Edit tour

Windows Analysis Report
Benefits_Update_2024.pdf

Overview

General Information

Sample name:	Benefits_Update_2024.pdf
Analysis ID:	1557515
MD5:	76ce69deb34db183f44a90e13b5f2c59
SHA1:	de1e681e6159890887d07d4fc7ff8bfdd0730a0f
SHA256:	336352ca66331802d8c77c2aa747bf99746465e442de7ec458d5b829478bad80
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

IP address seen in connection with other malware

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Classification

Process Tree

System is w7x64

AcroRd32.exe (PID: 3464 cmdline: "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\Benefits_Update_2024.pdf" MD5: 2F8D93826B8CBF9290BC57535C7A6817)

RdrCEF.exe (PID: 3632 cmdline: "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043 MD5: 326A645391A97C760B60C558A35BB068)

chrome.exe (PID: 1472 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "https://lnk.ie/7469O/e=" MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 3284 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1416 --field-trial-handle=1240,i,15366321716962305651,11801733001931014569,131072 /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

cleanup

Sigma Signatures

Sigma detected: Modification of IE Registry Settings

Source: Registry Key set

Author: frack113: Data: Details: 46 00 00 00 2A 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 C0 A8 02 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe, ProcessId: 3464, TargetObject: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Source: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw	HTTP Parser: No favicon
Source: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw	HTTP Parser: No favicon
Source: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1#chrome_update_sse3&zippy=%2Cwindows	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1#chrome_update_sse3&zippy=%2Cwindows	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1#chrome_update_sse3&zippy=%2Cwindows	HTTP Parser: No favicon

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1706484848	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1706484848\model-info.pb	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1706484848\model.tflite	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1585668192	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1585668192\model-info.pb	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1585668192\model.tflite	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1549436564	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1549436564\model-info.pb	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1549436564\model.tflite	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1472_1854297197	Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

Directory queried: number of queries: 1010

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: lnk.ie to https://redirect-120685500130121.zerobot.org/redirect?upn=b3znekezykxvsy9kdghqqw
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: lnk.ie to https://redirect-120685500130121.zerobot.org/redirect?upn=b3znekezykxvsy9kdghqqw

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: global traffic	HTTP traffic detected: GET /7469O/e= HTTP/1.1Host: lnk.ieConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect?upn=b3ZNekEzYkxvSy9KdGhQQw HTTP/1.1Host: redirect-120685500130121.zerobot.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7469O/e= HTTP/1.1Host: lnk.ieConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=xk1szzlyx0fns5uy1x0hthty
Source: global traffic	HTTP traffic detected: GET /redirect?upn=b3ZNekEzYkxvSy9KdGhQQw HTTP/1.1Host: redirect-120685500130121.zerobot.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-full-version: "109.0.5414.120"sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "0.1.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Not_A Brand";v="99.0.0.0", "Google Chrome";v="109.0.5414.120", "Chromium";v="109.0.5414.120"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8e4733e18ee24790 HTTP/1.1Host: redirect-120685500130121.zerobot.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "109.0.5414.120"sec-ch-ua-platform-version: "0.1.0"sec-ch-ua-full-version-list: "Not_A Brand";v="99.0.0.0", "Google Chrome";v="109.0.5414.120", "Chromium";v="109.0.5414.120"sec-ch-ua-bitness: "64"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw&__cf_chl_rt_tk=DhMu7jS_FU2ufxAYvvvNtHiQAb8PbfaOxLvHNwtGuio-1731924961-1.0.1.1-Pmsh4l5MyD9fbaAPePAxbHJlIZ2ybma0EH0c8fbjFVIAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8e4733e18ee24790 HTTP/1.1Host: redirect-120685500130121.zerobot.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: redirect-120685500130121.zerobot.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "109.0.5414.120"sec-ch-ua-platform-version: "0.1.0"sec-ch-ua-full-version-list: "Not_A Brand";v="99.0.0.0", "Google Chrome";v="109.0.5414.120", "Chromium";v="109.0.5414.120"sec-ch-ua-bitness: "64"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js?onload=clJo2&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"Origin: https://redirect-120685500130121.zerobot.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1213075623:1731923031:IM7zHx7btM8cpvqoTXGBRT2jhn4ACFmouUGLaATwKkw/8e4733e18ee24790/yYXUjRHcmsMssvX_1rGjOZKXdjHe494ZESvPC9d8YNY-1731924961-1.2.1.1-42QdKm5Y4Wx7cA21XRK_vJ76MYaRBnV.oEG6TpYZxD2VhJhP4GEKtkunEohPFP88 HTTP/1.1Host: redirect-120685500130121.zerobot.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js?onload=clJo2&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e4733fe9e3f6b4c&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e4733fe9e3f6b4c&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/796757696:1731923123:q3MLDS30_WAumj0Jg-MuaUKDLVNQf7CvdHGorhcb5i8/8e4733fe9e3f6b4c/u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8e4733fe9e3f6b4c/1731924968994/DaI4FYDoYFg-IhO HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8e4733fe9e3f6b4c/1731924968995/04ef6a44f7d4e83bcbe7a77d2e7ba1336b6ef580de7b7d96d2b45cf36395934f/Q89i320ItIIdw8- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8e4733fe9e3f6b4c/1731924968994/DaI4FYDoYFg-IhO HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/796757696:1731923123:q3MLDS30_WAumj0Jg-MuaUKDLVNQf7CvdHGorhcb5i8/8e4733fe9e3f6b4c/u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chrome/?p=unsupported_windows HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962
Source: global traffic	HTTP traffic detected: GET /chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1 HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962
Source: global traffic	HTTP traffic detected: GET /gv4UzxwBWVHxxyY26lRgv7WIeFfZZSSCGe5vUBZdm7ePRpUvmf_5Cs23ZTgETaA2kyU4=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gv4UzxwBWVHxxyY26lRgv7WIeFfZZSSCGe5vUBZdm7ePRpUvmf_5Cs23ZTgETaA2kyU4=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; _ga=GA1.1.775560641.1731925041; NID=519=a2dANAsOciDzyACRGriwiB_mYmzXSEL7ObExjj4nRp5hNwiAPn-02YgIj19CurhsFfY4eqc5uUsKdjetN0Iaoo0p9x0PDGGjrHl08nG4adf_phzKHr7FXiEVwk05pnOSdiBeTOMGrMWUvKoebW_UzSBnOfeLC34jNtTXAQhpqpsOhTtuchOv5ES4vWgdRcn3
Source: global traffic	HTTP traffic detected: GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714256,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,10803957,10803964,10803965,97601634 HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; _ga=GA1.1.775560641.1731925041; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; _ga=GA1.3.775560641.1731925041; _gid=GA1.3.1723734831.1731925044; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; _ga=GA1.3.775560641.1731925041; _gid=GA1.3.1723734831.1731925044; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; _ga=GA1.3.775560641.1731925041; _gid=GA1.3.1723734831.1731925044; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG

