21 c0 94 58 99 0a f9 53 4d ea 97 ad 21 f4 e9 17 f8 e6 4f c5 52 74 30 a3 36 41 40 9a b8 c2 ce f6 ac de 67 43 b1 30 a3 1e 6a 83 d9 94 95 07 99 b6 76 1b 86 61 91 37 ab 8d ba da 2c ea db 72 50 3d 11 ac 01 82 13 97 5f 7e f9 b0 1e 8b 27 9e b0 0b 12 06 ee 94 2d d1 fd 53 48 1a 76 c1 b4 c3 3f 85 78 3c 91 96 3d 6c 09 58 59 e2 e6 d1 83 b2 58 35 ca 6d e3 65 c6 be e3 5b aa 69 a2 5b 49 2c 14 82 9b 33 d8 1a 1e cf b6 c2 09 6c 3e 7c 12 3b 26 8c a3 3e a7 a8 17 81 b0 27 be 1b 81 b0 10 58 a2 77 f2 de 48 ed 07 25 ab f7 fb 54 4c 22 38 39 2c b0 81 7f 2f bf 83 95 7e bb 94 66 6e e7 36 f2 cd 4e 42 59 2e 1c 98 7d ab be e6 be b0 79 49 3c a9 Data Ascii: 1'ER(i6}cFyn!XSM!ORt06A@gC0jva7,rP=_~'-SHv?x<=lXYX5me[i[I,3l>\|;&>'XwH%TL"89,/~fn6NBY.}yI<
2024-10-31 16:23:25 UTC	4201	IN	Data Raw: e0 c0 43 b1 6c 3b ad 9c ab 93 25 dd 36 5c 84 c2 32 e9 d7 6c 6f 6d 60 7b 73 dd 5e 7f 5f ba 61 05 e8 46 de 9d f1 57 18 b1 ce 7e 56 7c f2 36 63 8f 7a d1 80 1f 3a a2 1c bf f0 11 84 10 b4 39 1a 32 30 ca 2d 0c 4d 67 c9 0f a3 56 97 08 84 93 40 16 8c 66 89 2c a2 79 e2 18 40 d0 e0 33 b1 31 10 b6 85 dc 47 23 9d 4d 0f 69 28 b7 76 cb 5b f7 ab 35 91 4d bb e9 48 74 4d 50 d7 d8 cd 8f e6 bd c2 9f ff b2 1a 31 ca 8b 26 8c dd 6c 6a ae e0 f9 69 57 0d 60 ab dd e5 68 0a b7 ae 38 21 dd 6e b0 72 c0 1a a1 bb 95 10 0c 03 ee 5b 33 25 c3 57 74 c9 3a 37 3f f7 92 1a dc 6c 42 00 8e 43 28 ee c3 77 da 4c c6 95 56 b2 fe 83 a5 38 9d 75 50 4c 16 36 d8 04 32 9e 20 fe ce 22 e2 ff 4a 9e ed 96 0e 6e d5 7b 0e 85 50 8e 24 b1 6c 25 89 65 2b e8 3d 54 aa e9 59 f9 28 19 b7 f0 96 96 d0 51 b7 1d ff 05 Data Ascii: Cl;%6\2lom`{s^_aFW~V\|6cz:920-MgV@f,y@31G#Mi(v[5MHtMP1&ljiW`h8!nr[3%Wt:7?lBC(wLV8uPL62 "Jn{P$l%e+=TY(Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49790	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	583	OUT	GET /build/dynamic/static/js/runtime-main.9d98dd33.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:25 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1555 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:24 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-613" Expires: Thu, 07 Nov 2024 16:23:24 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4d0ae7ca3bb5e2d6eaa1450e1906adb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: A9omq9evMzGfolHdZl0DpesyQmbqwCbERQGl0istNiHS4K04GO4aww==
2024-10-31 16:23:25 UTC	1555	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 2c 6c 3d 72 5b 30 5d 2c 61 3d 72 5b 31 5d 2c 66 3d 72 5b 32 5d 2c 70 3d 30 2c 73 3d 5b 5d 3b 70 3c 6c 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 69 3d 6c 5b 70 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 69 29 26 26 6f 5b 69 5d 26 26 73 2e 70 75 73 68 28 6f 5b 69 5d 5b 30 5d 29 2c 6f 5b 69 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6e 29 26 26 28 65 5b 6e 5d 3d 61 5b 6e 5d 29 3b 66 6f 72 28 63 26 26 63 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,i,l=r[0],a=r[1],f=r[2],p=0,s=[];p<l.length;p++)i=l[p],Object.prototype.hasOwnProperty.call(o,i)&&o[i]&&s.push(o[i][0]),o[i]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49787	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	391	OUT	GET /build/js/swiper.da46e2bb5a5b941c6f33.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:24 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 150668 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:20 GMT Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT ETag: "67235597-24c8c" Expires: Thu, 07 Nov 2024 16:23:20 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b6b3214c2f1500227643824508cb5d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: EKTxman_uWulRa_g87ZRlT9rT5jKBDH9lTCDoOognunQxVuK2b69ew== Age: 4
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 54 42 43 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 77 69 70 65 72 22 5d 2c 7b 39 34 32 31 3a 28 65 2c 74 2c 61 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 7b 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 Data Ascii: "use strict";(self.webpackChunkTBC=self.webpackChunkTBC\|\|[]).push([["swiper"],{9421:(e,t,a)=>{function i(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function r(e,t){void 0===e&&(e={}),void 0===t&&(t={}),Object.keys(t)
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 70 3d 73 2e 6d 61 74 63 68 28 2f 28 41 6e 64 72 6f 69 64 29 3b 3f 5b 5c 73 5c 2f 5d 2b 28 5b 5c 64 2e 5d 2b 29 3f 2f 29 2c 63 3d 73 2e 6d 61 74 63 68 28 2f 28 69 50 61 64 29 2e 2a 4f 53 5c 73 28 5b 5c 64 5f 5d 2b 29 2f 29 2c 75 3d 73 2e 6d 61 74 63 68 28 2f 28 69 50 6f 64 29 28 2e 2a 4f 53 5c 73 28 5b 5c 64 5f 5d 2b 29 29 3f 2f 29 2c 68 3d 21 63 26 26 73 2e 6d 61 74 63 68 28 2f 28 69 50 68 6f 6e 65 5c 73 4f 53 7c 69 4f 53 29 5c 73 28 5b 5c 64 5f 5d 2b 29 2f 29 2c 76 3d 22 57 69 6e 33 32 22 3d 3d 3d 72 2c 66 3d 22 4d 61 63 49 6e 74 65 6c 22 3d 3d 3d 72 3b 72 65 74 75 72 6e 21 63 26 26 66 26 26 61 2e 74 6f 75 63 68 26 26 5b 22 31 30 32 34 78 31 33 36 36 22 2c 22 31 33 36 36 78 31 30 32 34 22 2c 22 38 33 34 78 31 31 39 34 22 2c 22 31 31 39 34 78 38 33 34 22 Data Ascii: p=s.match(/(Android);?[\s\/]+([\d.]+)?/),c=s.match(/(iPad).OS\s([\d_]+)/),u=s.match(/(iPod)(.OS\s([\d_]+))?/),h=!c&&s.match(/(iPhone\sOS\|iOS)\s([\d_]+)/),v="Win32"===r,f="MacIntel"===r;return!c&&f&&a.touch&&["1024x1366","1366x1024","834x1194","1194x834"
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 29 3b 28 30 3d 3d 3d 70 3f 30 3a 28 65 2d 61 2e 6d 69 6e 54 72 61 6e 73 6c 61 74 65 28 29 29 2f 70 29 21 3d 3d 6f 26 26 61 2e 75 70 64 61 74 65 50 72 6f 67 72 65 73 73 28 65 29 2c 61 2e 65 6d 69 74 28 22 73 65 74 54 72 61 6e 73 6c 61 74 65 22 2c 61 2e 74 72 61 6e 73 6c 61 74 65 2c 74 29 7d 2c 6d 69 6e 54 72 61 6e 73 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2d 74 68 69 73 2e 73 6e 61 70 47 72 69 64 5b 30 5d 7d 2c 6d 61 78 54 72 61 6e 73 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2d 74 68 69 73 2e 73 6e 61 70 47 72 69 64 5b 74 68 69 73 2e 73 6e 61 70 47 72 69 64 2e 6c 65 6e 67 74 68 2d 31 5d 7d 2c 74 72 61 6e 73 6c 61 74 65 54 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 69 2c 72 29 7b 76 6f 69 64 20 30 Data Ascii: );(0===p?0:(e-a.minTranslate())/p)!==o&&a.updateProgress(e),a.emit("setTranslate",a.translate,t)},minTranslate:function(){return-this.snapGrid[0]},maxTranslate:function(){return-this.snapGrid[this.snapGrid.length-1]},translateTo:function(e,t,a,i,r){void 0
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 53 74 61 72 74 54 69 6d 65 3b 69 66 28 74 2e 61 6c 6c 6f 77 43 6c 69 63 6b 26 26 28 74 2e 75 70 64 61 74 65 43 6c 69 63 6b 65 64 53 6c 69 64 65 28 64 29 2c 74 2e 65 6d 69 74 28 22 74 61 70 20 63 6c 69 63 6b 22 2c 64 29 2c 75 3c 33 30 30 26 26 63 2d 61 2e 6c 61 73 74 43 6c 69 63 6b 54 69 6d 65 3c 33 30 30 26 26 74 2e 65 6d 69 74 28 22 64 6f 75 62 6c 65 54 61 70 20 64 6f 75 62 6c 65 43 6c 69 63 6b 22 2c 64 29 29 2c 61 2e 6c 61 73 74 43 6c 69 63 6b 54 69 6d 65 3d 54 28 29 2c 78 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 64 65 73 74 72 6f 79 65 64 7c 7c 28 74 2e 61 6c 6c 6f 77 43 6c 69 63 6b 3d 21 30 29 7d 29 29 2c 21 61 2e 69 73 54 6f 75 63 68 65 64 7c 7c 21 61 2e 69 73 4d 6f 76 65 64 7c 7c 21 74 2e 73 77 69 70 65 44 69 72 65 63 74 69 6f 6e 7c 7c 30 3d 3d Data Ascii: StartTime;if(t.allowClick&&(t.updateClickedSlide(d),t.emit("tap click",d),u<300&&c-a.lastClickTime<300&&t.emit("doubleTap doubleClick",d)),a.lastClickTime=T(),x((function(){t.destroyed\|\|(t.allowClick=!0)})),!a.isTouched\|\|!a.isMoved\|\|!t.swipeDirection\|\|0==
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 72 61 6d 73 5b 69 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 72 7c 7c 6e 75 6c 6c 3d 3d 3d 72 29 72 65 74 75 72 6e 3b 69 66 28 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 70 61 67 69 6e 61 74 69 6f 6e 22 2c 22 73 63 72 6f 6c 6c 62 61 72 22 5d 2e 69 6e 64 65 78 4f 66 28 69 29 3e 3d 30 26 26 21 30 3d 3d 3d 61 5b 69 5d 26 26 28 61 5b 69 5d 3d 7b 61 75 74 6f 3a 21 30 7d 29 2c 21 28 69 20 69 6e 20 61 29 7c 7c 21 28 22 65 6e 61 62 6c 65 64 22 69 6e 20 72 29 29 72 65 74 75 72 6e 3b 21 30 3d 3d 3d 61 5b 69 5d 26 26 28 61 5b 69 5d 3d 7b 65 6e 61 62 6c 65 64 3a 21 30 7d 29 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 61 5b 69 5d 7c 7c 22 65 6e 61 62 6c 65 64 22 69 6e 20 61 5b 69 5d 7c 7c 28 61 5b 69 5d 2e 65 6e 61 62 6c 65 64 3d 21 Data Ascii: rams[i];if("object"!=typeof r\|\|null===r)return;if(["navigation","pagination","scrollbar"].indexOf(i)>=0&&!0===a[i]&&(a[i]={auto:!0}),!(i in a)\|\|!("enabled"in r))return;!0===a[i]&&(a[i]={enabled:!0}),"object"!=typeof a[i]\|\|"enabled"in a[i]\|\|(a[i].enabled=!
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 65 53 6e 61 70 3d 64 2c 66 2e 73 70 6c 69 63 65 28 30 29 2c 61 2e 73 6c 69 64 65 54 6f 43 6c 6f 73 65 73 74 28 61 2e 70 61 72 61 6d 73 2e 73 70 65 65 64 2c 21 30 2c 76 6f 69 64 20 30 2c 2e 35 29 7d 29 2c 35 30 30 29 29 7d 69 66 28 63 7c 7c 61 2e 65 6d 69 74 28 22 73 63 72 6f 6c 6c 22 2c 74 29 2c 61 2e 70 61 72 61 6d 73 2e 61 75 74 6f 70 6c 61 79 26 26 61 2e 70 61 72 61 6d 73 2e 61 75 74 6f 70 6c 61 79 44 69 73 61 62 6c 65 4f 6e 49 6e 74 65 72 61 63 74 69 6f 6e 26 26 61 2e 61 75 74 6f 70 6c 61 79 2e 73 74 6f 70 28 29 2c 75 3d 3d 3d 61 2e 6d 69 6e 54 72 61 6e 73 6c 61 74 65 28 29 7c 7c 75 3d 3d 3d 61 2e 6d 61 78 54 72 61 6e 73 6c 61 74 65 28 29 29 72 65 74 75 72 6e 21 30 7d 7d 65 6c 73 65 7b 76 61 72 20 79 3d 7b 74 69 6d 65 3a 54 28 29 2c 64 65 6c 74 61 3a Data Ascii: eSnap=d,f.splice(0),a.slideToClosest(a.params.speed,!0,void 0,.5)}),500))}if(c\|\|a.emit("scroll",t),a.params.autoplay&&a.params.autoplayDisableOnInteraction&&a.autoplay.stop(),u===a.minTranslate()\|\|u===a.maxTranslate())return!0}}else{var y={time:T(),delta:
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 6c 61 78 5d 2c 20 5b 64 61 74 61 2d 73 77 69 70 65 72 2d 70 61 72 61 6c 6c 61 78 2d 78 5d 2c 20 5b 64 61 74 61 2d 73 77 69 70 65 72 2d 70 61 72 61 6c 6c 61 78 2d 79 5d 2c 20 5b 64 61 74 61 2d 73 77 69 70 65 72 2d 70 61 72 61 6c 6c 61 78 2d 6f 70 61 63 69 74 79 5d 2c 20 5b 64 61 74 61 2d 73 77 69 70 65 72 2d 70 61 72 61 6c 6c 61 78 2d 73 63 61 6c 65 5d 22 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 70 61 72 61 6c 6c 61 78 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 74 2c 69 29 7d 29 29 2c 61 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 76 61 72 20 73 3d 74 2e 70 72 6f 67 72 65 73 73 3b 65 2e 70 61 72 61 6d 73 2e 73 6c 69 64 65 73 50 65 72 47 72 6f 75 70 3e 31 26 26 22 61 75 74 6f 22 21 3d 3d 65 2e 70 61 72 61 6d 73 2e Data Ascii: lax], [data-swiper-parallax-x], [data-swiper-parallax-y], [data-swiper-parallax-opacity], [data-swiper-parallax-scale]").each((function(t){e.parallax.setTransform(t,i)})),a.each((function(t,a){var s=t.progress;e.params.slidesPerGroup>1&&"auto"!==e.params.