Source: chromecache_163.5.dr	String found in binary or memory: ;function Kr(){this.part="snippet,id,contentDetails,localizations,statistics";this.Jk=new ur({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_163.5.dr	String found in binary or memory: ;var dga=Ga(["//www.youtube.com/player_api"]),ega=lo(dga),Lr=[],fga=!1;function Mr(){if(!fga){window.onYouTubeIframeAPIReady=gga;var a=yp("SCRIPT");Tn(a,ega);document.head.appendChild(a);fga=!0}} equals www.youtube.com (Youtube)
Source: chromecache_163.5.dr	String found in binary or memory: ;var ora=Ga(["//www.youtube.com/player_api"]),FA=4/3,pra=16/9,GA={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function HA(a){var b=a.Gb;var c=a.Tl===void 0?!1:a.Tl;a=a.playerVars===void 0?GA:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Gb=b;this.Tl=c;this.id=this.Gb.getId();this.playerVars=a;b=this.Gb.mediumThumbnail.width;c=this.Gb.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===FA?FA:pra:FA;this.watch(this.Gb)} equals www.youtube.com (Youtube)
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: Ef=y(["https://sandbox.google.com/tools/feedback/"]),Ff=y(["https://www.google.cn/tools/feedback/"]),Gf=y(["https://help.youtube.com/tools/feedback/"]),Hf=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),If=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Jf=y(["https://localhost.corp.google.com/inapp/"]),Kf=y(["https://localhost.proxy.googlers.com/inapp/"]),Lf=U(nf),Mf=[U(of),U(pf)],Nf=[U(qf),U(rf),U(sf),U(tf),U(uf),U(vf),U(wf),U(xf),U(yf),U(zf)],Of=[U(Af),U(Bf)],Pf= equals www.youtube.com (Youtube)
Source: chromecache_163.5.dr	String found in binary or memory: Va=Va.split("-")[0].toLowerCase();if(Qa===Va\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Ea(0);ap("youtube_video_model/load/success");return Ra(c,0)}Sa(c);a.state=3;a.Ea(0);ap("youtube_video_model/load/failure");Oa(c)})} equals www.youtube.com (Youtube)
Source: chromecache_163.5.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_163.5.dr	String found in binary or memory: function LA(a){if(Io())z().rs==2?window.YT&&window.YT.Player?NA(a,a.o):(Lr.push(function(f){NA(this,f)}.bind(a,a.o)),Mr()):Po("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_155.5.dr	String found in binary or memory: return b}FD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),HD=["www.youtube.com","www.youtube-nocookie.com"],ID,JD=!1; equals www.youtube.com (Youtube)
Source: chromecache_153.5.dr, chromecache_166.5.dr, chromecache_152.5.dr	String found in binary or memory: return b}yD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),AD=["www.youtube.com","www.youtube-nocookie.com"],BD,CD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: lnk.ie
Source: global traffic	DNS traffic detected: DNS query: redirect-120685500130121.zerobot.org
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=fMXGztVDTfo5VJ9XHTLbXDTavgJy5XUjpyHWEnqf%2F85w8pVjGDb%2BzUT3xKaCc%2F8qQ4YINg03%2F6GOm492uWCCdcY8qG9QBMEz2NhBPYDZGj8FlCIQFMTOVzGBr2zsjiniUvdRKuh0ZA0E%2B7sdbqH9l8nYaKX2qXM%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 441Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 18 Nov 2024 10:16:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 18 Nov 2024 10:16:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 18 Nov 2024 10:16:05 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=df%2F8fu3RiyO1yB3gyllZEacMqTMukUckFkOmc6AVueDzVr1oUL0%2FAr6ZgFtpkx4Ue7Indyifd3z3LtXDxUZG3AmkpHJ6omOYBy0tTLbSNZH4Tv4AEt62urJo82MOTs7CUqOTXV3e21jSXu3rihYM9P8LVXtoYzc%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8e4733f75dae4868-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1900&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1512&delivery_rate=1498189&cwnd=251&unsent_bytes=0&cid=750483a2346b3054&ts=782&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 18 Nov 2024 10:16:05 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: yVKpneHNDTry/ElAFVspVVk46LXVp+vcgGM=$2OSUUAG2qkoA5FOCReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mUXmtGvKJOrYv9wz5YOqAubIlb9hhe2quXQaNSMYfh%2F5Qw6QQVSFBQBBNHzxD6t4FbHctZ5%2BsWBLPliZoCCGOrr6LlbsgaxXaP%2B0SCSAvtoTIiobD3vRa%2B%2Bmwp5R%2ByZOu%2B8eK2y1E8RrIcyy3NOnBBFNmVx7sb4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8e4733fd691c316e-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1295&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1188&delivery_rate=2162808&cwnd=222&unsent_bytes=0&cid=bb0a5c6cab204c79&ts=147&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 18 Nov 2024 10:16:10 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: Yb4/ev2UflFgQovTekvq5QpM78GsBm6ZVUs=$gB6c75JdDvTkVh6rcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8e4734196ac5315a-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 18 Nov 2024 10:16:13 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: CyfMt5NSC4s95VgzVIeDiEZL0YiYZmlgYf4=$6l+mbpIC6HT+diaVServer: cloudflareCF-RAY: 8e47342c9c7be9ce-DFWalt-svc: h3=":443"; ma=86400

Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_163.5.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_133.5.dr, chromecache_137.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_133.5.dr, chromecache_137.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_166.5.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_158.5.dr, chromecache_134.5.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_133.5.dr, chromecache_137.5.dr, chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_141.5.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_153.5.dr, chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_133.5.dr, chromecache_137.5.dr, chromecache_163.5.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_163.5.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_163.5.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_133.5.dr, chromecache_137.5.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_133.5.dr, chromecache_137.5.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_141.5.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_168.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.10.w
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.11.w
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.3.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.4.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.5.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.6.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.7.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.8.wo
Source: chromecache_122.5.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.9.wo
Source: chromecache_141.5.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_163.5.dr	String found in binary or memory: https://guidebooks.google.com
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: Benefits_Update_2024.pdf	String found in binary or memory: https://lnk.ie/7469O/e=)
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_163.5.dr	String found in binary or memory: https://moltron-pa.clients6.google.com
Source: chromecache_163.5.dr	String found in binary or memory: https://myaccount.google.com/privacypolicy?hl=
Source: chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_153.5.dr, chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_163.5.dr	String found in binary or memory: https://play.google.com
Source: chromecache_163.5.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_137.5.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_133.5.dr, chromecache_137.5.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_163.5.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_163.5.dr	String found in binary or memory: https://policies.google.com/terms?hl=
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_163.5.dr	String found in binary or memory: https://schema.org
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_141.5.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_153.5.dr, chromecache_166.5.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_134.5.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_163.5.dr	String found in binary or memory: https://support.google.com
Source: chromecache_141.5.dr, chromecache_163.5.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_163.5.dr	String found in binary or memory: https://support.google.com/chrome/answer/95346
Source: chromecache_163.5.dr	String found in binary or memory: https://support.google.com/communities/answer/7424249
Source: chromecache_163.5.dr	String found in binary or memory: https://support.google.com/communities/answer/7425194
Source: chromecache_163.5.dr	String found in binary or memory: https://support.google.com/embed/tagging/install
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_163.5.dr	String found in binary or memory: https://supporttagging-autopush.sandbox.google.com/embed/tagging/install
Source: chromecache_158.5.dr, chromecache_134.5.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_153.5.dr, chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_133.5.dr, chromecache_137.5.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_152.5.dr, chromecache_155.5.dr, chromecache_163.5.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_158.5.dr, chromecache_134.5.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_158.5.dr, chromecache_134.5.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_158.5.dr, chromecache_134.5.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr, chromecache_163.5.dr	String found in binary or memory: https://www.google.com
Source: chromecache_163.5.dr	String found in binary or memory: https://www.google.com/accounts/TOS
Source: chromecache_158.5.dr, chromecache_134.5.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_163.5.dr	String found in binary or memory: https://www.google.com/chrome
Source: chromecache_163.5.dr	String found in binary or memory: https://www.google.com/intl/en/chrome/browser/desktop/index.html?standalone=1
Source: chromecache_163.5.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=
Source: chromecache_163.5.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=explicit&onload=
Source: chromecache_141.5.dr, chromecache_163.5.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_144.5.dr, chromecache_141.5.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_141.5.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_153.5.dr, chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_137.5.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_137.5.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_163.5.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3
Source: chromecache_163.5.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3/videos?part=snippet%2C
Source: chromecache_155.5.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_158.5.dr, chromecache_134.5.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_163.5.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Source: chromecache_163.5.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_140.5.dr, chromecache_145.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_163.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_163.5.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_163.5.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_141.5.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_153.5.dr, chromecache_166.5.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_163.5.dr	String found in binary or memory: https://www.youtube.com/embed/

Source: unknown	Network traffic detected: HTTP traffic on port 49265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49189
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49180
Source: unknown	Network traffic detected: HTTP traffic on port 49279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49178
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49290
Source: unknown	Network traffic detected: HTTP traffic on port 49282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49205
Source: unknown	Network traffic detected: HTTP traffic on port 49267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49168
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49162
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49280
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49279
Source: unknown	Network traffic detected: HTTP traffic on port 49295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49276
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49275
Source: unknown	Network traffic detected: HTTP traffic on port 49289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49271
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49263
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49260
Source: unknown	Network traffic detected: HTTP traffic on port 49246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49259
Source: unknown	Network traffic detected: HTTP traffic on port 49293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49258
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49257
Source: unknown	Network traffic detected: HTTP traffic on port 49163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49254
Source: unknown	Network traffic detected: HTTP traffic on port 49287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49253
Source: unknown	Network traffic detected: HTTP traffic on port 49203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49246
Source: unknown	Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49240
Source: unknown	Network traffic detected: HTTP traffic on port 49263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49236
Source: unknown	Network traffic detected: HTTP traffic on port 49291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49234
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49194
Source: unknown	Network traffic detected: HTTP traffic on port 49201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49190
Source: unknown	Network traffic detected: HTTP traffic on port 49280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49228

Source: classification engine

Classification label: mal48.winPDF@35/110@34/17

Source: Benefits_Update_2024.pdf	Initial sample: https://lnk.ie/7469O/e=
Source: Benefits_Update_2024.pdf	Initial sample: https://lnk.ie/7469o/e=