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 6c 65 72 41 74 74 61 63 68 65 64 7c 7c 28 74 2e 6c 61 7a 79 2e 73 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 41 74 74 61 63 68 65 64 3d 21 30 2c 61 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 74 2e 6c 61 7a 79 2e 63 68 65 63 6b 49 6e 56 69 65 77 4f 6e 4c 6f 61 64 2c 75 29 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 65 28 29 7b 72 65 74 75 72 6e 20 4f 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 69 29 26 Data Ascii: lerAttached\|\|(t.lazy.scrollHandlerAttached=!0,a.on("scroll",t.lazy.checkInViewOnLoad,u))}}};function Oe(){return Oe=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var i in a)Object.prototype.hasOwnProperty.call(a,i)&
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 20 35 30 25 20 2d 22 2b 6c 2f 32 2b 22 70 78 22 2c 22 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 22 3a 22 35 30 25 20 35 30 25 20 2d 22 2b 6c 2f 32 2b 22 70 78 22 7d 29 2c 70 2e 73 68 61 64 6f 77 29 69 66 28 63 29 65 2e 74 72 61 6e 73 66 6f 72 6d 28 22 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 22 2b 28 73 2f 32 2b 70 2e 73 68 61 64 6f 77 4f 66 66 73 65 74 29 2b 22 70 78 2c 20 22 2b 2d 73 2f 32 2b 22 70 78 29 20 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 20 72 6f 74 61 74 65 5a 28 30 64 65 67 29 20 73 63 61 6c 65 28 22 2b 70 2e 73 68 61 64 6f 77 53 63 61 6c 65 2b 22 29 22 29 3b 65 6c 73 65 7b 76 61 72 20 7a 3d 4d 61 74 68 2e 61 62 73 28 68 29 2d 39 30 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 68 29 2f 39 30 29 2c 50 3d 31 Data Ascii: 50% -"+l/2+"px","transform-origin":"50% 50% -"+l/2+"px"}),p.shadow)if(c)e.transform("translate3d(0px, "+(s/2+p.shadowOffset)+"px, "+-s/2+"px) rotateX(90deg) rotateZ(0deg) scale("+p.shadowScale+")");else{var z=Math.abs(h)-90*Math.floor(Math.abs(h)/90),P=1
2024-10-31 16:23:25 UTC	3212	IN	Data Raw: 66 66 65 63 74 2d 66 61 64 65 22 2c 70 61 72 61 6d 73 3a 7b 66 61 64 65 45 66 66 65 63 74 3a 7b 63 72 6f 73 73 46 61 64 65 3a 21 31 7d 7d 2c 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 50 28 74 68 69 73 2c 7b 66 61 64 65 45 66 66 65 63 74 3a 58 65 28 7b 7d 2c 59 65 29 7d 29 7d 2c 6f 6e 3a 7b 62 65 66 6f 72 65 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 66 61 64 65 22 3d 3d 3d 65 2e 70 61 72 61 6d 73 2e 65 66 66 65 63 74 29 7b 65 2e 63 6c 61 73 73 4e 61 6d 65 73 2e 70 75 73 68 28 65 2e 70 61 72 61 6d 73 2e 63 6f 6e 74 61 69 6e 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 2b 22 66 61 64 65 22 29 3b 76 61 72 20 74 3d 7b 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 31 2c 73 6c 69 64 65 73 50 65 72 43 6f 6c 75 6d 6e 3a 31 2c 73 6c 69 Data Ascii: ffect-fade",params:{fadeEffect:{crossFade:!1}},create:function(){P(this,{fadeEffect:Xe({},Ye)})},on:{beforeInit:function(e){if("fade"===e.params.effect){e.classNames.push(e.params.containerModifierClass+"fade");var t={slidesPerView:1,slidesPerColumn:1,sli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49791	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:24 UTC	578	OUT	GET /build/dynamic/static/js/2.14713378.chunk.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:25 UTC	667	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 587422 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:24 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-8f69e" Expires: Thu, 07 Nov 2024 16:23:24 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b9d2ce196c8a711fb15d92175d58476e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: jiMOqppNNU0Y1rj-3uMkzhR80NwAkj7l2fCzbBtHE1c5bt2q8ehhKA==
2024-10-31 16:23:25 UTC	15717	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 2e 31 34 37 31 33 33 37 38 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 37 32 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 36 37 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 Data Ascii: /! For license information please see 2.14713378.chunk.js.LICENSE.txt /(this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(172)},function(e,t,n){"use strict";e.exports=n(167)},function(e,t,n){"use
2024-10-31 16:23:25 UTC	73	IN	Data Raw: 64 50 72 6f 70 3d 5f 2c 78 2e 66 6f 6c 64 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 73 3d 72 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 28 65 2e 66 6f 6c 64 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 Data Ascii: dProp=_,x.foldedComponentIds=r?Array.prototype.concat(e.foldedComponentId
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 73 2c 65 2e 73 74 79 6c 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 29 3a 76 2c 78 2e 73 74 79 6c 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 3d 4f 2c 78 2e 74 61 72 67 65 74 3d 72 3f 65 2e 74 61 72 67 65 74 3a 65 2c 78 2e 77 69 74 68 43 6f 6d 70 6f 6e 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6d 70 6f 6e 65 6e 74 49 64 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 6f 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 6f 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 28 74 2c 5b Data Ascii: s,e.styledComponentId):v,x.styledComponentId=O,x.target=r?e.target:e,x.withComponent=function(e){var r=t.componentId,o=function(e,t){if(null==e)return{};var n,r,o={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}(t,[
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 52 65 66 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 66 69 67 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5c 75 30 32 35 34 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 7d 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 75 62 73 63 72 69 62 65 72 73 7d 2c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 7d 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 66 6f 72 6b 50 61 67 65 7d 2c 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 4a 28 65 29 2c 72 3d 30 3b Data Ascii: ){return e.stateRef},re=function(e){return e.config},oe=function(e){return e.\u0254},ae=function(e){return e.value},ie=function(e){return e.subscribers},ue=function(e){return e.parent},ce=function(e){return e.forkPage},le=function(e,t){for(var n=J(e),r=0;
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 2c 74 29 29 7d 2c 42 3d 7b 69 73 56 61 6c 69 64 3a 21 31 2c 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 72 65 66 2e 63 68 65 63 6b 65 64 3f 7b 69 73 56 61 6c 69 64 3a 21 30 2c 76 61 6c 75 65 3a 74 2e 72 65 66 2e 76 61 6c 75 65 7d 3a 65 7d 29 2c 42 29 3a 42 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 72 61 64 69 6f 22 3d 3d 3d 65 2e 74 79 70 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 69 6c 65 22 3d 3d 3d 65 2e 74 79 70 65 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 Data Ascii: ,t))},B={isValid:!1,value:null},Y=function(e){return Array.isArray(e)?e.reduce((function(e,t){return t&&t.ref.checked?{isValid:!0,value:t.ref.value}:e}),B):B},W=function(e){return"radio"===e.type},H=function(e){return"file"===e.type},V=function(e){return"
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 65 6e 74 29 29 2c 70 3d 51 65 28 61 2c 21 31 29 2c 64 3d 21 5a 28 70 29 7c 7c 21 6c 26 26 65 74 28 61 29 2c 6c 26 26 21 49 28 49 65 2e 63 75 72 72 65 6e 74 2e 74 6f 75 63 68 65 64 2c 61 29 26 26 4c 65 2e 63 75 72 72 65 6e 74 2e 74 6f 75 63 68 65 64 26 26 28 4e 28 49 65 2e 63 75 72 72 65 6e 74 2e 74 6f 75 63 68 65 64 2c 61 2c 21 30 29 2c 70 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 70 29 2c 7b 74 6f 75 63 68 65 64 3a 49 65 2e 63 75 72 72 65 6e 74 2e 74 6f 75 63 68 65 64 7d 29 29 2c 21 78 26 26 56 28 72 29 26 26 4e 28 74 65 2e 63 75 72 72 65 6e 74 2c 61 2c 47 28 6a 2c 61 29 29 2c 21 73 29 7b 65 2e 6e 65 78 74 3d 31 33 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 21 6c 26 26 74 74 28 61 29 2c 65 2e 61 62 72 75 Data Ascii: ent)),p=Qe(a,!1),d=!Z(p)\|\|!l&&et(a),l&&!I(Ie.current.touched,a)&&Le.current.touched&&(N(Ie.current.touched,a,!0),p=Object.assign(Object.assign({},p),{touched:Ie.current.touched})),!x&&V(r)&&N(te.current,a,G(j,a)),!s){e.next=13;break}return!l&&tt(a),e.abru
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 72 5b 65 5d 3d 6e 65 77 20 53 65 74 2c 74 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 28 7b 7d 29 7d 2c 73 28 6e 2c 68 2e 63 75 72 72 65 6e 74 2c 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 72 5b 65 5d 2c 64 65 6c 65 74 65 20 74 5b 65 5d 7d 7d 29 2c 5b 6e 2c 63 2c 69 2c 73 2c 68 5d 29 2c 64 2e 63 75 72 72 65 6e 74 3f 73 28 6e 2c 68 2e 63 75 72 72 65 6e 74 2c 64 2e 63 75 72 72 65 6e 74 29 3a 4c 28 72 29 3f 63 65 28 6e 29 3f 49 28 66 2e 63 75 72 72 65 6e 74 2c 6e 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 Data Ascii: current;return r[e]=new Set,t[e]=function(){return p({})},s(n,h.current,e),function(){delete r[e],delete t[e]}}),[n,c,i,s,h]),d.current?s(n,h.current,d.current):L(r)?ce(n)?I(f.current,n):Array.isArray(n)?n.reduce((function(e,t){return Object.assign(Object
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 72 28 65 29 7d 6e 2e 64 28 74 2c 22 61 22 2c Data Ascii: ){"use strict";function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}n.d(t,"a",
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 6c 74 57 69 64 74 68 3a 22 77 69 64 65 22 7d 29 2c 71 75 61 72 74 65 72 3a 6c 28 7b 76 61 6c 75 65 73 3a 7b 6e 61 72 72 6f 77 3a 5b 22 31 22 2c 22 32 22 2c 22 33 22 2c 22 34 22 5d 2c 61 62 62 72 65 76 69 61 74 65 64 3a 5b 22 51 31 22 2c 22 51 32 22 2c 22 51 33 22 2c 22 51 34 22 5d 2c 77 69 64 65 3a 5b 22 31 73 74 20 71 75 61 72 74 65 72 22 2c 22 32 6e 64 20 71 75 61 72 74 65 72 22 2c 22 33 72 64 20 71 75 61 72 74 65 72 22 2c 22 34 74 68 20 71 75 61 72 74 65 72 22 5d 7d 2c 64 65 66 61 75 6c 74 57 69 64 74 68 3a 22 77 69 64 65 22 2c 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2d 31 7d 7d 29 2c 6d 6f 6e 74 68 3a 6c 28 7b 76 61 6c 75 65 73 3a 7b 6e 61 72 72 6f 77 3a 5b 22 4a 22 2c 22 46 22 2c Data Ascii: ltWidth:"wide"}),quarter:l({values:{narrow:["1","2","3","4"],abbreviated:["Q1","Q2","Q3","Q4"],wide:["1st quarter","2nd quarter","3rd quarter","4th quarter"]},defaultWidth:"wide",argumentCallback:function(e){return e-1}}),month:l({values:{narrow:["J","F",
2024-10-31 16:23:25 UTC	16384	IN	Data Raw: 74 29 3c 3d 30 7d 29 29 3b 72 65 74 75 72 6e 20 57 65 2e 64 65 66 61 75 6c 74 28 72 29 7d 72 65 74 75 72 6e 20 6e 3f 57 65 2e 64 65 66 61 75 6c 74 28 6e 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 77 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 68 69 67 68 6c 69 67 68 74 65 64 22 2c 6e 3d 6e 65 77 20 4d 61 70 2c 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: t)<=0}));return We.default(r)}return n?We.default(n):t}function wn(){for(var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"react-datepicker__day--highlighted",n=new Map,r=0,o=e.length

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b953619b-001e-0017-7a89-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162325Z-r1755647c66krc8kc5nnbqdves00000001gg000000008bza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162325Z-17fbfdc98bb9xxzfyggrfrbqmw0000000950000000001kp9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:25 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162325Z-r1755647c66vpf8fnbgmzm21hs0000000as0000000004dfe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:25 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162325Z-r1755647c66hpt4fmfneq8rup8000000070g000000004k5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162325Z-17fbfdc98bbwmxz5amc6q625w000000005r0000000007mbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49798	206.189.191.166	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	755	OUT	GET /favicon/tbc/site.webmanifest HTTP/1.1 Host: travelbusinessclass.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://travelbusinessclass.com/?utm_source=email&utm_medium=cpc&utm_campaign=october-deals&utm_source=Travel+Business+Class&utm_campaign=9e5cc08d2f-dec-gen-mess_COPY_01&utm_medium=email&utm_term=0_9e8d82b582-9e5cc08d2f-593361445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:25 UTC	453	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: application/octet-stream Content-Length: 473 Last-Modified: Wed, 14 Dec 2022 17:00:58 GMT Connection: close ETag: "639a014a-1d9" Access-Control-Allow-Origin: * Set-Cookie: did=zr2/pmcjrv2LN+j1BEVbAg==; expires=Fri, 31-Oct-25 16:23:25 GMT; domain=travelbusinessclass.com; path=/ P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes
2024-10-31 16:23:25 UTC	473	IN	Data Raw: 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 54 72 61 76 65 6c 20 42 75 73 69 6e 65 73 20 43 6c 61 73 73 22 2c 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 54 42 43 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 66 61 76 69 63 6f 6e 2f 74 62 63 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 Data Ascii: { "name": "Travel Busines Class", "short_name": "TBC", "icons": [ { "src": "/favicon/tbc/android-chrome-192x192.png", "sizes": "192x192", "type": "image/png" }, { "src": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49803	206.189.191.166	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	474	OUT	GET /build/img/static/trustpilot-rating.png HTTP/1.1 Host: travelbusinessclass.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
2024-10-31 16:23:26 UTC	369	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: image/png Content-Length: 2052 Last-Modified: Thu, 31 Oct 2024 10:01:59 GMT Connection: close ETag: "67235597-804" Expires: Thu, 07 Nov 2024 16:23:25 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-10-31 16:23:26 UTC	2052	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 de 00 00 00 2a 08 06 00 00 00 dc 64 e5 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 99 49 44 41 54 78 01 ed 9d 7b 50 54 55 1c c7 bf 0b 0b c8 4b de 08 a9 a5 82 88 a4 94 23 a6 69 93 1a 9a 6f 2d cd d7 e4 38 cd 34 4e f5 47 33 8e 53 e6 2b b3 87 39 63 33 59 d3 a4 e6 94 a5 a6 a6 36 99 9a f8 ca 67 25 22 f2 12 10 90 87 0a 2c 2f 01 61 97 f7 c2 d2 39 37 25 e4 b9 cf 73 77 e1 f7 61 18 f6 de dd 85 dd cf bd bf 73 7f e7 77 ce 59 14 88 5a d7 0c 6b 67 e6 e7 8a 96 db 27 d7 6e 82 42 f1 11 ac 9d e6 e6 8f 31 6b cb a6 96 6d 5b f0 cc 21 d7 42 b0 03 41 10 c2 a1 c0 23 08 19 a0 c0 23 08 19 a0 c0 23 08 19 a0 c0 Data Ascii: PNGIHDR*dpHYssRGBgAMAaIDATx{PTUK#io-84NG3S+9c3Y6g%",/a97%swaswYZkg'nB1km[!BA###

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49804	206.189.191.166	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	459	OUT	GET /favicon/tbc/favicon.ico HTTP/1.1 Host: travelbusinessclass.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: advanced-backend=e5fc74cb4b467ddf4d7dbdfae279c38d; did=zr2/pmcjru+H/ej0BEUHAg==
2024-10-31 16:23:26 UTC	397	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:25 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Wed, 14 Dec 2022 17:00:58 GMT Connection: close Vary: Accept-Encoding ETag: "639a014a-3aee" Expires: Thu, 07 Nov 2024 16:23:25 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-10-31 16:23:26 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 19 8a 02 4f 19 8a 02 4f 19 8a 02 4f 19 8a 02 4f 19 8a 33 4f 19 8a 97 4f 19 8a de 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f 18 8a ff 4f Data Ascii: 00 %6 % h6(0` $OOOOO3OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49799	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	581	OUT	GET /build/dynamic/static/js/main.d24cded2.chunk.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:26 UTC	666	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 95483 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:26 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-174fb" Expires: Thu, 07 Nov 2024 16:23:26 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4d0ae7ca3bb5e2d6eaa1450e1906adb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: KmyV7n0AfJqonTNoimDbypFmStwrRQdd9raSrtX4PEdeo7aB84uRGQ==
2024-10-31 16:23:26 UTC	15356	IN	Data Raw: 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 37 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 7d 2c 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 61 64 75 6c 74 2e 73 76 67 22 3a 31 37 36 2c 22 2e 2f 61 69 72 70 6c 61 6e 65 2e 73 76 67 22 3a 31 37 37 2c 22 2e 2f 63 61 6c 65 6e 64 61 72 2d 67 72 61 64 69 65 6e 74 2e 73 76 67 22 3a 31 37 38 2c 22 2e 2f 63 61 6c 65 6e 64 61 72 2e 73 76 67 22 3a 31 37 39 2c 22 2e 2f 63 68 69 6c 64 72 65 6e 2e 73 76 67 22 3a 31 38 30 2c 22 2e 2f 63 69 74 79 2e 73 76 67 22 3a 31 38 31 2c 22 2e 2f 63 6c 65 61 72 2e 73 76 Data Ascii: (this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[0],{171:function(n,e,t){},175:function(n,e,t){var r={"./adult.svg":176,"./airplane.svg":177,"./calendar-gradient.svg":178,"./calendar.svg":179,"./children.svg":180,"./city.svg":181,"./clear.sv