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\ChromiumTemp1472_1706484848

Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File created: C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons

Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File created: C:\Users\user\AppData\Local\Temp\acrord32_sbx

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\Benefits_Update_2024.pdf"
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "https://lnk.ie/7469O/e="
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1416 --field-trial-handle=1240,i,15366321716962305651,11801733001931014569,131072 /prefetch:8
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1416 --field-trial-handle=1240,i,15366321716962305651,11801733001931014569,131072 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1706484848	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1706484848\model-info.pb	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1706484848\model.tflite	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1585668192	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1585668192\model-info.pb	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1585668192\model.tflite	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1549436564	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1549436564\model-info.pb	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\ChromiumTemp1472_1549436564\model.tflite	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1472_1854297197	Jump to behavior

Source: Benefits_Update_2024.pdf	Initial sample: PDF keyword /JS count = 0
Source: Benefits_Update_2024.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Benefits_Update_2024.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

Directory queried: number of queries: 1010

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	3 Masquerading	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://redirect-120685500130121.zerobot.org/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8e4733e18ee24790	0%	Avira URL Cloud	safe
https://redirect-120685500130121.zerobot.org/cdn-cgi/challenge-platform/h/b/flow/ov1/1213075623:1731923031:IM7zHx7btM8cpvqoTXGBRT2jhn4ACFmouUGLaATwKkw/8e4733e18ee24790/yYXUjRHcmsMssvX_1rGjOZKXdjHe494ZESvPC9d8YNY-1731924961-1.2.1.1-42QdKm5Y4Wx7cA21XRK_vJ76MYaRBnV.oEG6TpYZxD2VhJhP4GEKtkunEohPFP88	0%	Avira URL Cloud	safe
https://redirect-120685500130121.zerobot.org/favicon.ico	0%	Avira URL Cloud	safe
https://lnk.ie/7469O/e=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
redirect-120685500130121.zerobot.org	172.67.189.16	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
play.google.com	172.217.23.110	true	false	high
plus.l.google.com	216.58.206.78	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	172.217.16.196	true	false	high
support.google.com	172.217.16.206	true	false	high
lnk.ie	23.101.59.196	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.186.129	true	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=fMXGztVDTfo5VJ9XHTLbXDTavgJy5XUjpyHWEnqf%2F85w8pVjGDb%2BzUT3xKaCc%2F8qQ4YINg03%2F6GOm492uWCCdcY8qG9QBMEz2NhBPYDZGj8FlCIQFMTOVzGBr2zsjiniUvdRKuh0ZA0E%2B7sdbqH9l8nYaKX2qXM%3D	false		high
https://www.google.com/generate_204	false		high
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome	false		high
https://a.nel.cloudflare.com/report/v4?s=df%2F8fu3RiyO1yB3gyllZEacMqTMukUckFkOmc6AVueDzVr1oUL0%2FAr6ZgFtpkx4Ue7Indyifd3z3LtXDxUZG3AmkpHJ6omOYBy0tTLbSNZH4Tv4AEt62urJo82MOTs7CUqOTXV3e21jSXu3rihYM9P8LVXtoYzc%3D	false		high
https://redirect-120685500130121.zerobot.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e4733fe9e3f6b4c&lang=auto	false		high
https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://redirect-120685500130121.zerobot.org/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8e4733e18ee24790	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=mUXmtGvKJOrYv9wz5YOqAubIlb9hhe2quXQaNSMYfh%2F5Qw6QQVSFBQBBNHzxD6t4FbHctZ5%2BsWBLPliZoCCGOrr6LlbsgaxXaP%2B0SCSAvtoTIiobD3vRa%2B%2Bmwp5R%2ByZOu%2B8eK2y1E8RrIcyy3NOnBBFNmVx7sb4%3D	false		high
https://lh3.googleusercontent.com/gv4UzxwBWVHxxyY26lRgv7WIeFfZZSSCGe5vUBZdm7ePRpUvmf_5Cs23ZTgETaA2kyU4=w36-h36	false		high
https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1#chrome_update_sse3&zippy=%2Cwindows	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/	false		high
https://play.google.com/log?format=json&hasfast=true	false		high
https://support.google.com/apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714256,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,10803957,10803964,10803965,97601634	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/796757696:1731923123:q3MLDS30_WAumj0Jg-MuaUKDLVNQf7CvdHGorhcb5i8/8e4733fe9e3f6b4c/u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e4733fe9e3f6b4c/1731924968994/DaI4FYDoYFg-IhO	false		high
https://support.google.com/chrome/?p=unsupported_windows	false		high
https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1	false		high
https://redirect-120685500130121.zerobot.org/cdn-cgi/challenge-platform/h/b/flow/ov1/1213075623:1731923031:IM7zHx7btM8cpvqoTXGBRT2jhn4ACFmouUGLaATwKkw/8e4733e18ee24790/yYXUjRHcmsMssvX_1rGjOZKXdjHe494ZESvPC9d8YNY-1731924961-1.2.1.1-42QdKm5Y4Wx7cA21XRK_vJ76MYaRBnV.oEG6TpYZxD2VhJhP4GEKtkunEohPFP88	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://support.google.com/favicon.ico	false		high
https://support.google.com/apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8e4733fe9e3f6b4c/1731924968995/04ef6a44f7d4e83bcbe7a77d2e7ba1336b6ef580de7b7d96d2b45cf36395934f/Q89i320ItIIdw8-	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://lnk.ie/7469O/e=	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_153.5.dr, chromecache_166.5.dr	false	high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_144.5.dr, chromecache_141.5.dr	false	high
http://www.broofa.com	chromecache_140.5.dr, chromecache_145.5.dr	false	high
https://apis.google.com/js/client.js	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://support.google.com	chromecache_163.5.dr	false	high
https://www.youtube.com/embed/	chromecache_163.5.dr	false	high
http://localhost.proxy.googlers.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://www.google.com/accounts/TOS	chromecache_163.5.dr	false	high
https://policies.google.com/terms?hl=	chromecache_163.5.dr	false	high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_141.5.dr	false	high
https://moltron-pa.clients6.google.com	chromecache_163.5.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_158.5.dr, chromecache_134.5.dr	false	high
https://help.youtube.com/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_133.5.dr, chromecache_137.5.dr	false	high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_141.5.dr	false	high
https://www.google.com	chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr, chromecache_163.5.dr	false	high
https://content-googleapis-test.sandbox.google.com	chromecache_163.5.dr	false	high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://stats.g.doubleclick.net/j/collect	chromecache_134.5.dr	false	high
https://myaccount.google.com/privacypolicy?hl=	chromecache_163.5.dr	false	high
https://www.google.com/tools/feedback	chromecache_141.5.dr, chromecache_163.5.dr	false	high
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	chromecache_163.5.dr	false	high
https://sandbox.google.com/inapp/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://www.google.com/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://support.google.com/communities/answer/7424249	chromecache_163.5.dr	false	high
https://schema.org	chromecache_163.5.dr	false	high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://cct.google/taggy/agent.js	chromecache_153.5.dr, chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr	false	high
https://plus.google.com	chromecache_137.5.dr	false	high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://support.google.com/communities/answer/7425194	chromecache_163.5.dr	false	high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://sandbox.google.com/tools/feedback/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://www.google.com/chrome	chromecache_163.5.dr	false	high
https://www.google.%/ads/ga-audiences	chromecache_158.5.dr, chromecache_134.5.dr	false	high
https://content-googleapis-staging.sandbox.google.com	chromecache_163.5.dr	false	high
https://localhost.corp.google.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_141.5.dr	false	high
https://fonts.google.com/license/googlerestricted	chromecache_168.5.dr	false	high
https://clients6.google.com	chromecache_133.5.dr, chromecache_137.5.dr, chromecache_163.5.dr	false	high
http://localhost.corp.google.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://support.google.com/embed/tagging/install	chromecache_163.5.dr	false	high
https://play.google.com	chromecache_163.5.dr	false	high
https://support.google.com/chrome/answer/95346	chromecache_163.5.dr	false	high
https://support.google.com/inapp/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=	chromecache_163.5.dr	false	high
https://support.google.com/	chromecache_141.5.dr, chromecache_163.5.dr	false	high
https://scone-pa.clients6.google.com	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://support.google.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://apis.google.com	chromecache_133.5.dr, chromecache_137.5.dr, chromecache_140.5.dr, chromecache_145.5.dr	false	high
https://asx-frontend-autopush.corp.google.com/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://domains.google.com/suggest/flow	chromecache_133.5.dr, chromecache_137.5.dr	false	high
https://feedback2-test.corp.google.com/inapp/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://www.google.com/intl/en/chrome/browser/desktop/index.html?standalone=1	chromecache_163.5.dr	false	high
https://guidebooks.google.com	chromecache_163.5.dr	false	high
https://feedback2-test.corp.googleusercontent.com/inapp/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://localhost.proxy.googlers.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://tagassistant.google.com/	chromecache_158.5.dr, chromecache_134.5.dr	false	high
https://www.google.cn/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://asx-frontend-autopush.corp.google.de/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://www.google.cn/tools/feedback/%	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://www.google.com/tools/feedback/help_panel_binary.js	chromecache_141.5.dr	false	high
https://sandbox.google.com/inapp/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://test-scone-pa-googleapis.sandbox.google.com	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://policies.google.com/terms/generative-ai	chromecache_163.5.dr	false	high
https://www.google.com/ads/ga-audiences	chromecache_158.5.dr, chromecache_134.5.dr	false	high
https://sandbox.google.com/tools/feedback/	chromecache_144.5.dr, chromecache_141.5.dr	false	high
https://td.doubleclick.net	chromecache_153.5.dr, chromecache_166.5.dr, chromecache_152.5.dr, chromecache_155.5.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.78	plus.l.google.com	United States	15169	GOOGLEUS	false
104.21.81.97	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.23.110	play.google.com	United States	15169	GOOGLEUS	false
23.101.59.196	lnk.ie	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.189.16	redirect-120685500130121.zerobot.org	United States	13335	CLOUDFLARENETUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
142.250.186.33	unknown	United States	15169	GOOGLEUS	false
172.217.16.206	support.google.com	United States	15169	GOOGLEUS	false
142.250.186.129	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.23
192.168.2.255

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1557515
Start date and time:	2024-11-18 11:14:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	2
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Benefits_Update_2024.pdf
Detection:	MAL
Classification:	mal48.winPDF@35/110@34/17
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, vga.dll, WMIADAP.exe, WmiPrvSE.exe
Excluded IPs from analysis (whitelisted): 184.30.20.134, 184.25.51.83, 184.25.51.66, 23.33.90.68, 23.33.90.86, 142.250.185.99, 142.250.27.84, 142.250.185.110, 34.104.35.123, 142.250.186.138, 216.58.212.170, 142.250.185.170, 142.250.186.74, 216.58.212.138, 142.250.185.74, 142.250.181.234, 216.58.206.42, 142.250.185.106, 142.250.184.234, 172.217.16.202, 142.250.185.234, 142.250.185.202, 142.250.185.138, 142.250.186.170, 216.58.206.74, 142.250.184.227, 142.250.186.136, 142.250.185.78, 172.217.18.123, 172.217.16.219, 142.250.186.155, 142.250.186.59, 142.250.184.251, 142.250.185.251, 142.250.186.187, 216.58.206.59, 142.250.185.91, 142.250.184.219, 142.250.186.91, 216.58.212.187, 142.250.186.123, 216.58.206.91, 172.217.18.27, 142.250.181.251, 142.250.186.99, 142.250.185.123, 142.250.185.155, 142.250.185.219, 142.250.185.187, 216.239.38.178, 216.239.32.178, 216.239.34.178, 216.239.36.178, 172.217.16.138, 142.250.186.106, 172.217.18.10, 142.250.74.202, 172.217.18.106, 142.250.186.42, 142.250.184.202, 142.250.181.232,
Excluded domains from analysis (whitelisted): fonts.googleapis.com, accounts.google.com, storage.googleapis.com, content-autofill.googleapis.com, e4578.dscb.akamaiedge.net, acroipm2.adobe.com.edgesuite.net, fonts.gstatic.com, www-alv.google-analytics.com, clientservices.googleapis.com, ogads-pa.googleapis.com, acroipm2.adobe.com, ssl.adobe.com.edgekey.net, clients2.google.com, armmf.adobe.com, edgedl.me.gvt1.com, www.googletagmanager.com, a122.dscd.akamai.net, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Benefits_Update_2024.pdf

Simulations

Behavior and APIs

Time	Type	Description
05:15:30	API Interceptor	227x Sleep call for process: AcroRd32.exe modified
05:15:34	API Interceptor	86x Sleep call for process: RdrCEF.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	file.exe	Get hash	malicious	LummaC	Browse
	https://jammyjetscorp.uk/PurchaseLedgerRemittanceAdvice/PDF	Get hash	malicious	Unknown	Browse
	I_ Ultima richiesta di pagamento finale per Cuzziol beverage s_r_l__.msg	Get hash	malicious	Mint Stealer	Browse
	http://updatechrome.duckdns.org/1234567890.functions	Get hash	malicious	Unknown	Browse
	https://0nline.hrdocuments.online/?K2dM=7XW	Get hash	malicious	Unknown	Browse
	https://url.uk.m.mimecastprotect.com/s/i6hKCJ8OAsjPWvuxFXHy1dB_?domain=finatal.us2.list-manage.com	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Cryptbot	Browse
	http://inscrit.es/	Get hash	malicious	Unknown	Browse
	http://inscrit.es/	Get hash	malicious	Unknown	Browse
	https://finatal.us2.list-manage.com/track/click?u=f73f7708eca5e1d2f61bc2a09&id=82613a7740&e=d824888c03	Get hash	malicious	Unknown	Browse
23.101.59.196	https://lnk.ie/73BGS/e=?utm_campaign=&utm_medium=email&utm_source=eloqua&utm_content=EMS&elqTrackId=b3e6296b7e034428ab6cf8165586e5f3&elq=f15d0983a3e2469a9348a180a5d34fca&elqaid=2922&elqat=1&elqCampaignId=1792&elqak=8AF50EC23DDB3CA8DB8B1F52080496E6D8BDFEE307A00555CA936F9692C081A369A3	Get hash	malicious	Unknown	Browse
	Updated_Employee_Agreement_2024.pdf	Get hash	malicious	Unknown	Browse
	Updated_Employee_Agreement_2024.pdf	Get hash	malicious	HTMLPhisher	Browse
	Benefits_Update.pdf	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://jammyjetscorp.uk/PurchaseLedgerRemittanceAdvice/PDF	Get hash	malicious	Unknown	Browse
	https://www.google.es/url?q=queryri4m(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2fmediamei.com.br%2fdada%2funcz66ahtgqg1jqqmvsnfzkcw2oylxhqc48ee/YW5pbWFsaWFAYW5pbWFsaWEubm8=$?	Get hash	malicious	Unknown	Browse
	https://www.google.ki/url?Obdy=o1RbVZ9nKE3ZhJRHbKGv&cgsr=bnJtdqeStbk73BcMC6fs&sa=t&wofc=4hzzg6rsjrHHZ2kN1m3A&url=amp%2Fplimmerton.org.nz%2Fjugz%2F#oetqVE-SUREDANNSmFtaWUuQmVsbEBlbGthbWV0LmNvbQ==	Get hash	malicious	Unknown	Browse
	Ssc Executed Docs#962297(Revised).docx	Get hash	malicious	Unknown	Browse
	https://deliversystand.com/	Get hash	malicious	Unknown	Browse
	https://deliversystand.com/	Get hash	malicious	Unknown	Browse
	https://www.yumpu.com/en/document/read/69141128/newreviewreportsheet1124	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?sa=https://r20.rs6.net/tnt.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/safetyworksolutions.com%2Fkese%2F7980321465/eW9vbmp1LmNob0Bib2xsb3JlLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https://ky.gurativez.ru/hH7_CLfW8B06uDZbFmAiLw/	Get hash	malicious	Unknown	Browse
	Dominion Water & Sanitation District.pdf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://jammyjetscorp.uk/PurchaseLedgerRemittanceAdvice/PDF	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://listonelove.buzz/zoom/zoommm.html	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://www.google.es/url?q=queryri4m(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2fmediamei.com.br%2fdada%2funcz66ahtgqg1jqqmvsnfzkcw2oylxhqc48ee/YW5pbWFsaWFAYW5pbWFsaWEubm8=$?	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://www.google.ki/url?Obdy=o1RbVZ9nKE3ZhJRHbKGv&cgsr=bnJtdqeStbk73BcMC6fs&sa=t&wofc=4hzzg6rsjrHHZ2kN1m3A&url=amp%2Fplimmerton.org.nz%2Fjugz%2F#oetqVE-SUREDANNSmFtaWUuQmVsbEBlbGthbWV0LmNvbQ==	Get hash	malicious	Unknown	Browse	104.18.95.41
	Ssc Executed Docs#962297(Revised).docx	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://deliversystand.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://deliversystand.com/	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://www.yumpu.com/en/document/read/69141128/newreviewreportsheet1124	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://www.google.com/url?sa=https://r20.rs6.net/tnt.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/safetyworksolutions.com%2Fkese%2F7980321465/eW9vbmp1LmNob0Bib2xsb3JlLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://ky.gurativez.ru/hH7_CLfW8B06uDZbFmAiLw/	Get hash	malicious	Unknown	Browse	104.18.94.41
lnk.ie	https://lnk.ie/73BGS/e=?utm_campaign=&utm_medium=email&utm_source=eloqua&utm_content=EMS&elqTrackId=b3e6296b7e034428ab6cf8165586e5f3&elq=f15d0983a3e2469a9348a180a5d34fca&elqaid=2922&elqat=1&elqCampaignId=1792&elqak=8AF50EC23DDB3CA8DB8B1F52080496E6D8BDFEE307A00555CA936F9692C081A369A3	Get hash	malicious	Unknown	Browse	23.101.59.196
lnk.ie	Benefits_Update.pdf	Get hash	malicious	HTMLPhisher	Browse	23.101.59.196