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 3a 20 32 35 70 78 3b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 70 78 3b 5c 6e 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 34 35 70 78 3b 5c 6e 20 20 20 20 68 65 69 67 68 74 3a 20 34 35 70 78 3b 5c 6e 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 64 62 65 61 66 62 3b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 39 70 78 3b 5c 6e 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 6e 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 22 5d 29 29 29 7d 29 29 2c 4a 65 3d 6f 2e 63 2e 64 69 76 28 43 6e 7c 7c 28 43 6e 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 66 6c Data Ascii: : 25px;\n right: 25px;\n\n width: 45px;\n height: 45px;\n background: #dbeafb;\n border-radius: 39px;\n\n display: flex;\n justify-content: center;\n align-items: center;\n "])))})),Je=o.c.div(Cn\|\|(Cn=Object(s.a)(["\n display: fl
2024-10-31 16:23:26 UTC	435	IN	Data Raw: 6f 64 64 22 7d 29 7d 29 2c 74 69 74 6c 65 3a 22 49 6e 66 61 6e 74 73 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 55 6e 64 65 72 20 32 22 7d 7d 2c 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 45 2e 6a 73 78 73 29 28 6f 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 45 2e 6a 73 78 29 28 6c 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 74 5b 65 5d 2e 69 63 6f 6e 7d 29 2c 4f 62 6a 65 63 74 28 45 2e 6a 73 78 73 29 28 73 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 45 2e 6a 73 78 29 28 64 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 74 5b 65 5d 2e 74 69 74 6c 65 7d 29 2c 4f 62 6a 65 63 74 28 45 2e 6a 73 78 29 28 62 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 74 5b 65 5d Data Ascii: odd"})}),title:"Infants",description:"Under 2"}},ct=function(n){var e=n.name;return Object(E.jsxs)(ot,{children:[Object(E.jsx)(lt,{children:it[e].icon}),Object(E.jsxs)(st,{children:[Object(E.jsx)(dt,{children:it[e].title}),Object(E.jsx)(bt,{children:it[e]
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 5c 6e 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 2e 38 37 35 72 65 6d 3b 5c 6e 22 5d 29 29 29 2c 6c 74 3d 6f 2e 63 2e 64 69 76 28 54 6e 7c 7c 28 54 6e 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 6e 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 66 6c 65 78 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 33 36 70 78 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 32 2e 32 35 72 65 6d 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 36 70 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 72 65 Data Ascii: font-weight: 700;\n line-height: 1;\n margin-left: 0.875rem;\n"]))),lt=o.c.div(Tn\|\|(Tn=Object(s.a)(["\n display: flex;\n align-items: center;\n justify-content: center;\n flex: none;\n height: 36px;\n height: 2.25rem;\n width: 16px;\n width: 1re
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 6e 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 5c 6e 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 5c 6e 20 20 20 20 22 5d 29 29 29 29 7d 29 29 2c 57 74 3d 6f 2e 63 2e 73 70 61 6e 2e 61 74 74 72 73 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 6f 70 64 6f 77 6e 5f 5f 6f 70 74 69 6f 6e 2d 6c 61 62 65 6c 22 7d 29 28 5a 65 7c 7c 28 5a 65 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 22 5d 29 29 29 2c 71 74 3d 6f 2e 63 2e 6c 69 2e 61 74 74 72 73 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 6f 70 64 6f 77 6e 5f 5f 6f 70 74 69 6f 6e 22 7d 29 28 53 65 7c 7c 28 53 65 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 22 2c 22 5c 6e 22 5d 29 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 74 68 65 Data Ascii: n color: #333;\n transform: rotate(180deg);\n "]))))})),Wt=o.c.span.attrs({className:"dropdown__option-label"})(Ze\|\|(Ze=Object(s.a)([""]))),qt=o.c.li.attrs({className:"dropdown__option"})(Se\|\|(Se=Object(s.a)(["\n ","\n"])),(function(n){n.the
2024-10-31 16:23:27 UTC	16384	IN	Data Raw: 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 22 2c 22 5c 6e 22 5d 29 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 2e 74 68 65 6d 65 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6f 2e 62 29 28 5f 72 7c 7c 28 5f 72 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 5c 6e 20 20 20 20 74 6f 70 3a 20 30 3b 5c 6e 20 20 20 20 6c 65 66 74 3a 20 30 3b 5c 6e 20 20 20 20 40 6d 65 64 69 61 20 22 2c 22 20 7b 5c 6e 20 20 20 20 20 20 72 69 67 68 74 3a 20 31 72 65 6d 3b 5c 6e 20 20 20 20 20 20 6c 65 66 74 3a 20 75 6e 73 65 74 3b 5c 6e 20 20 20 20 20 20 77 69 64 74 Data Ascii: =Object(s.a)(["\n ","\n"])),(function(n){var e=n.theme;return Object(o.b)(_r\|\|(_r=Object(s.a)(["\n position: absolute;\n width: 100%;\n z-index: 10;\n top: 0;\n left: 0;\n @media "," {\n right: 1rem;\n left: unset;\n widt
2024-10-31 16:23:27 UTC	14156	IN	Data Raw: 37 39 35 36 20 31 39 20 31 36 2e 35 35 38 37 20 31 38 2e 36 38 33 39 20 31 37 2e 31 32 31 33 20 31 38 2e 31 32 31 33 43 31 37 2e 36 38 33 39 20 31 37 2e 35 35 38 37 20 31 38 20 31 36 2e 37 39 35 36 20 31 38 20 31 36 56 35 43 31 38 20 34 2e 32 30 34 33 35 20 31 37 2e 36 38 33 39 20 33 2e 34 34 31 32 39 20 31 37 2e 31 32 31 33 20 32 2e 38 37 38 36 38 43 31 36 2e 35 35 38 37 20 32 2e 33 31 36 30 37 20 31 35 2e 37 39 35 36 20 32 20 31 35 20 32 5a 4d 35 20 31 36 43 34 2e 38 30 32 32 32 20 31 36 20 34 2e 36 30 38 38 38 20 31 35 2e 39 34 31 34 20 34 2e 34 34 34 34 33 20 31 35 2e 38 33 31 35 43 34 2e 32 37 39 39 38 20 31 35 2e 37 32 31 36 20 34 2e 31 35 31 38 31 20 31 35 2e 35 36 35 34 20 34 2e 30 37 36 31 32 20 31 35 2e 33 38 32 37 43 34 2e 30 30 30 34 33 20 31 Data Ascii: 7956 19 16.5587 18.6839 17.1213 18.1213C17.6839 17.5587 18 16.7956 18 16V5C18 4.20435 17.6839 3.44129 17.1213 2.87868C16.5587 2.31607 15.7956 2 15 2ZM5 16C4.80222 16 4.60888 15.9414 4.44443 15.8315C4.27998 15.7216 4.15181 15.5654 4.07612 15.3827C4.00043 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49800	18.66.92.98	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:25 UTC	584	OUT	GET /build/img/video/background.webm HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://travelbusinessclass.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-31 16:23:26 UTC	569	IN	HTTP/1.1 206 Partial Content Content-Type: video/webm Content-Length: 11524347 Connection: close Server: nginx Date: Wed, 30 Oct 2024 19:15:10 GMT Last-Modified: Wed, 30 Oct 2024 10:02:06 GMT ETag: "6722041e-afd8fb" Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Content-Range: bytes 0-11524346/11524347 X-Cache: Hit from cloudfront Via: 1.1 59d5785a1d012a54118141e7e216a492.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: cIUvHg_hJv8fZ3hjxqt3VxW-WmU_cWJj_BJ-ecIPO3rPXoqjVRdi3A== Age: 76095
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 af d8 cb 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d8 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 8f 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 af d8 2f ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b2 2a d7 b1 83 0f 42 40 4d 80 8d 4c 61 76 66 35 38 2e 34 35 2e 31 30 30 57 41 8d 4c 61 76 66 35 38 2e 34 35 2e 31 30 30 44 89 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgSMSSkS/XIf*B@MLavf58.45.100WALavf58.45.100D
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 9b 62 98 5a df ab 52 6b 9f 66 d5 17 34 24 1b f9 03 86 e1 33 e8 3b 7b 51 0c dc fa 53 a8 c8 4d f8 7b a4 13 b4 bf 52 d8 ec c4 57 48 6f 3c 79 76 b1 78 e8 9d b8 1a 4c f5 d1 76 1f da 66 b7 13 2d 0f 2f 49 f0 74 36 bf 79 43 0f 29 60 d2 e0 d6 7f f3 9d a1 d8 a5 00 7e e2 73 f4 21 d9 26 5d 2c ea 91 15 58 92 e0 05 d6 64 6a b3 56 fc 4a c5 0f 32 0b b6 6f be 4e bb 58 ce 7a fd 7d 8a e6 2c f2 f2 7a b2 ee c0 d2 ac 59 92 7a 36 ba 4f 34 16 b2 b2 a5 9d f2 a4 62 7e c1 55 7e 1a 61 c0 62 12 63 16 23 20 3a 52 4c 3b 2b 7b 28 17 57 50 b0 b5 1d 8e d7 11 83 22 ce 2f 1e e5 71 e7 5d a2 92 88 15 02 13 d1 6a 51 18 3a 4a 0d c0 10 3a d2 01 00 00 00 01 2c 4a 22 49 7e 18 85 12 fc d4 b4 e5 20 ce e5 8a 8b d8 59 13 6d c7 9d 10 52 ed e6 51 e4 b3 0b 86 04 8c 98 1f 93 c7 f7 cd 43 18 ad c6 6f a5 57 Data Ascii: bZRkf4$3;{QSM{RWHo<yvxLvf-/It6yC)`~s!&],XdjVJ2oNXz},zYz6O4b~U~abc# :RL;+{(WP"/q]jQ:J:,J"I~ YmRQCoW
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 20 7d 3f e4 1c f6 5a 38 3e f5 c1 ae 6e 05 17 c4 fc 78 6e 1f 90 77 14 70 0a ad ad 10 1b 46 10 7c c7 d1 20 2b e2 3d e6 58 09 d1 1f b0 97 ec a2 03 56 10 56 fb 46 11 7f 1c ca 63 12 db be f5 9f 53 98 2e 5b 49 00 c5 c1 76 03 1f dd 5c f0 8e 58 bd e7 1f 94 dd 47 47 d6 b8 3b 2c 9e 53 a0 78 e9 38 e5 9e a6 61 94 52 be 62 72 7b 20 eb 64 7a 61 4b 20 9f 48 dd 42 c6 4c 6c b6 88 89 42 eb d5 81 d0 99 8e d9 02 58 d0 f2 4b db fa bb 2b c1 5b 65 1b ec 34 18 2e 9e 0b 5d bb 7c 1f d9 73 52 0e bb f2 86 d8 fa f6 71 61 e7 7a cd 74 90 b7 f0 28 7e fe fd 77 b5 24 f2 e6 10 ad 6c 40 81 3f 76 76 0f a5 37 d8 03 ed aa b5 2b 7f 3d 00 bd 4f ec 84 ca 24 0d 89 46 4e 5d 62 53 4a 84 8d 3b a0 6d 55 a7 e3 9f 6c fd 75 ac 47 6c c3 e8 4b f0 7a ae 63 ae c2 71 81 b1 f6 18 8f ba c5 79 41 fc 74 39 28 61 Data Ascii: }?Z8>nxnwpF\| +=XVVFcS.[Iv\XGG;,Sx8aRbr{ dzaK HBLlBXK+[e4.]\|sRqazt(~w$l@?vv7+=O$FN]bSJ;mUluGlKzcqyAt9(a
2024-10-31 16:23:26 UTC	15188	IN	Data Raw: de a4 cf 23 d3 32 a2 ca f5 26 69 0b 07 e5 71 af 6d 5e f3 81 20 59 49 9e 76 a3 1a 21 ad 11 53 6a 00 d3 21 34 92 e5 ef 74 86 50 b1 8c 3e af fb fc e6 3e 23 d4 66 6f 52 5f 31 ef ac 31 a1 b4 15 33 d1 be 08 e4 3c d4 05 e4 e8 95 6d fb 26 f5 08 a8 00 00 00 02 2b 52 b7 08 d4 bf 00 4e 0b 88 60 11 db 30 bf 51 de bc 33 e9 13 a1 e8 d9 87 4f 57 5b 12 16 f0 c4 ae 8e 1a a5 bd cb 70 0c 50 c4 09 3a f7 3d e0 61 aa c9 03 6b 0d 87 e2 1f 6c 15 5c b9 45 86 fc c3 cd 6e 4f ab c4 e9 f8 2d 82 7a 8a a8 dd e2 a9 be 04 70 aa 82 9f d4 74 d2 72 b1 9a 9b 62 65 56 c2 4b 1b ba 37 4f 84 79 15 61 90 e7 23 f7 19 83 c8 f7 10 b2 92 a5 8f dd c2 43 74 42 4e 38 3b 08 e3 be 63 24 24 98 03 e4 59 49 42 b8 33 1e f1 c1 6d fe 0f 23 d6 20 7c a1 26 3d 19 e6 22 e9 ed 68 de 8a 4b 2a 83 d9 33 c9 22 9c 4a 33 Data Ascii: #2&iqm^ YIv!Sj!4tP>>#foR_113<m&+RN`0Q3OW[pP:=akl\EnO-zptrbeVK7Oya#CtBN8;c$$YIB3m# \|&="hK*3"J3
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 8d 6f 48 22 90 72 16 1d 18 23 84 a5 c0 45 66 9b a5 09 d4 3c 2b ca 0b 6d 02 c6 26 15 a7 eb 6f 6d 54 f4 5a 3c 80 d4 82 0a 29 65 4e 2c b0 16 5a ef 30 31 c4 fc 29 23 15 b3 c5 9b e5 b6 5e f3 90 2a ab 95 cf a9 1b 52 a2 b1 4d 83 b5 3b a6 3b 17 a6 8f 00 3e 18 78 23 d4 7f ca 4a 99 6c 65 3a 97 80 78 44 4a 07 d6 ea e3 65 b4 55 e7 7e 1a 75 77 36 b8 39 26 99 c7 bd ae b8 88 6f fd 29 f3 89 90 2b 19 1a 52 4d e3 c5 5c f6 ef 43 b9 60 e1 ec f9 ca 35 ab 5a 2d 39 41 3b ce 00 ee 62 a1 8a ea 5f 0f 71 87 8f 60 30 26 47 85 fc 3e c0 a7 f5 97 35 a9 b4 5e eb 6f 72 4d c1 4f 55 68 83 d8 dd a3 90 36 57 bb df 5d 84 16 95 00 ec 62 de 9c 80 aa 99 7c 75 11 07 2d 47 27 06 bf 26 cc 60 df 28 54 f3 70 d1 74 05 23 51 52 19 8e 3e b8 52 b9 87 f9 e7 6d e2 e8 68 b9 9b 44 f6 01 11 5a 43 e7 64 99 21 Data Ascii: oH"r#Ef<+m&omTZ<)eN,Z01)#^*RM;;>x#Jle:xDJeU~uw69&o)+RM\C`5Z-9A;b_q`0&G>5^orMOUh6W]b\|u-G'&`(Tpt#QR>RmhDZCd!
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 59 65 56 30 ca 55 3c b7 98 d1 f4 9e 6e 2b 85 d5 95 cf 84 73 be 3c ae 4d c0 4d 48 4d 72 0b 2d ca 22 87 99 c4 1b 15 b3 4f dd c9 f5 d2 d2 43 ca 35 f3 31 1f 7e 3d a2 4a c3 d2 08 e0 03 cc 01 36 1b 87 43 ea b3 51 b4 f4 01 0f 6e 14 4c 33 df b0 5e 7e f6 ad 42 92 e8 a9 9a fc ca 6c 71 59 df 7b 2d df 3e c0 a8 80 26 da 3f c2 1a 19 b5 3e 29 97 27 5c 87 99 28 3f 4f 17 f3 af 42 98 6e ba 93 d0 66 e8 2c 14 9e 54 d4 26 ad 33 03 59 ff cd 35 84 26 88 9a 17 09 c7 06 f4 d2 eb 26 0d 8a 97 31 38 7f 9a 7b b5 23 2b 64 a2 46 40 a8 e5 cc a2 c2 64 4f 2e fd 3d b8 22 d5 14 1a 42 2c dc dd 95 a6 87 a4 66 0f 38 bb 30 8f 52 a3 fc 95 cd c7 d0 14 05 de d5 6a f5 82 3f 9a f7 95 31 66 49 f2 ab c1 92 b3 a5 59 0c 25 28 25 06 dc 30 7b 53 40 f5 09 72 98 1f c2 45 92 da 69 57 70 9b 3b e3 9f 96 9b cb Data Ascii: YeV0U<n+s<MMHMr-"OC51~=J6CQnL3^~BlqY{->&?>)'\(?OBnf,T&3Y5&&18{#+dF@dO.="B,f80Rj?1fIY%(%0{S@rEiWp;
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 8e 98 a7 a2 f6 6b ad d3 01 de 1d 57 fa e1 dc 2a 8e 84 a0 37 5b dd 13 90 a5 4a 1b d4 43 77 17 be 87 d9 e5 32 f1 38 99 1c 8f 55 eb f5 39 67 e2 f9 07 e1 ae 30 28 b5 7a b4 38 d7 2b e6 23 37 91 4e 6e b3 a0 32 29 f2 be ff 1b 4b 8a 63 32 dd 01 72 ab f7 35 09 40 a1 7b 7d 17 24 f2 60 94 0a ae c6 fe f4 bb ef 65 2d 7d 57 48 30 04 3d af d7 37 d6 48 01 91 1e 62 7e 34 df fb 4d 53 2b 05 64 46 e2 62 4f 86 89 b6 9e ec 68 65 1d ec 41 9c 9d 72 59 b1 42 19 b7 0a ab 29 7d f6 d5 2e 29 dd 4f 16 f0 29 ed 8b 78 c0 5c 61 55 46 28 4e 70 e8 45 12 ba 4d 4e 1c c1 b6 6f 58 38 a9 90 d5 7c 11 17 ca aa bc ce 4e 15 c1 fc 96 d5 a1 88 51 27 1f 28 99 40 cd 40 a1 51 5f ff a2 18 49 85 2c 22 0d 0c 05 85 d3 ca a2 b6 35 cb 50 c0 5e f8 06 60 0f 6f 00 91 de f0 d1 fe 81 b7 0d 97 a0 fa 69 c1 09 16 d2 Data Ascii: kW*7[JCw28U9g0(z8+#7Nn2)Kc2r5@{}$`e-}WH0=7Hb~4MS+dFbOheArYB)}.)O)x\aUF(NpEMNoX8\|NQ'(@@Q_I,"5P^`oi
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: b3 81 0a 21 00 86 00 40 92 f0 21 19 06 00 1b 73 3a c9 ac 5b 94 0f b0 6a 3a 7d be e7 66 0a 4c a2 a2 43 47 28 ed 46 6b 99 80 00 00 00 01 5e 1c 68 fc 0a cf 4f 6f 01 97 d1 55 75 76 50 58 fb 0b a0 cf b8 dc 98 22 e6 8b 1c 79 2b a5 23 b3 82 2c 79 78 12 8f 3e 49 cf ef 8f 63 42 f6 f3 49 bc e1 77 5b 1a 93 f5 23 d4 cc 44 7a 54 3e 47 7e d5 71 a8 d6 77 bc 97 f4 24 ba 37 b8 74 ae 17 d4 41 c1 14 94 33 59 c2 c7 a8 a7 2f 15 7b 78 aa 1c 0a 3b a5 6b 69 72 40 58 f4 97 cd ee cd 86 f8 0a 9d 36 c1 08 56 33 96 ce 20 50 ee 02 d9 7f 3c df b7 26 96 fa b4 bb 7a d9 99 d0 cf 79 e2 fd fb 1d 31 31 7d 11 1c 36 3e 7f 20 87 80 06 5b 80 04 7d 72 0f 84 70 00 5b 7a e3 4b 00 24 63 fc 19 a0 b1 4e fe 76 00 97 c8 8d 5d 41 d0 dc ea bd 74 ed fe ac 6f b3 ea c2 3b 3d dc c4 80 60 bd ac 55 ac 77 60 03 Data Ascii: !@!s:[j:}fLCG(Fk^hOoUuvPX"y+#,yx>IcBIw[#DzT>G~qw$7tA3Y/{x;kir@X6V3 P<&zy11}6> [}rp[zK$cNv]Ato;=`Uw`
2024-10-31 16:23:26 UTC	16384	IN	Data Raw: 21 29 59 ad bb 5c d4 52 b5 1c 7a 1b 5b 16 6f f3 25 1d cc 91 a3 9b 76 90 53 81 bb 91 61 d8 ce 81 46 75 3e 6d fe 72 26 e0 1b 3d 14 89 ea cf 80 77 58 40 6b c6 ae f0 55 83 0f 45 c9 28 55 31 45 11 c6 48 5b 9f f2 d0 a9 66 d8 07 0c b8 d5 43 5d 10 f0 3b 07 b9 e9 b7 1d 79 19 82 e9 93 fe f1 29 2b 59 d5 d0 de 8e e3 43 d8 40 d7 44 52 a9 b2 81 6d 7e b6 90 9e c6 fd 81 e4 c3 f7 e7 d3 03 19 6a 90 54 38 ca 19 f5 f7 21 11 f9 cc ff 1f 87 ab 9a 22 26 c9 e6 70 24 32 88 3c e6 3d 4e cd cc 99 c1 4c 9a 09 88 96 06 29 8b 10 28 ae 68 c7 cc 53 d4 a4 91 13 00 76 1b 4b e6 63 c3 98 12 61 3f 33 7e 29 fb 5a bd 2b 26 e5 e8 39 70 25 f1 20 75 22 19 f8 a7 90 70 bf fc e1 91 ea 74 f0 b0 52 2e 2a e7 2e 21 56 b4 e6 97 e3 96 ee bc 53 16 b9 07 8d 33 df 54 51 8d c4 63 e5 3a 5c ed 4a 3e 52 4e 61 af Data Ascii: !)Y\Rz[o%vSaFu>mr&=wX@kUE(U1EH[fC];y)+YC@DRm~jT8!"&p$2<=NL)(hSvKca?3~)Z+&9p% u"ptR.*.!VS3TQc:\J>RNa
2024-10-31 16:23:27 UTC	16384	IN	Data Raw: 7c 9c ae 0a 9d 5d e0 c0 ab 31 af 4f 95 c1 6b b6 33 4f a1 d7 ec 77 fa 51 77 26 74 ac 04 09 bc e2 e2 92 4b 85 5b d6 1c 19 80 cd 01 fc c6 09 32 ef 25 20 9e 6c 8f da c8 27 60 44 33 43 b7 07 6f b7 c3 7b 40 f0 66 68 a6 f6 5b ea 85 e4 5a 19 f3 2c 6a 95 28 2f 3a 76 86 28 8d 07 16 e0 96 c2 95 9e 01 39 8b c2 17 36 17 92 c4 d5 d5 15 57 5b 6f 26 b5 48 45 7f 9e 3e 27 76 4e 0b 15 b8 37 18 be 85 68 cb f4 88 fa 2b ef ff 24 0f 33 01 4e 6a e7 4d ca 98 c5 1a bc 62 ae 88 36 56 91 b0 76 12 b4 d1 53 e5 b4 f5 6b 4b c6 03 81 a2 db 2e 7a 34 cb 75 72 07 08 bb 73 52 bc 8b a4 8e 42 65 dd 07 00 80 66 05 e5 e3 90 ea a3 41 c6 2b 09 3c 2f 4a ef 49 9e bc 02 3f a9 c5 c7 08 01 23 20 a9 da c6 f5 8e d1 39 c8 68 61 a8 a2 8c 56 72 e3 54 91 91 7d 02 d4 5f 65 fb 04 17 f2 44 a5 9c 60 f3 90 70 9f Data Ascii: \|]1Ok3OwQw&tK[2% l'`D3Co{@fh[Z,j(/:v(96W[o&HE>'vN7h+$3NjMb6VvSkK.z4ursRBefA+</JI?# 9haVrT}_eD`p

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:26 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:26 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162326Z-17fbfdc98bbds27mnhu6ftg4d8000000088g000000000xae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:26 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:26 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 389326c4-a01e-0053-299b-278603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162326Z-r1755647c66qg7mpa8m0fzcvy00000000awg000000008tr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49805	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:26 UTC	400	OUT	GET /build/dynamic/static/js/runtime-main.9d98dd33.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:26 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1555 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:24 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-613" Expires: Thu, 07 Nov 2024 16:23:24 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d419ac9a83ef724c262c5f07f9b5a8da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: jOQRek4-Ctv72fLUg0EV9PJ4lxUoang_YefaGnOt63Y9y2v3JSzLrA== Age: 2