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Aral#U0131k PO# IRON-TE-18024 _323282-_563028621286 pdf .exe	Get hash	malicious	VIP Keylogger	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	https://jammyjetscorp.uk/PurchaseLedgerRemittanceAdvice/PDF	Get hash	malicious	Unknown	Browse	104.17.25.14
	GD7656780000.bat.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	I_ Ultima richiesta di pagamento finale per Cuzziol beverage s_r_l__.msg	Get hash	malicious	Mint Stealer	Browse	1.1.1.1
	http://updatechrome.duckdns.org/1234567890.functions	Get hash	malicious	Unknown	Browse	1.1.1.1
	Revised invoice.exe	Get hash	malicious	MassLogger RAT	Browse	188.114.96.3
	rFACTURASALBARANESPENDIENTES.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	Ziraat_Bankasi_Swift_Mesaji_BXB04958T.cmd	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	104.26.13.205
	Ziraat_Bankasi_Swift_Mesaji_DXB04958T.cmd	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	104.26.13.205
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://jammyjetscorp.uk/PurchaseLedgerRemittanceAdvice/PDF	Get hash	malicious	Unknown	Browse	13.107.246.45
	I_ Ultima richiesta di pagamento finale per Cuzziol beverage s_r_l__.msg	Get hash	malicious	Mint Stealer	Browse	52.109.28.47
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://app.powerbi.com/view?r=eyJrIjoiNjcyNzQ5NzAtNzgyNy00ZWU4LWI0YmEtNWI2ZTg2NjRlMzE2IiwidCI6ImJkMWRiODMyLWYwY2QtNDRiNS04ZTNjLTYxMmNlY2NhMjQ4ZSJ9&dp=688235	Get hash	malicious	Unknown	Browse	13.73.248.4
	#U051d==.eml	Get hash	malicious	Unknown	Browse	52.109.76.144
	Unlock_Tool_v2.6.5.exe	Get hash	malicious	Stealc, Vidar	Browse	20.96.153.111
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	https://www.google.es/url?q=queryri4m(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2fmediamei.com.br%2fdada%2funcz66ahtgqg1jqqmvsnfzkcw2oylxhqc48ee/YW5pbWFsaWFAYW5pbWFsaWEubm8=$?	Get hash	malicious	Unknown	Browse	13.107.137.11
CLOUDFLARENETUS	Aral#U0131k PO# IRON-TE-18024 _323282-_563028621286 pdf .exe	Get hash	malicious	VIP Keylogger	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	https://jammyjetscorp.uk/PurchaseLedgerRemittanceAdvice/PDF	Get hash	malicious	Unknown	Browse	104.17.25.14
	GD7656780000.bat.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	I_ Ultima richiesta di pagamento finale per Cuzziol beverage s_r_l__.msg	Get hash	malicious	Mint Stealer	Browse	1.1.1.1
	http://updatechrome.duckdns.org/1234567890.functions	Get hash	malicious	Unknown	Browse	1.1.1.1
	Revised invoice.exe	Get hash	malicious	MassLogger RAT	Browse	188.114.96.3
	rFACTURASALBARANESPENDIENTES.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	Ziraat_Bankasi_Swift_Mesaji_BXB04958T.cmd	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	104.26.13.205
	Ziraat_Bankasi_Swift_Mesaji_DXB04958T.cmd	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	104.26.13.205

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	5.514951250339821
Encrypted:	false
SSDEEP:	3:pEg5c3KKKhmHVK+uIGcm2LWnbXYGAiUKznAJ32k9lA/8o4/bwofAW8Xn:GgWXHVRuIGtbIXi5zUGcA/8o4rfz0
MD5:	D3EC2935F3B85589A41BBAA67D3CE160
SHA1:	A2835C4AA020F71DEA45AB87EA0812518784E06D
SHA-256:	8C1455FEBDCB8EACDDDC82A0A7C2B7378915BE305F737E4DE0197A7C5E249ECA
SHA-512:	E2C4907D5BEDA1E3C58F9B23F78EC6EFF4B8C94703E65F220C214822697337CE1E6E707B0E250E7D1E2972B33D7F1F2378CCD62B561363A3E8E54080DCD2B0DF
Malicious:	false
Reputation:	low
Preview:	........"..2...dtype.googleapis.com/google.privacy.webpermissionpredictions.v1.WebPermissionPredictionsModelMetadata.-..................%...>*.....>....?...#?%33s?H.

C:\Program Files\ChromiumTemp1472_1549436564\model.tflite

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	64852
Entropy (8bit):	6.89530784485757
Encrypted:	false
SSDEEP:	768:RmSc1WeIhwYxQVEHVU+svUa/dUWT/hPsagQDFioRBA+c5CG77zJlSIlZvy:ESc1Uh5QVJ172WTZgQD0ofAhldlpy
MD5:	A83FAF32A3BB1F56C89C4B1506E10F0C
SHA1:	181AAB8DD5660A2C1287C45683ADA5C51E64CCAE
SHA-256:	24734FF865E75CBB153254C978940AA3E5FA9B38C24192801CE650C035597C85
SHA-512:	3913A20DE0E751B315FC348D503A48FC3D8C2F0030CFC83CBA8A91CFC83D1686D7573F80D63E4ED3D7B685828ADD237FD2AB69F1FE5D205F856B831E09230946
Malicious:	false
Reputation:	low
Preview:	....TFL3.. .............................t.........t...............4.......................CONVERSION_METADATA.........................min_runtime_version.....X...P...H...@...8...0...(... ........................... ..................x...d...P...<...(...................................t...`...L...8...$.......................................\|...t...l...d...\...T...L...D...<...4...,...$...................................................................................\|...t...l...d...\...T...L...D...<...4...,...$...................................................................................\|...t...l...d...\...T...L...D...<...4...,...$...........................................................................t........\......`...........................$.......................................\8z....X................2.19.0.."]..........2.2.0...........P...T...X...\...`...d...h...l...p...t...x...\|...........................................................................................

C:\Program Files\ChromiumTemp1472_1585668192\model-info.pb

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.3927474104487847
Encrypted:	false
SSDEEP:	3:fQFL:4FL
MD5:	27E391D2370EB9DD45883F00A79F8879
SHA1:	33970B5D3218A32FACEF6260FB5288A54E8F48EA
SHA-256:	F36E9BAEB8E56B8D34D4833CAF25CD28D2B4BE214016DC068ABFFF3535C11635
SHA-512:	C30DDB24664ABC83EAF585EA3764BAF72992E7371EC27CEB78B3368A541D1CB9C1A75DEB1A5449421B1BF1388A236F06EB66BF1576C1E99B53C01ECBB93C3C1A
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	......"..H.

C:\Program Files\ChromiumTemp1472_1585668192\model.tflite

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	392048
Entropy (8bit):	5.826576770481211
Encrypted:	false
SSDEEP:	6144:4i8mNiZGi+jiwubrNEOB37+rNiyykvXpqQC7SaPGNFzq/RnfAmn+qGk07U0z9zMl:WqEGi+GwGrNv9+r8bkvXpqQMLuNy5YmJ
MD5:	6D7C2F9E94664539DEC99B3233301B01
SHA1:	85812B004742CC1C211C92911131CE270F8BA769
SHA-256:	A0956386DC64FD9F4883C8741F950CD60A56859616B159C9E4251C9EB0AC5534
SHA-512:	4D06917F30651C3BF13C509AAE79793B3F1EC93DE12179464B18FD9FD16C7BF466884B1C70E425D7E937ADDE341CF24BD08F19A132BBB9683E804F29B4ED0C33
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	....TFL3........................................4.......................%.......min_runtime_version.'..........................t...h...T...8...,.............................................................t........C...C..............x...d...X...<..........................>...........1.11.0..............J..............................j.............B@z...........f.@...................yw....z.......................w...........y.......y....i.....x............yy...y...xyw.x..........y....y..........zg...zyi..i.h...y....x..........y..x.y.y...x.......x....yx...y...........xxx.i..........y....y.......xzx.yxw.w.......y..yx...z.................................w.w..x.y....x....yy...h.......y..y...y........y........h....y............y....y.......x..y....y..y..w.x..........y....yx.x.......y....y........yx..y.y..f...i.x........yy..i.y...yy...y..x....x....x..y..yz...x..z....y....h..w.w..x.x......w..wi....xw...................h.e..........xy...y..x....y.y...............x..hxyx.zY......w....y...

C:\Program Files\ChromiumTemp1472_1706484848\model-info.pb

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	5.528439507850019
Encrypted:	false
SSDEEP:	3:q/4c3KKKhmHVK+uIGcm2LWnbXYGAiUKznAJ32n9Vprq/bwo4lTmln:qpXHVRuIGtbIXi5zUGn9Drq/r4le
MD5:	3DC217F2CE3E37AE95B1AD9A7D4DEA9F
SHA1:	997CF51B3E083C343BA32D85375D94E52DF21685
SHA-256:	C8102C1B2EEB89608FA98DB95614031EB6B5B1CA1AE622DDA49178FF844B92C1
SHA-512:	F37E1DAC003793E8AE0BDA45BEC8D5B3FAA4A1DB111019341156D745005658C786EB5073E0110A59844A910CF31FF7703674D7112A6E09782E8516294DCB2737
Malicious:	false
Preview:	........"..2...dtype.googleapis.com/google.privacy.webpermissionpredictions.v1.WebPermissionPredictionsModelMetadata.-..................%..L>*.....>....?...@?%)\O?H.

C:\Program Files\ChromiumTemp1472_1706484848\model.tflite

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	12732
Entropy (8bit):	4.4183851891437484
Encrypted:	false
SSDEEP:	96:nncJn11rYfM1+v5+XL3zxnuKj16OFCxWHy41WPIk6qd7qssXi4QXt7ZzsmknenI3:nM8MIvIjjJFH6cic4Xg++
MD5:	4E5B63B53C882E144ABAB23FCD2967C0
SHA1:	138C3AAADBC7183C0084CB5749BB430F3CAA1356
SHA-256:	465D3B2A73AFF15652C0A8F10E38B52AC2D8BD9618A2DB0BBED58CF240C9C12F
SHA-512:	A720B328D27A9E565717092554B734EE7BE3D6142E5A140ACA6E56993014BA322A33F834725D73A83C777C0F9990DA9D45D418950981BDA839B8F868D7DB1806
Malicious:	false
Preview:	....TFL3.. .............................t...\...l...\|0..............4...........N...........CONVERSION_METADATA.............M...........min_runtime_version.O.......................................................l...T...@...,...................................x...d...P...8...$.......................................................................\|...t...l...d...\...T...L...D...<...4...,...$...........................................................................t.......2.......`...........................$.......................................2(....6.................2.19.0..............1.14.0..........P...T...X...\...`...d...h...l...p...t...x...\|.......................................................................................................................................n...............~..............>...................................................................?............................L.O?.............y-?.............!^................?"...........q.O?2...........

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\data_1

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:	data
Category:	modified
Size (bytes):	270336
Entropy (8bit):	0.0018811398465979306
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zEelXSlt:/M/xT02zNXSX
MD5:	2F9BECAD4D8D8E0792A5EFA30B2E422B
SHA1:	AF06E98B90477E23004794B1D833087FA5432A6B
SHA-256:	07765CE8D08EFCE2CA51297534719B137F3FFD48895C67B001938F758A2B13E5
SHA-512:	05026FD5A09236E088EB7A4D51B8107AA9B78D5411780313565508127F4D318B392101C8370A816B5C9E2A0ACE6A514A0FDACDD592D1BE2D410A410A3A460E20
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.2572277868355215
Encrypted:	false
SSDEEP:	6:HUOKwSI9+q2PP2nKuAl9OmbnIFUt8YUOKw3dNJZmw+YUOKw3dN9VkwOP2nKuAl91:+wSI4vWHAahFUt85wHJ/+5wHD57HAaSJ
MD5:	EC827D3FECB8BDA770DEE57DF2B204D4
SHA1:	8CCD0BC9EF467E372FE33AA18BEA2651A2DC61A6
SHA-256:	1E281E4FC224F01E723B6FA532570890770A8E1D7F17DCE983779C3471562F74
SHA-512:	FC2458DFD8714D010EC0C3E4EF6F7D433D44F7095656D130E8F0CE63B3443CA6945830B93D10D10E7FC6137D2A57D767CF6992869B575AB14F5F492FD00166E9
Malicious:	false
Preview:	2024/11/18-05:15:36.664 3708 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/18-05:15:36.668 3708 Recovering log #3.2024/11/18-05:15:36.668 3708 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.2572277868355215
Encrypted:	false
SSDEEP:	6:HUOKwSI9+q2PP2nKuAl9OmbnIFUt8YUOKw3dNJZmw+YUOKw3dN9VkwOP2nKuAl91:+wSI4vWHAahFUt85wHJ/+5wHD57HAaSJ
MD5:	EC827D3FECB8BDA770DEE57DF2B204D4
SHA1:	8CCD0BC9EF467E372FE33AA18BEA2651A2DC61A6
SHA-256:	1E281E4FC224F01E723B6FA532570890770A8E1D7F17DCE983779C3471562F74
SHA-512:	FC2458DFD8714D010EC0C3E4EF6F7D433D44F7095656D130E8F0CE63B3443CA6945830B93D10D10E7FC6137D2A57D767CF6992869B575AB14F5F492FD00166E9
Malicious:	false
Preview:	2024/11/18-05:15:36.664 3708 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/18-05:15:36.668 3708 Recovering log #3.2024/11/18-05:15:36.668 3708 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old~RF65aec7.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.2572277868355215
Encrypted:	false
SSDEEP:	6:HUOKwSI9+q2PP2nKuAl9OmbnIFUt8YUOKw3dNJZmw+YUOKw3dN9VkwOP2nKuAl91:+wSI4vWHAahFUt85wHJ/+5wHD57HAaSJ
MD5:	EC827D3FECB8BDA770DEE57DF2B204D4
SHA1:	8CCD0BC9EF467E372FE33AA18BEA2651A2DC61A6
SHA-256:	1E281E4FC224F01E723B6FA532570890770A8E1D7F17DCE983779C3471562F74
SHA-512:	FC2458DFD8714D010EC0C3E4EF6F7D433D44F7095656D130E8F0CE63B3443CA6945830B93D10D10E7FC6137D2A57D767CF6992869B575AB14F5F492FD00166E9
Malicious:	false
Preview:	2024/11/18-05:15:36.664 3708 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/18-05:15:36.668 3708 Recovering log #3.2024/11/18-05:15:36.668 3708 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.007818402565218801
Encrypted:	false
SSDEEP:	3:ImtV+7M1xVlt/XSxdlt4dV1gt/lop:IiV+gxlKxdX4m1lo
MD5:	99A1861B153254A6F8FE2AF60FFEEF36
SHA1:	ACB2F19C7CBBC53A52177D5584DBA5B5DFBE6451
SHA-256:	2C39CAF92A3108E56ECB3A7D099F91B854519E6E846B6F19363E389A31794BF4
SHA-512:	B7A3A1206A7B35425190D2D1C0973CA54712E22E247B5AB35CCDC314564E39E487C10950BD9A3858CC229691B43B15E948B7D7B152B105BB5A0F4EBDD093D9C5
Malicious:	false
Preview:	VLnk.....?......LhXJ ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241118101536Z-164.bmp