2024-10-31 16:23:26 UTC	1555	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 2c 6c 3d 72 5b 30 5d 2c 61 3d 72 5b 31 5d 2c 66 3d 72 5b 32 5d 2c 70 3d 30 2c 73 3d 5b 5d 3b 70 3c 6c 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 69 3d 6c 5b 70 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 69 29 26 26 6f 5b 69 5d 26 26 73 2e 70 75 73 68 28 6f 5b 69 5d 5b 30 5d 29 2c 6f 5b 69 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6e 29 26 26 28 65 5b 6e 5d 3d 61 5b 6e 5d 29 3b 66 6f 72 28 63 26 26 63 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,i,l=r[0],a=r[1],f=r[2],p=0,s=[];p<l.length;p++)i=l[p],Object.prototype.hasOwnProperty.call(o,i)&&o[i]&&s.push(o[i][0]),o[i]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:26 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:26 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e7cc90bd-401e-0029-032a-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162326Z-17fbfdc98bb6vp4m3kc0kte9cs0000000amg000000003zth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:26 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:26 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:26 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162326Z-17fbfdc98bbjwdgn5g1mr5hcxn00000007q0000000004wga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:26 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:26 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 2399187d-801e-008f-5f67-282c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162326Z-r1755647c66trqwgqbys9wk81g00000008eg000000000fsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:27 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162327Z-r1755647c66x2fg5vpbex0bd840000000b4g0000000094zd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:27 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162327Z-r1755647c66xdwzbrg67s9avs40000000a3g00000000awud x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:27 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 174f78f2-a01e-0032-607a-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162327Z-17fbfdc98bbz4mxcabnudsmquw00000008t000000000697u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:27 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:27 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162327Z-r1755647c66bdj57qqnd8h5hp80000000agg0000000017rw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:27 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162327Z-17fbfdc98bblzxqcphe71tp4qw000000051g000000008w55 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49818	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	398	OUT	GET /build/dynamic/static/js/main.d24cded2.chunk.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:28 UTC	673	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 95483 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:26 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-174fb" Expires: Thu, 07 Nov 2024 16:23:26 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d419ac9a83ef724c262c5f07f9b5a8da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: xJ0v_xmjhp1NJOu6i08VtlxgkdshNGu20Vmt-a9AEPkNdNpjroS-pw== Age: 2
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 37 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 7d 2c 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 61 64 75 6c 74 2e 73 76 67 22 3a 31 37 36 2c 22 2e 2f 61 69 72 70 6c 61 6e 65 2e 73 76 67 22 3a 31 37 37 2c 22 2e 2f 63 61 6c 65 6e 64 61 72 2d 67 72 61 64 69 65 6e 74 2e 73 76 67 22 3a 31 37 38 2c 22 2e 2f 63 61 6c 65 6e 64 61 72 2e 73 76 67 22 3a 31 37 39 2c 22 2e 2f 63 68 69 6c 64 72 65 6e 2e 73 76 67 22 3a 31 38 30 2c 22 2e 2f 63 69 74 79 2e 73 76 67 22 3a 31 38 31 2c 22 2e 2f 63 6c 65 61 72 2e 73 76 Data Ascii: (this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[0],{171:function(n,e,t){},175:function(n,e,t){var r={"./adult.svg":176,"./airplane.svg":177,"./calendar-gradient.svg":178,"./calendar.svg":179,"./children.svg":180,"./city.svg":181,"./clear.sv
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 65 6e 74 3a 20 22 2c 22 3b 5c 6e 20 20 20 20 67 72 69 64 2d 67 61 70 3a 20 22 2c 22 3b 5c 6e 20 20 22 5d 29 29 2c 6e 2e 74 65 6d 70 6c 61 74 65 7c 7c 22 61 75 74 6f 22 2c 6e 2e 61 6c 69 67 6e 7c 7c 22 73 74 61 72 74 22 2c 6e 2e 6a 75 73 74 69 66 79 7c 7c 22 73 74 61 72 74 22 2c 6e 2e 67 61 70 7c 7c 30 29 7d 29 29 2c 51 65 3d 28 74 28 31 31 33 29 2c 6f 2e 63 2e 64 69 76 28 53 6e 7c 7c 28 53 6e 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 22 2c 22 5c 6e 22 5d 29 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 2e 74 68 65 6d 65 2c 74 3d 6e 2e 69 73 4f 6e 65 57 61 79 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6f 2e 62 29 28 44 6e 7c 7c 28 44 6e 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 20 20 26 20 2e 64 2d 6e 6f Data Ascii: ent: ",";\n grid-gap: ",";\n "])),n.template\|\|"auto",n.align\|\|"start",n.justify\|\|"start",n.gap\|\|0)})),Qe=(t(113),o.c.div(Sn\|\|(Sn=Object(s.a)(["\n ","\n"])),(function(n){var e=n.theme,t=n.isOneWay;return Object(o.b)(Dn\|\|(Dn=Object(s.a)(["\n & .d-no
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 73 2c 74 3d 6e 2e 6f 6e 43 6c 69 63 6b 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 45 2e 6a 73 78 29 28 70 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 45 2e 6a 73 78 29 28 67 74 2c 4f 62 6a 65 63 74 28 6c 2e 61 29 28 4f 62 6a 65 63 74 28 6c 2e 61 29 28 7b 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 65 2c 6e 29 7d 7d 2c 6e 29 2c 7b 7d 2c 7b 63 68 69 6c 64 72 65 6e 3a 6e 2e 61 69 72 70 6f 72 74 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 45 2e 6a 73 78 29 28 77 74 2c 4f 62 6a 65 63 74 28 6c 2e 61 29 28 7b 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 Data Ascii: s,t=n.onClick;return Object(E.jsx)(pt,{children:e.map((function(n){return Object(E.jsx)(gt,Object(l.a)(Object(l.a)({onClick:function(e){return t(e,n)}},n),{},{children:n.airports.map((function(n){return Object(E.jsx)(wt,Object(l.a)({onClick:function(e){re
2024-10-31 16:23:28 UTC	12288	IN	Data Raw: 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 22 2c 22 5c 6e 20 20 22 5d 29 29 2c 57 74 2c 65 26 26 4f 62 6a 65 63 74 28 6f 2e 62 29 28 48 65 7c 7c 28 48 65 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 5c 6e 20 20 20 20 22 5d 29 29 29 29 7d 29 29 2c 58 74 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 51 74 28 29 7b 72 65 74 75 72 6e 20 51 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 Data Ascii: n }\n\n ","\n "])),Wt,e&&Object(o.b)(He\|\|(He=Object(s.a)(["\n opacity: 1;\n "]))))})),Xt=["title","titleId"];function Qt(){return Qt=Object.assign?Object.assign.bind():function(n){for(var e=1;e<arguments.length;e++){var t=arguments[e];for(v
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 76 72 3d 4f 62 6a 65 63 74 28 73 2e 61 29 28 5b 22 5c 6e 20 20 68 65 69 67 68 74 3a 20 32 2e 32 35 72 65 6d 3b 5c 6e 20 20 77 69 64 74 68 3a 20 32 2e 32 35 72 65 6d 3b 5c 6e 22 5d 29 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 2e 69 6e 70 75 74 4c 61 62 65 6c 2c 74 3d 28 6e 2e 69 6e 70 75 74 49 64 2c 6e 2e 69 6e 70 75 74 50 6c 61 63 65 68 6f 6c 64 65 72 2c 6e 2e 69 6e 70 75 74 52 65 67 69 73 74 65 72 2c 6e 2e 69 6e 70 75 74 54 79 70 65 2c 6e 2e 69 6e 70 75 74 52 65 61 64 4f 6e 6c 79 2c 6e 2e 72 65 67 69 73 74 65 72 29 2c 61 3d 6e 2e 73 65 74 56 61 6c 75 65 2c 69 3d 6e 2e 67 65 74 56 61 6c 75 65 73 2c 63 3d 6e 2e 63 6f 6e 74 72 6f 6c 2c 6f 3d 4f 62 6a 65 63 74 28 72 2e 75 73 65 52 65 66 29 28 29 2c 73 3d 4f 62 6a 65 63 74 28 72 2e 75 Data Ascii: vr=Object(s.a)(["\n height: 2.25rem;\n width: 2.25rem;\n"]))),function(n){var e=n.inputLabel,t=(n.inputId,n.inputPlaceholder,n.inputRegister,n.inputType,n.inputReadOnly,n.register),a=n.setValue,i=n.getValues,c=n.control,o=Object(r.useRef)(),s=Object(r.u
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 33 43 34 2e 31 30 35 33 36 20 30 2e 34 38 30 34 33 20 34 20 30 2e 37 33 34 37 38 34 20 34 20 31 56 32 48 33 43 32 2e 32 30 34 33 35 20 32 20 31 2e 34 34 31 32 39 20 32 2e 33 31 36 30 37 20 30 2e 38 37 38 36 38 20 32 2e 38 37 38 36 38 43 30 2e 33 31 36 30 37 31 20 33 2e 34 34 31 32 39 20 30 20 34 2e 32 30 34 33 35 20 30 20 35 56 31 36 43 30 20 31 36 2e 37 39 35 36 20 30 2e 33 31 36 30 37 31 20 31 37 2e 35 35 38 37 20 30 2e 38 37 38 36 38 20 31 38 2e 31 32 31 33 43 31 2e 34 34 31 32 39 20 31 38 2e 36 38 33 39 20 32 2e 32 30 34 33 35 20 31 39 20 33 20 31 39 48 31 35 43 31 35 2e 37 39 35 36 20 31 39 20 31 36 2e 35 35 38 37 20 31 38 2e 36 38 33 39 20 31 37 2e 31 32 31 33 20 31 38 2e 31 32 31 33 43 31 37 2e 36 38 33 39 20 31 37 2e 35 35 38 37 20 31 38 20 31 36 Data Ascii: 3C4.10536 0.48043 4 0.734784 4 1V2H3C2.20435 2 1.44129 2.31607 0.87868 2.87868C0.316071 3.44129 0 4.20435 0 5V16C0 16.7956 0.316071 17.5587 0.87868 18.1213C1.44129 18.6839 2.20435 19 3 19H15C15.7956 19 16.5587 18.6839 17.1213 18.1213C17.6839 17.5587 18 16
2024-10-31 16:23:28 UTC	1275	IN	Data Raw: 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 68 65 69 67 68 74 3a 20 32 2e 32 35 72 65 6d 3b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 32 2e 32 35 72 65 6d 3b 5c 6e 5c 6e 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 5c 6e 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 5c 6e 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 63 61 6c 63 28 35 30 25 20 2b 20 31 30 70 78 29 3b 5c 6e 5c 6e 20 20 20 20 22 2c 22 5c 6e 5c 6e 20 20 20 20 73 76 67 20 7b 5c 6e 20 20 20 20 20 20 22 2c 22 5c 6e 20 20 20 20 7d 5c 6e 20 20 22 5d 29 29 2c 65 2e 67 72 61 Data Ascii: align-items: center;\n justify-content: center;\n height: 2.25rem;\n width: 2.25rem;\n\n position: absolute;\n top: 50%;\n transform: translateY(-50%);\n right: calc(50% + 10px);\n\n ","\n\n svg {\n ","\n }\n "])),e.gra

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 64bb7fc7-f01e-0071-5d6f-28431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162327Z-17fbfdc98bbx59j5xd9kpbrs84000000098g000000005uuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162327Z-r1755647c66ljccje5cnds62nc00000008mg000000001uws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:28 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:27 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: ba54a096-301e-0020-3719-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-17fbfdc98bbbnx4ldgze4de5zs00000008dg000000004128 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-17fbfdc98bb8mkvjfkt54wa53800000007tg000000002n30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 39bce04a-301e-0051-2eae-2638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-r1755647c66z67vn9nc21z11a8000000096g0000000045zg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 16:23:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49824	18.239.63.153	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	395	OUT	GET /build/dynamic/static/js/2.14713378.chunk.js HTTP/1.1 Host: di7qaez2koc7r.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:28 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 587422 Connection: close Server: nginx Date: Thu, 31 Oct 2024 16:23:24 GMT Last-Modified: Thu, 31 Oct 2024 10:00:57 GMT ETag: "67235559-8f69e" Expires: Thu, 07 Nov 2024 16:23:24 GMT Cache-Control: max-age=604800 Pragma: public Cache-Control: public Access-Control-Allow-Origin: * P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8a7f46625ae5030a73c5c8ce2b546002.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: BIm-JSyye6e_Tajn4etHPKvqVnS5z37t7y5Nyo5Dbu73tejfsbJLCg== Age: 4
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 2e 31 34 37 31 33 33 37 38 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 64 79 6e 61 6d 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 37 32 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 36 37 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 Data Ascii: /! For license information please see 2.14713378.chunk.js.LICENSE.txt /(this.webpackJsonpdynamic=this.webpackJsonpdynamic\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(172)},function(e,t,n){"use strict";e.exports=n(167)},function(e,t,n){"use
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 79 6c 65 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 66 6f 6c 64 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 73 3a 21 30 2c 73 68 6f 75 6c 64 46 6f 72 77 61 72 64 50 72 6f 70 3a 21 30 2c 73 74 79 6c 65 64 43 6f 6d 70 6f 6e 65 6e 74 49 64 3a 21 30 2c 74 61 72 67 65 74 3a 21 30 2c 77 69 74 68 43 6f 6d 70 6f 6e 65 6e 74 3a 21 30 7d 29 2c 78 7d 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 6d 29 2c 21 4f 62 6a 65 63 74 28 72 2e 69 73 56 61 6c 69 64 45 6c 65 6d 65 6e 74 54 79 70 65 29 28 6e 29 29 72 65 74 75 72 6e 20 78 28 31 2c 53 74 72 69 6e 67 28 6e 29 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: yle:!0,displayName:!0,foldedComponentIds:!0,shouldForwardProp:!0,styledComponentId:!0,target:!0,withComponent:!0}),x}var Re=function(e){return function e(t,n,o){if(void 0===o&&(o=m),!Object(r.isValidElementType)(n))return x(1,String(n));var a=function(){r
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 5b 6e 5d 29 3f 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 4f 62 6a 65 63 74 28 6f 2e 61 29 28 65 5b 6e 5d 29 29 3a 74 2e 70 75 73 68 28 65 5b 6e 5d 29 3b 65 6c 73 65 20 74 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 6d 61 70 28 4a 29 7d 2c 68 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 65 2e 68 61 73 52 65 66 2c 6f 3d 65 2e 74 79 70 65 2c 61 3d 65 2e 64 61 74 61 3b 72 26 26 28 74 5b 28 6e 3d 61 2e 73 74 6f 72 65 29 2e 69 64 5d 3d 6e 29 2c 22 6d 6f 76 22 3d 3d 3d 6f 26 26 61 2e 74 6f 3d 3d 3d 67 26 26 28 74 5b 28 6e 3d 61 2e 74 61 72 67 65 74 29 2e 69 64 Data Ascii: y.isArray(e))for(var n=0;n<e.length;n++)Array.isArray(e[n])?t.push.apply(t,Object(o.a)(e[n])):t.push(e[n]);else t.push(e);return t.map(J)},he=function(e,t){var n,r=e.hasRef,o=e.type,a=e.data;r&&(t[(n=a.store).id]=n),"mov"===o&&a.to===g&&(t[(n=a.target).id
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 2c 61 3d 6e 2e 61 74 74 72 69 62 75 74 65 73 3b 72 65 74 75 72 6e 20 72 3f 61 26 26 21 4c 28 61 2e 76 61 6c 75 65 29 3f 4c 28 6f 29 7c 7c 22 22 3d 3d 3d 6f 3f 51 3a 7b 76 61 6c 75 65 3a 6f 2c 69 73 56 61 6c 69 64 3a 21 30 7d 3a 51 3a 71 7d 72 65 74 75 72 6e 20 71 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 61 2c 69 3d 65 2e 63 75 72 72 65 6e 74 5b 74 5d 3b 69 66 28 69 29 7b 76 61 72 20 75 3d 69 2e 72 65 66 2c 6c 3d 75 2e 76 61 6c 75 65 2c 73 3d 75 2e 64 69 73 61 62 6c 65 64 2c 66 3d 69 2e 72 65 66 2c 70 3d 69 2e 76 61 6c 75 65 41 73 4e 75 6d 62 65 72 2c 64 3d 69 2e 76 61 6c 75 65 41 73 44 61 74 65 2c 68 3d 69 2e 73 65 74 56 61 6c 75 65 41 73 3b 69 66 28 73 26 26 72 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 48 28 Data Ascii: ,a=n.attributes;return r?a&&!L(a.value)?L(o)\|\|""===o?Q:{value:o,isValid:!0}:Q:q}return q};function G(e,t,n,r,o){var a,i=e.current[t];if(i){var u=i.ref,l=u.value,s=u.disabled,f=i.ref,p=i.valueAsNumber,d=i.valueAsDate,h=i.setValueAs;if(s&&r)return;return H(
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 3a 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 32 38 2c 6d 65 28 6a 2c 52 65 2c 69 2c 74 65 29 3b 63 61 73 65 20 32 38 3a 65 2e 74 30 3d 61 2c 75 3d 65 2e 73 65 6e 74 5b 65 2e 74 30 5d 3b 63 61 73 65 20 33 30 3a 21 6c 26 26 74 74 28 61 29 2c 56 65 28 61 2c 75 2c 64 2c 70 2c 63 29 3b 63 61 73 65 20 33 32 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 7d 29 2c 65 29 7d 29 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 3b 76 61 72 20 61 74 3d 4f 62 6a 65 63 74 28 6c 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 4f 62 6a 65 63 74 28 69 2e 61 29 28 4f 62 6a 65 63 74 28 6f 2e 61 29 28 29 2e 6d 61 72 6b 28 28 66 75 Data Ascii: :return e.next=28,me(j,Re,i,te);case 28:e.t0=a,u=e.sent[e.t0];case 30:!l&&tt(a),Ve(a,u,d,p,c);case 32:case"end":return e.stop()}}),e)})));return function(t){return e.apply(this,arguments)}}();var at=Object(l.useCallback)(Object(i.a)(Object(o.a)().mark((fu
2024-10-31 16:23:28 UTC	6056	IN	Data Raw: 6d 65 6e 74 29 28 74 2c 75 29 3a 4f 62 6a 65 63 74 28 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 28 74 2c 75 29 3a 6e 3f 6e 28 61 2c 69 29 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 3d 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c Data Ascii: ment)(t,u):Object(l.createElement)(t,u):n?n(a,i):null}},function(e,t){function n(){return e.exports=n=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call