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	PC bitmap, Windows 3.x format, 164 x -58 x 32, cbSize 38102, bits offset 54
Category:	dropped
Size (bytes):	38102
Entropy (8bit):	0.6292471365667212
Encrypted:	false
SSDEEP:	48:SYZgMQNivnc+zMDED2ReAo4V3w8z1dCqF5G4gbea9Sr:SG+B+AgD2cAdlZz1p5G5DS
MD5:	842DF2D53E1CE3C6E98484FF3D1FD0A7
SHA1:	FF635EE140675E99D888588666D7FCC39A614C09
SHA-256:	2A3B69D06BD99B72DC92896CED7EFCE4BE20255D361C763F4EBC859F1AFD4A61
SHA-512:	4E135E8F452FC9FB85B0B5EF8CDEA487F2E55292C4F7941C0EDA71FF6A6F0CE3A8279961A704A955D7C7E3E52B6E4677E7365CAAEC15F6F2C148978A344FDE0F
Malicious:	false
Preview:	BM.......6...(............. ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	SQLite 3.x database, last written using SQLite version 3024000, file counter 14, database pages 15, cookie 0x5, schema 4, UTF-8, version-valid-for 14
Category:	dropped
Size (bytes):	61440
Entropy (8bit):	3.5758472756607524
Encrypted:	false
SSDEEP:	384:Xeh9dThOtELJ8DAcLKuZsLRGlKhsvXh+vSc:PAeZsLQhUSc
MD5:	18ABDE8E7D18A324E92A034A94609A00
SHA1:	797224A22BB92F317403D105EF913574029DCB87
SHA-256:	9B9F358FF122B5031094E460FDE737E5ADF9A9388424E2A25A849410AF8FE7F2
SHA-512:	2451DA26D478F4AD2D7EF1E65D5F63D0EED36ABC01E0AF4F09182112BD3DC6B23CD8286E3CDFC9467F95ACF5E6E8FD0210EF5F9AAAF424AE0DCC847E6943BFAF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................$.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.311990854780925
Encrypted:	false
SSDEEP:	48:7MF2iomVmBsmom1ChiomCBszom1Nom1Aiom1RROiom1Com1pom1oiomVPiomg7qM:7rCm6rhf6uh0CP7t49IVXEBodRBk2
MD5:	DE92011ED717BB0D936C6CB996D10CCD
SHA1:	4E452EF514DEF6FB77F668B442203331E2BCEEC3
SHA-256:	A5C447E7EDAC4162B60F310706C285ECA3E6B9EF9F0A4FF384E4B647FB462184
SHA-512:	00D0705BA1F250E22CACF721FC0601358BA828B4D12FE891B195A5E73D3F470210E5F5D87464988FBA25E97EA5E76D52B1172A2AC2A4A7F86C0401C1AF3DB5CD
Malicious:	false
Preview:	.... .c..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................W....X.W.L...y.......~........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt19.lst (copy)

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	536
Entropy (8bit):	5.174543082835309
Encrypted:	false
SSDEEP:	12:T4RFQ8idRuMgxg6dxs3yBFTtDcQAzidRuOPgxg601s3yBFDHpcR:kNid8HxPs3yTTtyid8OPgx4s3yTDHk
MD5:	A78477214CA3CCC5908A4BD9D232F4F0
SHA1:	85D37F44236880B859E5E193A137B5D787571676
SHA-256:	9158461897AE80401E3C8DBC0AC0485D323B60AE3165743EF7D9CF43A8619B76
SHA-512:	7D401A03B2F1D9C1CC4247ADE66AFA6819F46FFD4D7532157F3B44F0E79B379D1AA605184841AD0EEF11CE518CF56E0452869B7C4A68510B4E448FC6AB669A7D
Malicious:	false
Preview:	%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426595652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426595652.%EndFont..

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt16.lst.3516

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	536
Entropy (8bit):	5.174543082835309
Encrypted:	false
SSDEEP:	12:T4RFQ8idRuMgxg6dxs3yBFTtDcQAzidRuOPgxg601s3yBFDHpcR:kNid8HxPs3yTTtyid8OPgx4s3yTDHk
MD5:	A78477214CA3CCC5908A4BD9D232F4F0
SHA1:	85D37F44236880B859E5E193A137B5D787571676
SHA-256:	9158461897AE80401E3C8DBC0AC0485D323B60AE3165743EF7D9CF43A8619B76
SHA-512:	7D401A03B2F1D9C1CC4247ADE66AFA6819F46FFD4D7532157F3B44F0E79B379D1AA605184841AD0EEF11CE518CF56E0452869B7C4A68510B4E448FC6AB669A7D
Malicious:	false
Preview:	%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426595652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426595652.%EndFont..

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst (copy)

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	536
Entropy (8bit):	5.174543082835309
Encrypted:	false
SSDEEP:	12:T4RFQ8idRuMgxg6dxs3yBFTtDcQAzidRuOPgxg601s3yBFDHpcR:kNid8HxPs3yTTtyid8OPgx4s3yTDHk
MD5:	A78477214CA3CCC5908A4BD9D232F4F0
SHA1:	85D37F44236880B859E5E193A137B5D787571676
SHA-256:	9158461897AE80401E3C8DBC0AC0485D323B60AE3165743EF7D9CF43A8619B76
SHA-512:	7D401A03B2F1D9C1CC4247ADE66AFA6819F46FFD4D7532157F3B44F0E79B379D1AA605184841AD0EEF11CE518CF56E0452869B7C4A68510B4E448FC6AB669A7D
Malicious:	false
Preview:	%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426595652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426595652.%EndFont..

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt19.lst (copy)

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	9566
Entropy (8bit):	5.22582439176908
Encrypted:	false
SSDEEP:	192:eXA2P6Y6f76yx626OP6H6Q6y6nfs6ttRZ69tsu6jtG16RMX05F5yLk:eQAt0zvXkdvIfsutRZEtsuutG1gMknR
MD5:	08A5FDC2402AAC9FBE78F16494554D5C
SHA1:	89C1122EF0773A6B771DCC3CB922B695C76F8B5D
SHA-256:	008774FEFB1299959D711144FAA84C18AC4A3920965EB671A1B94FF23BED5CD4
SHA-512:	BE83E0FA7C1D6EA6C14C1BA688DE832C6A18946B8A2F28EB8EE64882EB23710FAF6448F8361C77A9108F75FDAB921FFFCDF6E4BAE8C9CD2D154BFA0252D42479
Malicious:	false
Preview:	%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426595652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426595652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:Type1.FontName:AdobePiStd.FamilyName:Adobe Pi Std.StyleName:Regular.FullName:Adobe Pi Std.MenuName:Adobe Pi Std.StyleBits:0.WritingScript:Roman.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobePiStd.otf.DataFormat:sfntData.UsesStandardEncoding:yes.isCFF:yes.FileLength:92588.FileModTime:1426595650.WeightClass:400.WidthClass:5.AngleClass:0.DesignSize:240.NameArray:0,Mac,4,Adobe Pi Std.

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt16.lst.3516

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	9566
Entropy (8bit):	5.22582439176908
Encrypted:	false
SSDEEP:	192:eXA2P6Y6f76yx626OP6H6Q6y6nfs6ttRZ69tsu6jtG16RMX05F5yLk:eQAt0zvXkdvIfsutRZEtsuutG1gMknR
MD5:	08A5FDC2402AAC9FBE78F16494554D5C
SHA1:	89C1122EF0773A6B771DCC3CB922B695C76F8B5D
SHA-256:	008774FEFB1299959D711144FAA84C18AC4A3920965EB671A1B94FF23BED5CD4
SHA-512:	BE83E0FA7C1D6EA6C14C1BA688DE832C6A18946B8A2F28EB8EE64882EB23710FAF6448F8361C77A9108F75FDAB921FFFCDF6E4BAE8C9CD2D154BFA0252D42479
Malicious:	false
Preview:	%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426595652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426595652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:Type1.FontName:AdobePiStd.FamilyName:Adobe Pi Std.StyleName:Regular.FullName:Adobe Pi Std.MenuName:Adobe Pi Std.StyleBits:0.WritingScript:Roman.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobePiStd.otf.DataFormat:sfntData.UsesStandardEncoding:yes.isCFF:yes.FileLength:92588.FileModTime:1426595650.WeightClass:400.WidthClass:5.AngleClass:0.DesignSize:240.NameArray:0,Mac,4,Adobe Pi Std.

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin

Download File

Process:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:	data
Category:	dropped
Size (bytes):	72643
Entropy (8bit):	5.393779678652009
Encrypted:	false
SSDEEP:	768:PCbTjMYOpdyVFWqnPvBRSiRkTIVzY3Z2XqpWHDKXUHYyu:AlOpdyVFWcPvBBRkTIdY3w6UHK
MD5:	C765890C72D1098C86BB149551F04F5B
SHA1:	A170915B44BB6625069E25726E071E6E552D7C3E
SHA-256:	C1F668F57FE219F028EE8DE7A81EFA842ED9D3AEA7464A979494C7B6DBC98BA7
SHA-512:	F8E6FE00A7EC0376EB472DF7EE49F8A718427C0EFE5D26482127AAA9F4FEB0B90ED94F08B1A06BC99FEDE09B1D8AAC60F1292A81338CC211492F19A501535B14
Malicious:	false
Preview:	4.458.88.FID.2:o:........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.94.FID.2:o:........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.82.FID.2:o:........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.85.FID.2:o:........:F:Aparajita.P:Aparajita.L:&.........................."F:Aparajita.#.99.FID.2:o:........:F:Aparajita-Italic.P:Aparajita Italic.L:&.........................."F:Aparajita.#.95.FID.2:o:........:F:Aparajita-Bold.P:Aparajita Bold.L:&.........................."F:Aparajita.#.108.FID.2:o:........:F:Aparajita-BoldItalic.P:Aparajita Bold Italic.L:&.........................."F:Aparajita.#.93.FID.2:o:........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.75.FID.2:o:........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.89.FID.2:o:........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.85.FID.2:o:........:F:Arial-BoldMT.P:Arial Bold.L:$....