2024-10-31 16:23:28 UTC	16384	IN	Data Raw: 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 72 65 74 75 72 6e 20 6e 65 77 20 62 3b 74 68 69 73 2e 5f 64 65 70 73 3d 5b 5d 2c 74 68 69 73 2e 5f 63 6f 6e 64 69 74 69 6f 6e 73 3d 5b 5d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 3d 7b 61 62 6f 72 74 45 61 72 6c 79 3a 21 30 2c 72 65 63 75 72 73 69 76 65 3a 21 30 7d 2c 74 68 69 73 2e 5f 65 78 63 6c 75 73 69 76 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 77 68 69 74 65 6c 69 73 74 3d 6e 65 77 20 6d 2c 74 68 69 73 2e 5f 62 6c 61 63 6b 6c 69 73 74 3d 6e 65 77 20 6d 2c 74 68 69 73 2e 74 65 73 74 73 3d 5b 5d 2c 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 73 3d 5b 5d 2c 74 68 69 73 2e 77 69 74 68 4d 75 74 61 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 74 79 70 Data Ascii: is instanceof b))return new b;this._deps=[],this._conditions=[],this._options={abortEarly:!0,recursive:!0},this._exclusive=Object.create(null),this._whitelist=new m,this._blacklist=new m,this.tests=[],this.transforms=[],this.withMutation((function(){t.typ
2024-10-31 16:23:29 UTC	16384	IN	Data Raw: 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 3b 76 61 72 20 72 3d 6e 28 36 29 2c 6f 3d 6e 28 35 29 2c 61 3d 6e 28 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 4f 62 6a 65 63 74 28 61 2e 61 29 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 2c 69 3d 4f 62 6a 65 63 74 28 72 2e 61 29 28 74 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 69 29 3f 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 3a 69 3f 28 6e 2e 73 65 74 44 61 74 65 28 6e 2e 67 65 74 44 61 74 65 28 29 2b 69 29 2c 6e 29 3a 6e 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 64 65 66 61 75 6c Data Ascii: fault",(function(){return i}));var r=n(6),o=n(5),a=n(4);function i(e,t){Object(a.a)(2,arguments);var n=Object(o.default)(e),i=Object(r.a)(t);return isNaN(i)?new Date(NaN):i?(n.setDate(n.getDate()+i),n):n}},function(e,t,n){"use strict";n.r(t),n.d(t,"defaul
2024-10-31 16:23:29 UTC	16384	IN	Data Raw: 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 28 70 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 Data Ascii: n pt(e){return(pt="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function dt(e,t){if(!(e instanc
2024-10-31 16:23:29 UTC	16384	IN	Data Raw: 74 2e 64 65 66 61 75 6c 74 28 43 6e 29 2c 44 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 74 28 6e 2c 65 29 3b 76 61 72 20 74 3d 53 74 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 65 3b 64 74 28 74 68 69 73 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 65 77 20 41 72 72 61 79 28 72 29 2c 61 3d 30 3b 61 3c 72 3b 61 2b 2b 29 6f 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 76 74 28 5f 74 28 65 3d 74 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 74 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 6f 29 29 29 2c 22 73 74 61 74 65 22 2c 7b 64 72 6f 70 64 6f 77 6e 56 69 73 69 62 6c 65 3a 21 31 7d 29 2c 76 74 28 5f 74 28 65 29 2c 22 72 65 6e 64 65 72 53 65 6c 65 63 74 4f 70 74 Data Ascii: t.default(Cn),Dn=function(e){wt(n,e);var t=St(n);function n(){var e;dt(this,n);for(var r=arguments.length,o=new Array(r),a=0;a<r;a++)o[a]=arguments[a];return vt(_t(e=t.call.apply(t,[this].concat(o))),"state",{dropdownVisible:!1}),vt(_t(e),"renderSelectOpt

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-17fbfdc98bbp77nqf5g2c5aavs00000009h0000000000zg7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: a8de1b79-001e-0017-5ba3-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-r1755647c66pzcrw3ktqe96x2s0000000b30000000002h1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 57638fd1-a01e-0053-7b67-288603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-r1755647c66xdwzbrg67s9avs40000000aag0000000011f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 5b2d2bb9-d01e-0028-519c-277896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-17fbfdc98bb2rxf2hfvcfz540000000007p0000000007y7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:28 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162328Z-r1755647c66mmrln9nsykf75u800000008x0000000003e8h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49831	5.101.37.37	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:29 UTC	545	OUT	GET /widget/dwzeNfFJka HTTP/1.1 Host: code-eu1.jivosite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:30 UTC	434	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:29 GMT Content-Type: application/javascript Content-Length: 17656 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7200 Etag: "6718c736-44f8" Expires: Thu, 31 Oct 2024 18:23:29 GMT Last-Modified: Wed, 23 Oct 2024 09:51:50 GMT Vary: Accept-Encoding Via: 1.1 sharxy X-Geo-Shard: ya Cache: MISS X-Node: fr5-up-gc15 Accept-Ranges: bytes
2024-10-31 16:23:30 UTC	3662	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6a 76 2d 69 64 5d 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 64 61 74 61 2d 6a 76 2d 69 64 5d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 6d 61 74 63 68 28 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 5c 53 2b 28 5c 2e 63 6f 6d 7c 5c 2e 72 75 7c 5c 2e 74 65 63 68 29 29 5c 2f 28 77 69 64 67 65 74 5c Data Ascii: !function(){"use strict";function e(){return document.currentScript?document.currentScript:document.querySelector("script[jv-id]")\|\|document.querySelector("script[data-jv-id]")}function t(e){return e&&e.match(/https?:\/\/(\S+(\.com\|\.ru\|\.tech))\/(widget\
2024-10-31 16:23:30 UTC	4096	IN	Data Raw: 74 28 49 29 2c 4c 3d 65 3b 76 61 72 20 74 3d 28 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2d 45 29 2f 31 65 33 3b 74 3e 36 26 26 64 65 28 22 6c 6f 61 64 54 69 6d 65 22 2c 74 29 3b 64 65 28 22 62 75 6e 64 6c 65 4c 6f 61 64 65 64 22 2c 21 30 29 2c 64 65 28 22 62 75 69 6c 64 4e 75 6d 62 65 72 22 2c 53 2e 62 75 69 6c 64 5f 6e 75 6d 62 65 72 29 2c 79 65 28 22 42 75 6e 64 6c 65 20 69 73 20 6c 6f 61 64 65 64 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 43 3d 70 2e 62 6f 64 79 2e 6c 61 73 74 43 68 69 6c 64 2c 4d 2e 73 74 79 6c 65 26 26 28 4d 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 30 22 2c 4d 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 2c 4d 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 30 2c 4d 2e 73 74 79 6c 65 Data Ascii: t(I),L=e;var t=((new Date).getTime()-E)/1e3;t>6&&de("loadTime",t);de("bundleLoaded",!0),de("buildNumber",S.build_number),ye("Bundle is loaded"),function(){C=p.body.lastChild,M.style&&(M.style.opacity="0",M.style.visibility="hidden",M.style.width=0,M.style
2024-10-31 16:23:30 UTC	4096	IN	Data Raw: 6f 73 69 74 65 2e 63 6f 6d 2f 77 22 2c 6c 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 2c 74 29 7b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 3d 2e 30 31 2a 74 26 26 4b 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 2c 74 29 7b 69 66 28 79 65 28 22 63 68 65 63 6b 43 6f 6e 66 69 67 22 2c 65 2e 63 6f 6e 66 69 67 5f 75 70 64 61 74 65 64 5f 74 73 2c 74 29 2c 65 2e 69 73 44 65 6c 65 74 65 64 29 6d 65 28 29 3b 65 6c 73 65 20 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e Data Ascii: osite.com/w",l.navigator.sendBeacon&&navigator.sendBeacon(o,JSON.stringify(t))}catch(e){}}function Q(e,t){Math.random()<=.01*t&&K(e)}function ee(e,t){if(ye("checkConfig",e.config_updated_ts,t),e.isDeleted)me();else if(function(){var e=navigator.userAgent.
2024-10-31 16:23:30 UTC	4096	IN	Data Raw: 29 2c 22 69 66 72 61 6d 65 5f 75 72 6c 5f 63 68 61 6e 67 65 64 22 21 3d 74 2e 6e 61 6d 65 26 26 22 69 66 72 61 6d 65 5f 75 72 6c 5f 63 68 61 6e 67 65 64 22 21 3d 74 7c 7c 69 65 28 29 7d 65 6c 73 65 20 53 26 26 31 3d 3d 3d 53 2e 6c 6f 67 73 26 26 79 26 26 79 2e 6c 6f 67 26 26 79 2e 6c 6f 67 28 22 45 72 72 6f 72 20 72 65 63 65 69 76 65 20 70 6f 73 74 4d 65 73 73 61 67 65 2c 20 77 69 6e 64 6f 77 20 6d 65 73 73 61 67 65 20 65 76 65 6e 74 20 69 73 20 65 6d 70 74 79 2e 22 29 7d 29 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 29 7b 76 61 72 20 65 3d 62 65 28 29 3b 79 65 28 22 6c 6f 61 64 42 75 6e 64 6c 65 41 66 74 65 72 57 61 69 74 22 2c 65 2c 41 29 2c 63 28 6e 65 29 2c 72 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 65 28 29 7b 76 61 72 20 65 3d 62 65 28 Data Ascii: ),"iframe_url_changed"!=t.name&&"iframe_url_changed"!=t\|\|ie()}else S&&1===S.logs&&y&&y.log&&y.log("Error receive postMessage, window message event is empty.")}))}()}function ne(){var e=be();ye("loadBundleAfterWait",e,A),c(ne),re(e)}function oe(){var e=be(
2024-10-31 16:23:30 UTC	1706	IN	Data Raw: 67 65 6f 57 69 64 67 65 74 49 6e 66 6f 22 2c 67 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 2c 64 65 28 22 69 73 43 68 61 74 53 74 61 72 74 65 64 22 2c 6e 75 6c 6c 29 2c 64 65 28 22 63 6f 6e 66 69 67 48 6f 73 74 22 2c 6e 75 6c 6c 29 2c 65 7c 7c 68 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 29 7b 4e 3d 6e 75 6c 6c 2c 54 3d 6e 75 6c 6c 2c 75 65 28 29 2c 24 28 63 65 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 65 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 65 2e 61 73 79 6e 63 3d 21 30 2c 65 2e 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2c 42 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 42 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 Data Ascii: geoWidgetInfo",ge(null,null,null)),de("isChatStarted",null),de("configHost",null),e\|\|he()}function he(){N=null,T=null,ue(),$(ce())}function we(e){if(e)return e.type="text/javascript",e.async=!0,e.charset="UTF-8",B&&e.setAttribute("nonce",B),e}function pe(

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:30 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 86a4d3af-501e-0029-3f03-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162330Z-r1755647c66qg7mpa8m0fzcvy00000000az0000000004yax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 16:23:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:30 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:30 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 18df47ae-c01e-00a1-2249-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162330Z-17fbfdc98bbh7l5skzh3rekksc0000000b1g000000009py4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:30 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:30 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:30 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162330Z-17fbfdc98bbwmxz5amc6q625w000000005pg0000000096bs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:30 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:30 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:30 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a23be84-101e-0079-6389-285913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162330Z-17fbfdc98bb2rxf2hfvcfz540000000007q0000000006uke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:30 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:30 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:30 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162330Z-17fbfdc98bbds27mnhu6ftg4d8000000088g000000000xbc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:30 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49838	5.101.37.37	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:31 UTC	596	OUT	GET /script/widget/config/dwzeNfFJka HTTP/1.1 Host: code-eu1.jivosite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://travelbusinessclass.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:32 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:32 GMT Content-Type: application/x-javascript Content-Length: 21222 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7200 Expires: Thu, 31 Oct 2024 18:23:32 GMT Vary: Accept-Encoding Via: 1.1 sharxy X-Geo-Shard: ya Cache: MISS X-Node: fr5-up-gc15 Accept-Ranges: bytes
2024-10-31 16:23:32 UTC	3729	IN	Data Raw: 7b 22 77 69 64 67 65 74 5f 69 64 22 3a 22 64 77 7a 65 4e 66 46 4a 6b 61 22 2c 22 73 69 74 65 5f 69 64 22 3a 31 36 37 36 36 32 33 2c 22 77 69 64 67 65 74 5f 63 6f 6c 6f 72 22 3a 22 23 30 39 33 36 33 37 22 2c 22 77 69 64 67 65 74 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 6c 69 67 68 74 22 2c 22 77 69 64 67 65 74 5f 6f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 77 69 64 67 65 74 5f 6d 6f 62 69 6c 65 5f 6f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 35 22 2c 22 66 6f 6e 74 5f 66 61 6d 69 6c 79 22 3a 22 48 65 6c 76 65 74 69 63 61 22 2c 22 66 6f 6e 74 5f 74 79 70 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 73 68 6f 77 5f 72 61 74 65 5f Data Ascii: {"widget_id":"dwzeNfFJka","site_id":1676623,"widget_color":"#093637","widget_font_color":"light","widget_orientation":"bottom","widget_mobile_orientation":"right","font_size":"15","font_family":"Helvetica","font_type":"normal","locale":"en_US","show_rate_
2024-10-31 16:23:32 UTC	4096	IN	Data Raw: 36 36 20 31 32 33 20 34 35 36 37 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 41 4d 22 2c 22 6e 61 6d 65 22 3a 22 41 72 6d 65 6e 69 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 33 37 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 37 37 20 31 32 33 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 41 4e 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 74 68 65 72 6c 61 6e 64 73 20 41 6e 74 69 6c 6c 65 73 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 35 39 39 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 39 20 35 31 38 20 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 41 4f 22 2c 22 6e 61 6d 65 22 3a 22 41 6e 67 6f 6c 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 32 34 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 39 32 33 20 31 32 33 20 34 Data Ascii: 66 123 4567"},{"code":"AM","name":"Armenia","phone_code":"374","phone_format":"77 123456"},{"code":"AN","name":"Netherlands Antilles","phone_code":"599","phone_format":"9 518 1234"},{"code":"AO","name":"Angola","phone_code":"244","phone_format":"923 123 4
2024-10-31 16:23:32 UTC	4096	IN	Data Raw: 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 31 30 30 20 31 32 33 20 34 35 36 37 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 45 52 22 2c 22 6e 61 6d 65 22 3a 22 45 72 69 74 72 65 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 32 39 31 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 37 20 31 32 33 20 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 45 53 22 2c 22 6e 61 6d 65 22 3a 22 53 70 61 69 6e 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 33 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 31 32 20 33 34 20 35 36 20 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 45 54 22 2c 22 6e 61 6d 65 22 3a 22 45 74 68 69 6f 70 69 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 32 35 31 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 39 31 20 31 32 33 20 34 Data Ascii: ne_format":"100 123 4567"},{"code":"ER","name":"Eritrea","phone_code":"291","phone_format":"7 123 456"},{"code":"ES","name":"Spain","phone_code":"34","phone_format":"612 34 56 78"},{"code":"ET","name":"Ethiopia","phone_code":"251","phone_format":"91 123 4
2024-10-31 16:23:32 UTC	4096	IN	Data Raw: 6f 72 6d 61 74 22 3a 22 37 31 20 31 32 33 20 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 4c 43 22 2c 22 6e 61 6d 65 22 3a 22 53 61 69 6e 74 20 4c 75 63 69 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 31 37 35 38 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 32 38 34 2d 35 36 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 4c 49 22 2c 22 6e 61 6d 65 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 34 32 33 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 36 31 20 32 33 34 20 35 36 37 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 4c 4b 22 2c 22 6e 61 6d 65 22 3a 22 53 72 69 20 4c 61 6e 6b 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 39 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 37 31 Data Ascii: ormat":"71 123 456"},{"code":"LC","name":"Saint Lucia","phone_code":"1758","phone_format":"284-5678"},{"code":"LI","name":"Liechtenstein","phone_code":"423","phone_format":"661 234 567"},{"code":"LK","name":"Sri Lanka","phone_code":"94","phone_format":"71
2024-10-31 16:23:32 UTC	4096	IN	Data Raw: 6e 65 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 39 37 30 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 35 39 39 20 31 32 33 20 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 50 54 22 2c 22 6e 61 6d 65 22 3a 22 50 6f 72 74 75 67 61 6c 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 33 35 31 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 39 31 32 20 33 34 35 20 36 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 50 57 22 2c 22 6e 61 6d 65 22 3a 22 50 61 6c 61 75 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 36 38 30 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 32 30 20 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 50 59 22 2c 22 6e 61 6d 65 22 3a 22 50 61 72 61 67 75 61 79 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 35 39 35 Data Ascii: ne","phone_code":"970","phone_format":"599 123 456"},{"code":"PT","name":"Portugal","phone_code":"351","phone_format":"912 345 678"},{"code":"PW","name":"Palau","phone_code":"680","phone_format":"620 1234"},{"code":"PY","name":"Paraguay","phone_code":"595
2024-10-31 16:23:32 UTC	1109	IN	Data Raw: 20 49 73 6c 61 6e 64 73 2c 20 42 72 69 74 69 73 68 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 31 32 38 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 33 30 30 2d 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 56 49 22 2c 22 6e 61 6d 65 22 3a 22 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 2c 20 55 2e 53 2e 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 31 33 34 30 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 34 32 2d 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 56 4e 22 2c 22 6e 61 6d 65 22 3a 22 56 69 65 74 6e 61 6d 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 38 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 39 31 20 32 33 34 20 35 36 20 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 56 55 22 2c 22 6e 61 6d 65 22 3a Data Ascii: Islands, British","phone_code":"1284","phone_format":"300-1234"},{"code":"VI","name":"Virgin Islands, U.S.","phone_code":"1340","phone_format":"642-1234"},{"code":"VN","name":"Vietnam","phone_code":"84","phone_format":"91 234 56 78"},{"code":"VU","name":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49839	5.101.37.37	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:31 UTC	362	OUT	GET /widget/dwzeNfFJka HTTP/1.1 Host: code-eu1.jivosite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:31 UTC	476	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:31 GMT Content-Type: application/javascript Content-Length: 17656 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7200 Etag: "6718c736-44f8" Expires: Thu, 31 Oct 2024 18:23:29 GMT Last-Modified: Wed, 23 Oct 2024 09:51:50 GMT Vary: Accept-Encoding Via: 1.1 sharxy X-Geo-Shard: ya Cache: HIT X-Cached-Since: 2024-10-31T16:23:29+00:00 X-Node: fr5-up-gc15 Accept-Ranges: bytes
2024-10-31 16:23:31 UTC	3620	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6a 76 2d 69 64 5d 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 64 61 74 61 2d 6a 76 2d 69 64 5d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 6d 61 74 63 68 28 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 5c 53 2b 28 5c 2e 63 6f 6d 7c 5c 2e 72 75 7c 5c 2e 74 65 63 68 29 29 5c 2f 28 77 69 64 67 65 74 5c Data Ascii: !function(){"use strict";function e(){return document.currentScript?document.currentScript:document.querySelector("script[jv-id]")\|\|document.querySelector("script[data-jv-id]")}function t(e){return e&&e.match(/https?:\/\/(\S+(\.com\|\.ru\|\.tech))\/(widget\
2024-10-31 16:23:31 UTC	4096	IN	Data Raw: 5f 5f 6a 69 76 6f 42 75 6e 64 6c 65 4f 6e 4c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 49 29 2c 4c 3d 65 3b 76 61 72 20 74 3d 28 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2d 45 29 2f 31 65 33 3b 74 3e 36 26 26 64 65 28 22 6c 6f 61 64 54 69 6d 65 22 2c 74 29 3b 64 65 28 22 62 75 6e 64 6c 65 4c 6f 61 64 65 64 22 2c 21 30 29 2c 64 65 28 22 62 75 69 6c 64 4e 75 6d 62 65 72 22 2c 53 2e 62 75 69 6c 64 5f 6e 75 6d 62 65 72 29 2c 79 65 28 22 42 75 6e 64 6c 65 20 69 73 20 6c 6f 61 64 65 64 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 43 3d 70 2e 62 6f 64 79 2e 6c 61 73 74 43 68 69 6c 64 2c 4d 2e 73 74 79 6c 65 26 26 28 4d 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 30 22 2c 4d 2e 73 74 79 6c 65 2e 76 Data Ascii: __jivoBundleOnLoad=function(e){clearTimeout(I),L=e;var t=((new Date).getTime()-E)/1e3;t>6&&de("loadTime",t);de("bundleLoaded",!0),de("buildNumber",S.build_number),ye("Bundle is loaded"),function(){C=p.body.lastChild,M.style&&(M.style.opacity="0",M.style.v
2024-10-31 16:23:31 UTC	4096	IN	Data Raw: 28 29 2c 6f 3d 72 28 29 3b 6f 2b 3d 6e 3f 22 2f 2f 22 2b 6e 2b 22 2f 77 22 3a 22 2f 2f 74 65 6c 65 6d 65 74 72 79 2e 6a 69 76 6f 73 69 74 65 2e 63 6f 6d 2f 77 22 2c 6c 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 2c 74 29 7b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 3d 2e 30 31 2a 74 26 26 4b 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 2c 74 29 7b 69 66 28 79 65 28 22 63 68 65 63 6b 43 6f 6e 66 69 67 22 2c 65 2e 63 6f 6e 66 69 67 5f 75 70 64 61 74 65 64 5f 74 73 2c 74 29 2c 65 2e 69 73 44 65 6c 65 74 65 64 29 6d 65 28 29 3b 65 6c 73 Data Ascii: (),o=r();o+=n?"//"+n+"/w":"//telemetry.jivosite.com/w",l.navigator.sendBeacon&&navigator.sendBeacon(o,JSON.stringify(t))}catch(e){}}function Q(e,t){Math.random()<=.01*t&&K(e)}function ee(e,t){if(ye("checkConfig",e.config_updated_ts,t),e.isDeleted)me();els
2024-10-31 16:23:31 UTC	4096	IN	Data Raw: 63 6f 62 72 6f 77 73 65 3d 7b 73 6f 75 72 63 65 3a 65 2e 73 6f 75 72 63 65 2c 6f 72 69 67 69 6e 3a 65 2e 6f 72 69 67 69 6e 7d 29 2c 22 69 66 72 61 6d 65 5f 75 72 6c 5f 63 68 61 6e 67 65 64 22 21 3d 74 2e 6e 61 6d 65 26 26 22 69 66 72 61 6d 65 5f 75 72 6c 5f 63 68 61 6e 67 65 64 22 21 3d 74 7c 7c 69 65 28 29 7d 65 6c 73 65 20 53 26 26 31 3d 3d 3d 53 2e 6c 6f 67 73 26 26 79 26 26 79 2e 6c 6f 67 26 26 79 2e 6c 6f 67 28 22 45 72 72 6f 72 20 72 65 63 65 69 76 65 20 70 6f 73 74 4d 65 73 73 61 67 65 2c 20 77 69 6e 64 6f 77 20 6d 65 73 73 61 67 65 20 65 76 65 6e 74 20 69 73 20 65 6d 70 74 79 2e 22 29 7d 29 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 29 7b 76 61 72 20 65 3d 62 65 28 29 3b 79 65 28 22 6c 6f 61 64 42 75 6e 64 6c 65 41 66 74 65 72 57 61 69 74 Data Ascii: cobrowse={source:e.source,origin:e.origin}),"iframe_url_changed"!=t.name&&"iframe_url_changed"!=t\|\|ie()}else S&&1===S.logs&&y&&y.log&&y.log("Error receive postMessage, window message event is empty.")}))}()}function ne(){var e=be();ye("loadBundleAfterWait
2024-10-31 16:23:31 UTC	1748	IN	Data Raw: 20 6c 6f 61 64 69 6e 67 20 65 72 72 6f 72 3a 22 2c 65 3f 22 70 61 72 73 65 22 3a 22 72 65 71 75 65 73 74 22 29 2c 64 65 28 22 67 65 6f 57 69 64 67 65 74 49 6e 66 6f 22 2c 67 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 2c 64 65 28 22 69 73 43 68 61 74 53 74 61 72 74 65 64 22 2c 6e 75 6c 6c 29 2c 64 65 28 22 63 6f 6e 66 69 67 48 6f 73 74 22 2c 6e 75 6c 6c 29 2c 65 7c 7c 68 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 29 7b 4e 3d 6e 75 6c 6c 2c 54 3d 6e 75 6c 6c 2c 75 65 28 29 2c 24 28 63 65 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 65 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 65 2e 61 73 79 6e 63 3d 21 30 2c 65 2e 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2c 42 Data Ascii: loading error:",e?"parse":"request"),de("geoWidgetInfo",ge(null,null,null)),de("isChatStarted",null),de("configHost",null),e\|\|he()}function he(){N=null,T=null,ue(),$(ce())}function we(e){if(e)return e.type="text/javascript",e.async=!0,e.charset="UTF-8",B

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:32 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162332Z-r1755647c66t77qv3m6k1gb3zw00000009g0000000002bgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:32 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 481bd859-201e-00aa-219c-273928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162332Z-17fbfdc98bb6kklk3r0qwaavtw00000007p0000000008m1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:32 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:32 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2e5beeba-d01e-002b-6c67-2825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162332Z-r1755647c66gqcpzhw8q9nhnq00000000aeg000000008pwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 16:23:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:32 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:32 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 04de2316-001e-0082-3987-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162332Z-17fbfdc98bbfmg5wrf1ctcuuun0000000a8g000000000v36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:32 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 321a447c-801e-002a-4da3-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162332Z-r1755647c66xdwzbrg67s9avs40000000aa0000000002b0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:33 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: b7beb219-701e-0097-1404-27b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162333Z-r1755647c666s72wx0z5rz6s600000000au0000000006tp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 16:23:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49848	5.101.37.37	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:34 UTC	376	OUT	GET /script/widget/config/dwzeNfFJka HTTP/1.1 Host: code-eu1.jivosite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:34 UTC	409	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:34 GMT Content-Type: application/x-javascript Content-Length: 21222 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7200 Expires: Thu, 31 Oct 2024 18:23:32 GMT Vary: Accept-Encoding Via: 1.1 sharxy X-Geo-Shard: ya Cache: HIT X-Cached-Since: 2024-10-31T16:23:32+00:00 X-Node: fr5-up-gc15 Accept-Ranges: bytes
2024-10-31 16:23:34 UTC	3687	IN	Data Raw: 7b 22 77 69 64 67 65 74 5f 69 64 22 3a 22 64 77 7a 65 4e 66 46 4a 6b 61 22 2c 22 73 69 74 65 5f 69 64 22 3a 31 36 37 36 36 32 33 2c 22 77 69 64 67 65 74 5f 63 6f 6c 6f 72 22 3a 22 23 30 39 33 36 33 37 22 2c 22 77 69 64 67 65 74 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 6c 69 67 68 74 22 2c 22 77 69 64 67 65 74 5f 6f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 77 69 64 67 65 74 5f 6d 6f 62 69 6c 65 5f 6f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 35 22 2c 22 66 6f 6e 74 5f 66 61 6d 69 6c 79 22 3a 22 48 65 6c 76 65 74 69 63 61 22 2c 22 66 6f 6e 74 5f 74 79 70 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 73 68 6f 77 5f 72 61 74 65 5f Data Ascii: {"widget_id":"dwzeNfFJka","site_id":1676623,"widget_color":"#093637","widget_font_color":"light","widget_orientation":"bottom","widget_mobile_orientation":"right","font_size":"15","font_family":"Helvetica","font_type":"normal","locale":"en_US","show_rate_
2024-10-31 16:23:34 UTC	4096	IN	Data Raw: 62 61 6e 69 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 33 35 35 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 36 20 31 32 33 20 34 35 36 37 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 41 4d 22 2c 22 6e 61 6d 65 22 3a 22 41 72 6d 65 6e 69 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 33 37 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 37 37 20 31 32 33 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 41 4e 22 2c 22 6e 61 6d 65 22 3a 22 4e 65 74 68 65 72 6c 61 6e 64 73 20 41 6e 74 69 6c 6c 65 73 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 35 39 39 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 39 20 35 31 38 20 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 41 4f 22 2c 22 6e 61 6d 65 22 3a 22 41 6e 67 6f 6c 61 22 2c 22 70 Data Ascii: bania","phone_code":"355","phone_format":"66 123 4567"},{"code":"AM","name":"Armenia","phone_code":"374","phone_format":"77 123456"},{"code":"AN","name":"Netherlands Antilles","phone_code":"599","phone_format":"9 518 1234"},{"code":"AO","name":"Angola","p
2024-10-31 16:23:34 UTC	4096	IN	Data Raw: 22 45 47 22 2c 22 6e 61 6d 65 22 3a 22 45 67 79 70 74 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 32 30 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 31 30 30 20 31 32 33 20 34 35 36 37 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 45 52 22 2c 22 6e 61 6d 65 22 3a 22 45 72 69 74 72 65 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 32 39 31 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 37 20 31 32 33 20 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 45 53 22 2c 22 6e 61 6d 65 22 3a 22 53 70 61 69 6e 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 33 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 31 32 20 33 34 20 35 36 20 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 45 54 22 2c 22 6e 61 6d 65 22 3a 22 45 74 68 69 6f 70 69 61 22 2c 22 Data Ascii: "EG","name":"Egypt","phone_code":"20","phone_format":"100 123 4567"},{"code":"ER","name":"Eritrea","phone_code":"291","phone_format":"7 123 456"},{"code":"ES","name":"Spain","phone_code":"34","phone_format":"612 34 56 78"},{"code":"ET","name":"Ethiopia","
2024-10-31 16:23:34 UTC	4096	IN	Data Raw: 61 6d 65 22 3a 22 4c 65 62 61 6e 6f 6e 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 39 36 31 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 37 31 20 31 32 33 20 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 4c 43 22 2c 22 6e 61 6d 65 22 3a 22 53 61 69 6e 74 20 4c 75 63 69 61 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 31 37 35 38 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 32 38 34 2d 35 36 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 4c 49 22 2c 22 6e 61 6d 65 22 3a 22 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 34 32 33 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 36 31 20 32 33 34 20 35 36 37 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 4c 4b 22 2c 22 6e 61 6d 65 22 3a 22 53 72 69 20 4c Data Ascii: ame":"Lebanon","phone_code":"961","phone_format":"71 123 456"},{"code":"LC","name":"Saint Lucia","phone_code":"1758","phone_format":"284-5678"},{"code":"LI","name":"Liechtenstein","phone_code":"423","phone_format":"661 234 567"},{"code":"LK","name":"Sri L
2024-10-31 16:23:34 UTC	4096	IN	Data Raw: 38 37 2d 32 33 34 2d 35 36 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 50 53 22 2c 22 6e 61 6d 65 22 3a 22 50 61 6c 65 73 74 69 6e 65 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 39 37 30 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 35 39 39 20 31 32 33 20 34 35 36 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 50 54 22 2c 22 6e 61 6d 65 22 3a 22 50 6f 72 74 75 67 61 6c 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 33 35 31 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 39 31 32 20 33 34 35 20 36 37 38 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 50 57 22 2c 22 6e 61 6d 65 22 3a 22 50 61 6c 61 75 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 36 38 30 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 32 30 20 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 Data Ascii: 87-234-5678"},{"code":"PS","name":"Palestine","phone_code":"970","phone_format":"599 123 456"},{"code":"PT","name":"Portugal","phone_code":"351","phone_format":"912 345 678"},{"code":"PW","name":"Palau","phone_code":"680","phone_format":"620 1234"},{"code
2024-10-31 16:23:34 UTC	1151	IN	Data Raw: 22 34 31 32 2d 31 32 33 34 35 36 37 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 56 47 22 2c 22 6e 61 6d 65 22 3a 22 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 2c 20 42 72 69 74 69 73 68 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 31 32 38 34 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 33 30 30 2d 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 56 49 22 2c 22 6e 61 6d 65 22 3a 22 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 2c 20 55 2e 53 2e 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 31 33 34 30 22 2c 22 70 68 6f 6e 65 5f 66 6f 72 6d 61 74 22 3a 22 36 34 32 2d 31 32 33 34 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 56 4e 22 2c 22 6e 61 6d 65 22 3a 22 56 69 65 74 6e 61 6d 22 2c 22 70 68 6f 6e 65 5f 63 6f 64 65 22 3a 22 38 34 22 2c 22 70 68 6f 6e 65 5f 66 6f Data Ascii: "412-1234567"},{"code":"VG","name":"Virgin Islands, British","phone_code":"1284","phone_format":"300-1234"},{"code":"VI","name":"Virgin Islands, U.S.","phone_code":"1340","phone_format":"642-1234"},{"code":"VN","name":"Vietnam","phone_code":"84","phone_fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49847	57.128.74.66	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:34 UTC	622	OUT	GET /widget/status/1676623/dwzeNfFJka?rnd=0.3967468214786096 HTTP/1.1 Host: node-ya-10.jivosite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://travelbusinessclass.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:34 UTC	532	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1728 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Max-Age: 1728000 Access-Control-Allow-Origin: https://travelbusinessclass.com Access-Control-Expose-Headers: X-Geoip, X-Botmode Cache-Control: no-cache, no-store, must-revalidate Content-Security-Policy: frame-ancestors 'none'; Pragma: no-cache X-Botmode: no X-Frame-Options: DENY X-Geoip: US;TX;Dallas
2024-10-31 16:23:34 UTC	651	IN	Data Raw: 7b 22 70 72 65 6d 69 75 6d 22 3a 74 72 75 65 2c 22 6d 61 69 6e 74 65 6e 61 6e 63 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 67 5f 75 70 64 61 74 65 64 5f 74 73 22 3a 31 37 32 39 31 33 34 35 30 33 2c 22 61 67 65 6e 74 73 22 3a 5b 7b 22 61 67 65 6e 74 5f 69 64 22 3a 37 31 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 53 74 61 6e 20 44 61 76 69 73 22 2c 22 74 69 74 6c 65 22 3a 22 54 72 61 76 65 6c 20 41 64 76 69 73 6f 72 22 2c 22 61 76 61 74 61 72 5f 75 72 6c 22 3a 22 31 36 37 36 36 32 33 2f 36 35 61 36 63 31 31 63 38 61 64 36 66 2e 6a 70 67 22 7d 2c 7b 22 61 67 65 6e 74 5f 69 64 22 3a 38 32 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 44 65 78 74 65 72 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6e 73 75 6c 74 61 6e 74 22 7d 2c 7b 22 61 67 65 6e 74 Data Ascii: {"premium":true,"maintenance":false,"config_updated_ts":1729134503,"agents":[{"agent_id":71,"display_name":"Stan Davis","title":"Travel Advisor","avatar_url":"1676623/65a6c11c8ad6f.jpg"},{"agent_id":82,"display_name":"Dexter","title":"Consultant"},{"agent
2024-10-31 16:23:34 UTC	1077	IN	Data Raw: 36 36 33 30 66 37 63 35 64 33 38 38 36 2e 6a 70 67 22 7d 2c 7b 22 61 67 65 6e 74 5f 69 64 22 3a 31 33 31 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 45 64 77 61 72 64 20 43 61 72 74 65 72 22 2c 22 74 69 74 6c 65 22 3a 22 54 72 61 76 65 6c 20 41 67 65 6e 74 22 2c 22 61 76 61 74 61 72 5f 75 72 6c 22 3a 22 31 36 37 36 36 32 33 2f 36 35 64 37 36 33 35 62 61 63 38 63 61 2e 6a 70 67 22 7d 2c 7b 22 61 67 65 6e 74 5f 69 64 22 3a 31 33 32 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 4f 6c 69 76 65 72 20 53 79 6b 65 73 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6e 73 75 6c 74 61 6e 74 22 2c 22 61 76 61 74 61 72 5f 75 72 6c 22 3a 22 31 36 37 36 36 32 33 2f 36 35 63 65 36 33 39 37 39 36 34 66 65 2e 6a 70 67 22 7d 2c 7b 22 61 67 65 6e 74 5f 69 64 22 3a 31 36 Data Ascii: 6630f7c5d3886.jpg"},{"agent_id":131,"display_name":"Edward Carter","title":"Travel Agent","avatar_url":"1676623/65d7635bac8ca.jpg"},{"agent_id":132,"display_name":"Oliver Sykes","title":"Consultant","avatar_url":"1676623/65ce6397964fe.jpg"},{"agent_id":16

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:34 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162334Z-17fbfdc98bb5d4fn785en176rg00000009sg000000007kt6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:34 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:34 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ea5c4bf4-701e-000d-56e3-256de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162334Z-r1755647c66vpf8fnbgmzm21hs0000000aug0000000009zu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-31 16:23:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:34 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:34 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162334Z-r1755647c666s72wx0z5rz6s600000000asg0000000088t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:34 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:34 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 75e7650a-001e-0079-12c4-2612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162334Z-r1755647c66hlhp26bqv22ant400000009ug000000009b5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162335Z-r1755647c66ldhdjeavapf4fd000000009r000000000a9qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 214eaf96-b01e-00ab-509c-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162335Z-r1755647c666qwwlm3r555dyqc0000000a2g000000001kdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:35 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162335Z-r1755647c66hpt4fmfneq8rup800000006x0000000009byz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:35 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: de1a9787-701e-006f-48ae-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162335Z-r1755647c66vxbtprd2g591tyg00000009d0000000006c3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 16:23:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:35 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162335Z-r1755647c66vxbtprd2g591tyg00000009ag000000009b9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 16:23:35 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49861	13.107.246.45	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	535	OUT	GET /tag/ibhi9zl1ul HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:35 UTC	528	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:35 GMT Content-Type: application/x-javascript Content-Length: 707 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031; expires=Fri, 31 Oct 2025 16:23:35 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:3d284f99-f285-495c-ac33-dedd7ecf1ac8 x-azure-ref: 20241031T162335Z-16849878b78wc6ln1zsrz6q9w800000009bg00000000uhmm X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-31 16:23:35 UTC	707	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49862	150.171.28.10	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	525	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:35 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DFF1BABCD9C14CD7A8FC36A214933FF5 Ref B: DFW311000108019 Ref C: 2024-10-31T16:23:35Z Date: Thu, 31 Oct 2024 16:23:35 GMT Connection: close
2024-10-31 16:23:35 UTC	3783	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-31 16:23:35 UTC	8192	IN	Data Raw: 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 73 74 65 70 22 2c 22 63 68 65 63 6b 6f 75 74 5f 6f 70 74 69 6f 6e 22 5d 2c 65 78 63 65 70 74 69 6f 6e 3a 5b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 66 61 74 61 6c 22 5d 2c 67 65 6e 65 72 61 74 65 5f 6c 65 61 64 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 22 5d 2c 6c 6f 67 69 6e 3a 5b 22 6d 65 74 68 6f 64 22 5d 2c 70 61 67 65 5f 76 69 65 77 3a 5b 22 70 61 67 65 5f 74 69 74 6c 65 22 2c 22 70 61 67 65 5f 6c 6f 63 61 74 69 6f 6e 22 2c 22 70 61 67 65 5f 70 61 74 68 22 2c 22 72 65 70 22 2c 22 74 70 70 22 2c 22 67 74 6d 5f 74 61 67 5f 73 6f 75 72 63 65 22 2c 22 70 69 64 Data Ascii: rency","items","coupon","checkout_step","checkout_option"],exception:["description","fatal"],generate_lead:["revenue_value","currency","transaction_id"],login:["method"],page_view:["page_title","page_location","page_path","rep","tpp","gtm_tag_source","pid
2024-10-31 16:23:36 UTC	4033	IN	Data Raw: 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 31 3b 6f 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 21 31 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 22 29 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 6f 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 3d 3d 21 30 29 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 Data Ascii: etConfig.enableAutoSpaTracking=!1;o.enableAutoSpaTracking===!0&&(this.uetConfig.enableAutoSpaTracking=!0);this.uetConfig.disableContainer=!1;o.hasOwnProperty("disableContainer")&&(this.uetConfig.disableContainer=o.disableContainer===!0);o.hasOwnProperty("
2024-10-31 16:23:36 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-10-31 16:23:36 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-10-31 16:23:36 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-10-31 16:23:36 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-10-31 16:23:36 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49863	157.240.252.13	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	544	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:36 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-JSVXPndl' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 16:23:36 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 16:23:36 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-31 16:23:36 UTC	1491	IN	Data Raw: 66 28 68 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3a 68 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 2c 69 64 3a 62 7d 7d 69 66 28 66 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 2c 69 64 3a 62 7d 3b 69 66 28 66 3d 3d 3d 22 47 54 4d 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 Data Ascii: f(h!=null)return{domain_uri:c,event_type:d,extractor_config:h,extractor_type:"CONSTANT_VALUE",id:b}}if(f==="GLOBAL_VARIABLE")return{domain_uri:c,event_type:d,extractor_type:"GLOBAL_VARIABLE",id:b};if(f==="GTM")return{domain_uri:c,event_type:d,extractor_ty
2024-10-31 16:23:36 UTC	14893	IN	Data Raw: 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 66 69 6c 74 65 72 2c 64 3d 62 2e 6d 61 70 2c 65 3d 62 2e 72 65 64 75 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 Data Ascii: var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.filter,d=b.map,e=b.reduce;function g
2024-10-31 16:23:36 UTC	1500	IN	Data Raw: 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 43 6f 6f 6b 69 65 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d Data Ascii: SignalsFBEventsResolveLink");s=f.getFbeventsModules("SignalsPixelCookieUtils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=
2024-10-31 16:23:36 UTC	14884	IN	Data Raw: 6e 74 65 67 72 61 74 69 6f 6e 73 3a 5b 22 61 75 74 6f 6d 61 74 69 63 6d 61 74 63 68 69 6e 67 66 6f 72 70 61 72 74 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 5d 2c 43 6f 6d 6d 6f 6e 49 6e 63 6c 75 64 65 73 3a 5b 22 63 6f 6d 6d 6f 6e 69 6e 63 6c 75 64 65 73 22 5d 2c 44 65 66 61 75 6c 74 43 75 73 74 6f 6d 44 61 74 61 3a 5b 22 64 65 66 61 75 6c 74 63 75 73 74 6f 6d 64 61 74 61 22 5d 2c 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 3a 5b 22 63 6f 6f 6b 69 65 22 5d 2c 49 57 4c 42 6f 6f 74 73 74 72 61 70 70 65 72 3a 5b 22 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 2c 49 57 4c 50 61 72 61 6d 65 74 65 72 73 3a 5b 22 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 5d 2c 45 53 54 52 75 6c 65 45 6e 67 69 6e 65 3a 5b 22 65 73 74 72 75 6c 65 65 6e 67 69 6e Data Ascii: ntegrations:["automaticmatchingforpartnerintegrations"],CommonIncludes:["commonincludes"],DefaultCustomData:["defaultcustomdata"],FirstPartyCookies:["cookie"],IWLBootstrapper:["iwlbootstrapper"],IWLParameters:["iwlparameters"],ESTRuleuser:["estruleengin
2024-10-31 16:23:36 UTC	1500	IN	Data Raw: 66 20 67 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 67 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 68 3d 67 2e 75 6e 73 61 66 65 50 69 78 65 6c 2c 6a 3d 67 2e 75 6e 73 61 66 65 54 61 72 67 65 74 2c 6b 3d 65 28 68 2c 63 29 2c 6c 3d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 62 28 6a 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6b 21 3d 6e 75 6c 6c 26 26 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 Data Ascii: f g==="undefined"?"undefined":i(g))!=="object")return null;var h=g.unsafePixel,j=g.unsafeTarget,k=e(h,c),l=j instanceof Node?b(j):null;return k!=null&&l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModuleReg
2024-10-31 16:23:36 UTC	14884	IN	Data Raw: 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 63 2e 72 65 64 75 63 65 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 2c 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 73 73 52 61 74 65 3b 61 2e 6e 61 6d 65 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 2e 70 61 73 73 65 64 3d 65 28 29 3c 62 29 7d 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6e 28 74 68 69 73 2c 63 29 7d 68 28 63 2c 5b 7b 6b 65 79 3a 22 73 65 74 47 75 61 72 64 72 61 69 6c 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 64 28 63 2c 62 29 3b 69 66 28 63 21 3d 6e 75 6c 6c 29 7b 74 Data Ascii: entsModules("SignalsFBEventsUtils");c.reduce;var e=function(){return Math.random()},g={};function i(a){var b=a.passRate;a.name;b!=null&&(a.passed=e()<b)}c=function(){function c(){n(this,c)}h(c,[{key:"setGuardrails",value:function(c){c=d(c,b);if(c!=null){t
2024-10-31 16:23:36 UTC	1500	IN	Data Raw: 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 Data Ascii: esolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),fu
2024-10-31 16:23:36 UTC	14884	IN	Data Raw: 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 65 6e 64 70 6f 69 6e 74 73 3a 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 6f 69 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 75 73 65 50 61 74 68 43 6f 6f 6b 69 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 Data Ascii: on(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a=b.objectWithFields({endpoints:b.arrayOf(b.objectWithFields({targetDomain:b.allowNull(b.string()),endpoint:b.allowNull(b.string()),usePathCookie:b.allowNull(b["boolea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49865	57.128.74.65	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	402	OUT	GET /widget/status/1676623/dwzeNfFJka?rnd=0.3967468214786096 HTTP/1.1 Host: node-ya-10.jivosite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:36 UTC	470	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1728 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Max-Age: 1728000 Access-Control-Expose-Headers: X-Geoip, X-Botmode Cache-Control: no-cache, no-store, must-revalidate Content-Security-Policy: frame-ancestors 'none'; Pragma: no-cache X-Botmode: no X-Frame-Options: DENY X-Geoip: US;TX;Dallas
2024-10-31 16:23:36 UTC	713	IN	Data Raw: 7b 22 70 72 65 6d 69 75 6d 22 3a 74 72 75 65 2c 22 6d 61 69 6e 74 65 6e 61 6e 63 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 66 69 67 5f 75 70 64 61 74 65 64 5f 74 73 22 3a 31 37 32 39 31 33 34 35 30 33 2c 22 61 67 65 6e 74 73 22 3a 5b 7b 22 61 67 65 6e 74 5f 69 64 22 3a 37 31 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 53 74 61 6e 20 44 61 76 69 73 22 2c 22 74 69 74 6c 65 22 3a 22 54 72 61 76 65 6c 20 41 64 76 69 73 6f 72 22 2c 22 61 76 61 74 61 72 5f 75 72 6c 22 3a 22 31 36 37 36 36 32 33 2f 36 35 61 36 63 31 31 63 38 61 64 36 66 2e 6a 70 67 22 7d 2c 7b 22 61 67 65 6e 74 5f 69 64 22 3a 38 32 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 44 65 78 74 65 72 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6e 73 75 6c 74 61 6e 74 22 7d 2c 7b 22 61 67 65 6e 74 Data Ascii: {"premium":true,"maintenance":false,"config_updated_ts":1729134503,"agents":[{"agent_id":71,"display_name":"Stan Davis","title":"Travel Advisor","avatar_url":"1676623/65a6c11c8ad6f.jpg"},{"agent_id":82,"display_name":"Dexter","title":"Consultant"},{"agent
2024-10-31 16:23:36 UTC	1015	IN	Data Raw: 74 65 72 22 2c 22 74 69 74 6c 65 22 3a 22 54 72 61 76 65 6c 20 41 67 65 6e 74 22 2c 22 61 76 61 74 61 72 5f 75 72 6c 22 3a 22 31 36 37 36 36 32 33 2f 36 35 64 37 36 33 35 62 61 63 38 63 61 2e 6a 70 67 22 7d 2c 7b 22 61 67 65 6e 74 5f 69 64 22 3a 31 33 32 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 4f 6c 69 76 65 72 20 53 79 6b 65 73 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6e 73 75 6c 74 61 6e 74 22 2c 22 61 76 61 74 61 72 5f 75 72 6c 22 3a 22 31 36 37 36 36 32 33 2f 36 35 63 65 36 33 39 37 39 36 34 66 65 2e 6a 70 67 22 7d 2c 7b 22 61 67 65 6e 74 5f 69 64 22 3a 31 36 30 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 54 72 61 76 69 73 20 48 69 6c 6c 22 2c 22 74 69 74 6c 65 22 3a 22 54 72 61 76 65 6c 20 41 67 65 6e 74 22 2c 22 61 76 61 74 61 72 5f Data Ascii: ter","title":"Travel Agent","avatar_url":"1676623/65d7635bac8ca.jpg"},{"agent_id":132,"display_name":"Oliver Sykes","title":"Consultant","avatar_url":"1676623/65ce6397964fe.jpg"},{"agent_id":160,"display_name":"Travis Hill","title":"Travel Agent","avatar_

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-r1755647c66xdwzbrg67s9avs40000000aag0000000011hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:36 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49868	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 170621ef-f01e-003f-351f-28d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-17fbfdc98bblzxqcphe71tp4qw000000052g000000007ms6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:36 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:35 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1f235477-301e-003f-2c03-27266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-17fbfdc98bbwmxz5amc6q625w000000005pg0000000096dy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:36 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49860	81.163.20.5	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	853	OUT	GET /api/site/1.0/b8661a8a142e5b88a17b164fcd5e8589/init?referrer=https%3A%2F%2Ftravelbusinessclass.com%2F%3Futm_source%3Demail%26utm_medium%3Dcpc%26utm_campaign%3Doctober-deals%26utm_source%3DTravel%2BBusiness%2BClass%26utm_campaign%3D9e5cc08d2f-dec-gen-mess_COPY_01%26utm_medium%3Demail%26utm_term%3D0_9e8d82b582-9e5cc08d2f-593361445 HTTP/1.1 Host: cloud.roistat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:36 UTC	204	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2024-10-31 16:23:36 UTC	39	IN	Data Raw: 31 63 0d 0a 76 61 72 20 70 20 3d 20 22 50 72 6f 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 22 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 1cvar p = "Project not found";0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-17fbfdc98bbh7l5skzh3rekksc0000000b9000000000017x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:36 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d72005e7-a01e-0002-1a61-285074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-r1755647c66ss75qkr31zpy1kc00000009d0000000007078 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:36 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49871	5.101.37.37	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	558	OUT	GET /js/bundle_en_US.js?rand=1729685307 HTTP/1.1 Host: code.jivosite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:37 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 16:23:37 GMT Content-Type: application/javascript Content-Length: 1259386 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=86400 Etag: "6718c735-13377a" Last-Modified: Wed, 23 Oct 2024 09:51:49 GMT Vary: Accept-Encoding Via: 1.1 sharxy X-Geo-Shard: ya Cache: MISS X-Node: fr5-up-gc15 Accept-Ranges: bytes
2024-10-31 16:23:37 UTC	3697	IN	Data Raw: 5f 5f 6a 69 76 6f 42 75 6e 64 6c 65 4f 6e 4c 6f 61 64 28 22 77 69 6e 64 6f 77 2e 62 61 73 65 5f 6c 61 6e 67 70 61 63 6b 20 3d 20 7b 5c 22 62 6f 74 4c 69 73 74 50 69 63 6b 65 72 42 6c 6f 63 6b 5c 22 3a 5c 22 55 73 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 75 74 74 6f 6e 73 20 69 6e 20 63 68 61 74 20 74 6f 20 61 6e 73 77 65 72 5c 22 2c 5c 22 62 6f 74 54 72 61 6e 73 66 65 72 43 68 61 74 5c 22 3a 5c 22 41 67 65 6e 74 20 77 61 73 20 69 6e 76 69 74 65 64 20 74 6f 20 74 68 65 20 63 68 61 74 5c 22 2c 5c 22 62 75 73 69 6e 65 73 73 43 6f 70 79 72 69 67 68 74 5c 22 3a 5c 22 42 75 73 69 6e 65 73 73 20 4d 65 73 73 65 6e 67 65 72 20 62 79 20 7b 30 7d 5c 22 2c 5c 22 62 79 59 61 6e 64 65 78 5c 22 3a 5c 22 62 79 20 59 61 6e 64 65 78 5c 22 2c 5c 22 63 61 6c 6c 62 61 63 6b Data Ascii: __jivoBundleOnLoad("window.base_langpack = {\"botListPickerBlock\":\"Use one of the buttons in chat to answer\",\"botTransferChat\":\"Agent was invited to the chat\",\"businessCopyright\":\"Business Messenger by {0}\",\"byYandex\":\"by Yandex\",\"callback
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 20 64 65 6c 69 76 65 72 65 64 5c 22 2c 5c 22 65 75 6c 61 50 6f 70 75 70 43 68 65 63 6b 54 65 78 74 5c 22 3a 5c 22 49 20 61 63 63 65 70 74 5c 22 2c 5c 22 65 75 6c 61 50 6f 70 75 70 4c 69 6e 6b 54 65 78 74 5c 22 3a 5c 22 74 68 65 20 74 65 72 6d 73 20 61 6e 64 20 63 6f 6e 64 69 74 69 6f 6e 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 70 72 6f 63 65 73 73 69 6e 67 5c 22 2c 5c 22 65 75 6c 61 5f 63 75 73 74 6f 6d 5f 61 67 72 65 65 6d 65 6e 74 5c 22 3a 5c 22 49 20 61 67 72 65 65 20 74 68 61 74 20 6d 79 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 2c 20 70 72 6f 76 69 64 65 64 20 76 69 61 20 63 68 61 74 2c 20 77 69 6c 6c 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 66 6f 72 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 72 65 63 65 69 76 69 6e 67 20 6f 6e Data Ascii: delivered\",\"eulaPopupCheckText\":\"I accept\",\"eulaPopupLinkText\":\"the terms and conditions of personal data processing\",\"eula_custom_agreement\":\"I agree that my personal data, provided via chat, will be processed for the purpose of receiving on
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 70 72 65 63 68 61 74 54 65 78 74 32 5c 22 3a 5c 22 48 65 79 2c 20 49 20 6e 65 65 64 20 73 6f 6d 65 20 61 73 73 69 73 74 61 6e 63 65 2e 5c 22 2c 5c 22 70 72 65 63 68 61 74 54 65 78 74 33 5c 22 3a 5c 22 48 69 2c 20 63 61 6e 20 79 6f 75 20 67 75 69 64 65 20 6d 65 3f 5c 22 2c 5c 22 70 72 6f 61 63 74 69 76 65 52 65 70 6c 79 54 69 74 6c 65 5c 22 3a 5c 22 43 68 61 74 20 72 65 70 6c 79 20 74 69 6d 65 5c 22 2c 5c 22 72 61 74 65 46 6f 72 6d 43 6f 6d 6d 65 6e 74 54 69 74 6c 65 5c 22 3a 5c 22 59 6f 75 72 20 63 6f 6d 6d 65 6e 74 5c 22 2c 5c 22 72 61 74 65 46 6f 72 6d 46 69 6e 69 73 68 54 65 78 74 5c 22 3a 5c 22 57 65 20 61 72 65 20 67 6c 61 64 20 74 68 61 74 20 79 6f 75 20 6c 69 6b 65 64 20 69 74 5c 22 2c 5c 22 72 61 74 65 46 6f 72 6d 46 69 6e 69 73 68 54 65 78 74 4e Data Ascii: prechatText2\":\"Hey, I need some assistance.\",\"prechatText3\":\"Hi, can you guide me?\",\"proactiveReplyTitle\":\"Chat reply time\",\"rateFormCommentTitle\":\"Your comment\",\"rateFormFinishText\":\"We are glad that you liked it\",\"rateFormFinishTextN
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 61 62 6c 65 53 74 61 74 65 49 6e 76 61 72 69 61 6e 74 4d 69 64 64 6c 65 77 61 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 2c 63 72 65 61 74 65 53 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 7d 2c 63 72 65 61 74 65 53 74 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 4d 54 7d 2c 63 75 72 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 56 6b 7d 2c 66 69 6e 64 4e 6f 6e 53 65 72 69 61 6c 69 7a 61 62 6c 65 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 66 72 65 65 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 76 56 7d 2c 67 65 74 44 65 66 61 75 6c 74 4d 69 64 64 6c 65 77 61 72 65 3a 66 75 6e 63 74 69 Data Ascii: ableStateInvariantMiddleware:function(){return F},createSlice:function(){return q},createStore:function(){return o.MT},current:function(){return r.Vk},findNonSerializableValue:function(){return N},freeze:function(){return r.vV},getDefaultMiddleware:functi
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5c 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 5c 22 29 3b 66 6f 72 28 3b 61 3b 29 74 72 79 7b 69 66 28 6e 3d 31 2c 72 26 26 28 6f 3d 32 26 69 5b 30 5d 3f 72 2e 72 65 74 75 72 6e 3a 69 5b 30 5d 3f 72 2e 74 68 72 6f 77 7c 7c 28 28 6f 3d 72 2e 72 65 74 75 72 6e 29 26 26 6f 2e 63 61 6c 6c 28 72 29 2c 30 29 3a 72 2e 6e 65 78 74 29 26 26 21 28 6f 3d 6f 2e 63 61 6c 6c 28 72 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6f 3b 73 77 69 74 63 68 28 72 3d 30 2c 6f 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 6f 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 Data Ascii: {return function(i){if(n)throw new TypeError(\"Generator is already executing.\");for(;a;)try{if(n=1,r&&(o=2&i[0]?r.return:i[0]?r.throw\|\|((o=r.return)&&o.call(r),0):r.next)&&!(o=o.call(r,i[1])).done)return o;switch(r=0,o&&(i=[2&i[0],o.value]),i[0]){case 0
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 6f 3d 5b 5d 29 2c 21 6e 28 65 29 29 72 65 74 75 72 6e 7b 6b 65 79 50 61 74 68 3a 74 7c 7c 5c 22 3c 72 6f 6f 74 3e 5c 22 2c 76 61 6c 75 65 3a 65 7d 3b 69 66 28 5c 22 6f 62 6a 65 63 74 5c 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 73 3d 6e 75 6c 6c 21 3d 72 3f 72 28 65 29 3a 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 29 2c 6c 3d 6f 2e 6c 65 6e 67 74 68 3e 30 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 76 61 72 20 75 3d 74 3f 74 2b 5c 22 2e 5c 22 2b 65 3a 65 3b 69 66 28 6c 26 26 6f 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 Data Ascii: o=[]),!n(e))return{keyPath:t\|\|\"<root>\",value:e};if(\"object\"!=typeof e\|\|null===e)return!1;if(null==i?void 0:i.has(e))return!1;for(var s=null!=r?r(e):Object.entries(e),l=o.length>0,u=function(e,s){var u=t?t+\".\"+e:e;if(l&&o.some((function(e){return e i
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 75 28 29 29 2c 6e 28 65 2c 74 29 7d 2c 61 63 74 69 6f 6e 73 3a 6c 2c 63 61 73 65 52 65 64 75 63 65 72 73 3a 61 2c 67 65 74 49 6e 69 74 69 61 6c 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 75 28 29 29 2c 6e 2e 67 65 74 49 6e 69 74 69 61 6c 53 74 61 74 65 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 48 28 6e 29 3f 65 28 6e 2e 70 61 79 6c 6f 61 64 2c 74 29 3a 65 28 6e 2c 74 29 7d 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6d 76 29 28 74 29 3f 28 6f 28 74 29 2c 74 29 3a 28 30 2c 72 2e 5a 50 29 28 74 2c 6f 29 7d Data Ascii: :function(e,t){return n\|\|(n=u()),n(e,t)},actions:l,caseReducers:a,getInitialState:function(){return n\|\|(n=u()),n.getInitialState()}}}function Z(e){return function(t,n){var o=function(t){H(n)?e(n.payload,t):e(n,t)};return(0,r.mv)(t)?(o(t),t):(0,r.ZP)(t,o)}
2024-10-31 16:23:37 UTC	4091	IN	Data Raw: 5d 3b 5c 22 73 74 72 69 6e 67 5c 22 3d 3d 74 79 70 65 6f 66 20 65 5b 6f 5d 26 26 28 74 5b 6f 5d 3d 65 5b 6f 5d 29 7d 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 53 74 72 69 6e 67 28 65 29 7d 7d 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 57 28 65 2b 5c 22 2f 66 75 6c 66 69 6c 6c 65 64 5c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 7b 70 61 79 6c 6f 61 64 3a 65 2c 6d 65 74 61 3a 44 28 54 28 7b 7d 2c 72 7c 7c 7b 7d 29 2c 7b 61 72 67 3a 6e 2c 72 65 71 75 65 73 74 49 64 3a 74 2c 72 65 71 75 65 73 74 53 74 61 74 75 73 3a 5c 22 66 75 6c 66 69 6c 6c 65 64 5c 22 7d 29 7d 7d 29 29 2c 6f 3d 57 28 65 2b 5c 22 2f 70 65 6e 64 69 6e Data Ascii: ];\"string\"==typeof e[o]&&(t[o]=e[o])}return t}return{message:String(e)}},ie=function(){function e(e,t,n){var r=W(e+\"/fulfilled\",(function(e,t,n,r){return{payload:e,meta:D(T({},r\|\|{}),{arg:n,requestId:t,requestStatus:\"fulfilled\"})}})),o=W(e+\"/pendin
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 65 74 75 72 6e 20 63 65 28 65 2c 5b 5c 22 66 75 6c 66 69 6c 6c 65 64 5c 22 5d 29 7d 3a 64 65 28 65 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 66 75 6c 66 69 6c 6c 65 64 7d 29 29 3b 72 65 74 75 72 6e 20 6c 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 28 74 29 7d 3a 67 65 28 29 28 65 5b 30 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 28 65 2c 5b 5c 22 70 Data Ascii: eturn ce(e,[\"fulfilled\"])}:de(e)?function(t){var n=e.map((function(e){return e.fulfilled}));return le.apply(void 0,n)(t)}:ge()(e[0])}function me(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return 0===e.length?function(e){return ce(e,[\"p
2024-10-31 16:23:37 UTC	4096	IN	Data Raw: 69 61 6c 69 7a 65 64 5c 22 29 7d 7d 7d 28 65 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 65 6c 65 74 65 28 65 2e 69 64 29 7d 2c 6e 2e 73 65 74 28 65 2e 69 64 2c 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 2c 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 61 6e 63 65 6c 41 63 74 69 76 65 29 26 26 52 65 28 65 29 7d 7d 28 74 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 78 65 28 65 29 2c 6e 3d 74 2e 74 79 70 65 2c 72 3d 74 2e 65 66 66 65 63 74 2c 6f 3d 74 2e 70 72 65 64 69 63 61 74 65 2c 69 3d 61 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: ialized\")}}}(e)),function(e){return e.unsubscribe=function(){return n.delete(e.id)},n.set(e.id,e),function(t){e.unsubscribe(),(null==t?void 0:t.cancelActive)&&Re(e)}}(t)},l=function(e){var t=xe(e),n=t.type,r=t.effect,o=t.predicate,i=a((function(e){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49874	64.233.166.154	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	862	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-191980430-1&cid=1452859248.1730391815&jid=652950882&gjid=1557361127&_gid=13179984.1730391815&_u=YGBAiEABBAAAAGAAI~&z=1880446612 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://travelbusinessclass.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://travelbusinessclass.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:36 UTC	998	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://travelbusinessclass.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Thu, 31 Oct 2024 16:23:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 16:23:36 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49875	13.107.246.45	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	417	OUT	GET /tag/ibhi9zl1ul HTTP/1.1 Host: www.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=52e27ffa1b0b48c4952d581ef148332a.20241031.20251031
2024-10-31 16:23:36 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: application/x-javascript Content-Length: 707 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:bdfb7149-d2ee-45f0-9a22-f0b1c5035608 x-azure-ref: 20241031T162336Z-16849878b78xblwksrnkakc08w000000091000000000cwpa X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-31 16:23:36 UTC	707	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49876	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:37 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-r1755647c66w6f6b5182nn0u0400000008bg000000000q6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:37 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49878	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f60f2227-501e-0064-5d90-271f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-17fbfdc98bbx59j5xd9kpbrs84000000096g000000008eph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:37 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49877	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 16:23:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 16:23:36 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T162336Z-r1755647c665dwkwce4e7gadz00000000aqg000000000y3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 16:23:37 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49879	150.171.27.10	443	2192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 16:23:36 UTC	342	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 16:23:37 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E906F2DE439543CAA5A3C4D67ACD05E1 Ref B: DFW311000104025 Ref C: 2024-10-31T16:23:36Z Date: Thu, 31 Oct 2024 16:23:36 GMT Connection: close
2024-10-31 16:23:37 UTC	2813	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-31 16:23:37 UTC	8192	IN	Data Raw: 3a 22 6e 75 6d 62 65 72 22 2c 62 65 61 63 6f 6e 3a 22 67 76 22 7d 2c 73 63 72 65 65 6e 5f 6e 61 6d 65 3a 7b 7d 2c 73 65 61 72 63 68 5f 74 65 72 6d 3a 7b 7d 2c 73 68 69 70 70 69 6e 67 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 74 61 78 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 3a 7b 7d 2c 72 65 70 3a 7b 7d 2c 76 69 64 3a 7b 7d 2c 74 70 70 3a 7b 7d 2c 67 74 6d 5f 74 61 67 5f 73 6f 75 72 63 65 3a 7b 7d 2c 69 74 65 6d 73 3a 7b 74 79 70 65 3a 22 61 72 72 61 79 22 7d 2c 22 69 74 65 6d 73 2e 62 72 61 6e 64 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 63 61 74 65 67 6f 72 79 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 63 72 65 61 74 69 76 65 5f 6e 61 6d 65 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 63 72 65 61 74 69 76 65 5f 73 Data Ascii: :"number",beacon:"gv"},screen_name:{},search_term:{},shipping:{type:"number"},tax:{type:"number"},transaction_id:{},rep:{},vid:{},tpp:{},gtm_tag_source:{},items:{type:"array"},"items.brand":{},"items.category":{},"items.creative_name":{},"items.creative_s
2024-10-31 16:23:37 UTC	5003	IN	Data Raw: 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 21 31 3b 6f 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 61 6c 6c 52 65 70 3d 21 31 3b 6f 2e 61 6c 6c 52 65 70 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 61 6c 6c 52 65 70 3d 21 30 29 3b 6c 3d 22 5f 75 65 74 6d 73 64 6e 73 22 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6d 73 44 6e 73 43 6f 6f 6b 69 65 22 29 26 26 6f 2e 6d 73 44 6e 73 43 6f 6f 6b 69 65 26 26 74 79 70 65 6f 66 20 6f 2e 6d 73 44 6e 73 43 6f 6f 6b 69 65 3d 3d 22 73 74 72 69 6e 67 Data Ascii: onfig.removeQueryFromUrls=!1;o.removeQueryFromUrls===!0&&(this.uetConfig.removeQueryFromUrls=!0);this.uetConfig.allRep=!1;o.allRep===!0&&(this.uetConfig.allRep=!0);l="_uetmsdns";o.hasOwnProperty("msDnsCookie")&&o.msDnsCookie&&typeof o.msDnsCookie=="string
2024-10-31 16:23:37 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-10-31 16:23:37 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-10-31 16:23:37 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-10-31 16:23:37 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-10-31 16:23:37 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Target ID:	0
Start time:	12:23:02
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:23:06
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:23:08
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	12:23:25
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4108 --field-trial-handle=2072,i,18075854875015856992,12188994716731480971,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Windows Analysis Report
https://travelbusinessclass.us5.list-manage.com/track/click?u=73691921228d796358244391d&id=cb2749c3a0&e=3ee138df9b