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\5ca44a43-3250-423d-bb81-ed897e7c59a8\model.tflite (copy)

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	12732
Entropy (8bit):	4.4183851891437484
Encrypted:	false
SSDEEP:	96:nncJn11rYfM1+v5+XL3zxnuKj16OFCxWHy41WPIk6qd7qssXi4QXt7ZzsmknenI3:nM8MIvIjjJFH6cic4Xg++
MD5:	4E5B63B53C882E144ABAB23FCD2967C0
SHA1:	138C3AAADBC7183C0084CB5749BB430F3CAA1356
SHA-256:	465D3B2A73AFF15652C0A8F10E38B52AC2D8BD9618A2DB0BBED58CF240C9C12F
SHA-512:	A720B328D27A9E565717092554B734EE7BE3D6142E5A140ACA6E56993014BA322A33F834725D73A83C777C0F9990DA9D45D418950981BDA839B8F868D7DB1806
Malicious:	false
Preview:	....TFL3.. .............................t...\...l...\|0..............4...........N...........CONVERSION_METADATA.............M...........min_runtime_version.O.......................................................l...T...@...,...................................x...d...P...8...$.......................................................................\|...t...l...d...\...T...L...D...<...4...,...$...........................................................................t.......2.......`...........................$.......................................2(....6.................2.19.0..............1.14.0..........P...T...X...\...`...d...h...l...p...t...x...\|.......................................................................................................................................n...............~..............>...................................................................?............................L.O?.............y-?.............!^................?"...........q.O?2...........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\c1e219fc-0222-48b4-b0fd-0ae637e74a79\model.tflite (copy)

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	64852
Entropy (8bit):	6.89530784485757
Encrypted:	false
SSDEEP:	768:RmSc1WeIhwYxQVEHVU+svUa/dUWT/hPsagQDFioRBA+c5CG77zJlSIlZvy:ESc1Uh5QVJ172WTZgQD0ofAhldlpy
MD5:	A83FAF32A3BB1F56C89C4B1506E10F0C
SHA1:	181AAB8DD5660A2C1287C45683ADA5C51E64CCAE
SHA-256:	24734FF865E75CBB153254C978940AA3E5FA9B38C24192801CE650C035597C85
SHA-512:	3913A20DE0E751B315FC348D503A48FC3D8C2F0030CFC83CBA8A91CFC83D1686D7573F80D63E4ED3D7B685828ADD237FD2AB69F1FE5D205F856B831E09230946
Malicious:	false
Preview:	....TFL3.. .............................t.........t...............4.......................CONVERSION_METADATA.........................min_runtime_version.....X...P...H...@...8...0...(... ........................... ..................x...d...P...<...(...................................t...`...L...8...$.......................................\|...t...l...d...\...T...L...D...<...4...,...$...................................................................................\|...t...l...d...\...T...L...D...<...4...,...$...................................................................................\|...t...l...d...\...T...L...D...<...4...,...$...........................................................................t........\......`...........................$.......................................\8z....X................2.19.0.."]..........2.2.0...........P...T...X...\...`...d...h...l...p...t...x...\|...........................................................................................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\f5bb7b8e-6972-4a43-af7f-1698ee5370d5\model.tflite (copy)

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	392048
Entropy (8bit):	5.826576770481211
Encrypted:	false
SSDEEP:	6144:4i8mNiZGi+jiwubrNEOB37+rNiyykvXpqQC7SaPGNFzq/RnfAmn+qGk07U0z9zMl:WqEGi+GwGrNv9+r8bkvXpqQMLuNy5YmJ
MD5:	6D7C2F9E94664539DEC99B3233301B01
SHA1:	85812B004742CC1C211C92911131CE270F8BA769
SHA-256:	A0956386DC64FD9F4883C8741F950CD60A56859616B159C9E4251C9EB0AC5534
SHA-512:	4D06917F30651C3BF13C509AAE79793B3F1EC93DE12179464B18FD9FD16C7BF466884B1C70E425D7E937ADDE341CF24BD08F19A132BBB9683E804F29B4ED0C33
Malicious:	false
Preview:	....TFL3........................................4.......................%.......min_runtime_version.'..........................t...h...T...8...,.............................................................t........C...C..............x...d...X...<..........................>...........1.11.0..............J..............................j.............B@z...........f.@...................yw....z.......................w...........y.......y....i.....x............yy...y...xyw.x..........y....y..........zg...zyi..i.h...y....x..........y..x.y.y...x.......x....yx...y...........xxx.i..........y....y.......xzx.yxw.w.......y..yx...z.................................w.w..x.y....x....yy...h.......y..y...y........y........h....y............y....y.......x..y....y..y..w.x..........y....yx.x.......y....y........yx..y.y..f...i.x........yy..i.y...yy...y..x....x....x..y..yz...x..z....y....h..w.w..x.x......w..wi....xw...................h.e..........xy...y..x....y.y...............x..hxyx.zY......w....y...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11165
Entropy (8bit):	7.958731397886426
Encrypted:	false
SSDEEP:	192:aZh6bzNEiqeH6JZrA1ReFRCXNxaVhuZTxVJ9dJfSC1pWW56b3ggSZKmM1a0YULD:+h4qeHjMLcxauZTnLfNqW5eghd0R
MD5:	5A90A227C0681F63469074F730FCD7DD
SHA1:	4B8C0D5AC3777CE8C12480F177F195C0445C35FB
SHA-256:	129DB7C9798DB73AE79E678EBDFD5C92672D746C35A15D98018BF82E08AD462F
SHA-512:	0329D56F13040D8D976EACB9F7353C15238FE5E2D0BC6410EFFE22F150B5C989984BEB51DFB338C5EDEEE08F6EF7E66F401E7F3967CA602CA0C86A21DC256CF6
Malicious:	false
Preview:	.PNG........IHDR...V...V.....UVa....ziCCPICC Profile..X..y.XUK...O... .......m...H..."..4... (..X.AQ............=..f.Zk...l....QQa0=.....{S.~W7w~........0.7&J......w..ey.@..}.uY....-.~.1..@.(....Gq.....Q.X.p.t...u......@.....M\|j..l...G{C...@.&.)...N.t.x.@T..*.........:s..o.....;.g[xx.:NE.8....z....Cf.....#.L...7.Q.F.1Qa...k......[.(Z..(f...G}8..i...Q.>...v..(....w.`RP...&?...c.....X.ld.bn..D..Xm.}..M.Q...N..5wD1;.....;l.TS".t....C.-.0...w]..P'.-..A..[.... G...P,...l.bZ...:Xn.h%......../.b{..S.M.H\|...~.?;<..\|..`s.-\|!6..l.?.U_...\.1..}..r.c\.~.....xs.....'.-9.b..7.bHQav[..A.0.u. ..b....b.c..)....k.i'&9.la.i...X.C`..A.Z}@$......G.m...2..@....(.G.l.D.O...>......g.....Q..?..4.......^.8.X.0.w...?..K..._..h.E..C.z......7E..XmQ.~k...3....p&8..'F....B.zhU..a....o~.+.]...8v..hg......3.\|.-_.....QT.2....JG%cX1.@........Q....^.......?...G.#.D6..Q..#i%i..HY..?..i.........~..x..m-...D."CH?r..B..?..#.H.:...^n.....7..E....>..uO.....[...O.].x..QI....X~}.v..7..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	dropped
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Preview:	Bad request.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	downloaded
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js?onload=clJo2&render=explicit
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1203)
Category:	downloaded
Size (bytes):	8868
Entropy (8bit):	5.130440294070798
Encrypted:	false
SSDEEP:	192:5H4HcHGr9uIHROschHoqPHyHRuHq/Hp+8HObKuHPHk:6rr+cf
MD5:	D0A7B8CC43AA9D9BC37980573186F668
SHA1:	67262D9435233DD70B6713ABE6DAC956ADFAE617
SHA-256:	F94934A2AB404905A25CAF02219F22337610B659D73A72C82EE8287D698BFD0B
SHA-512:	5FE3D2316D6661BF22D831263E0232F8AACCA2042D53255C3AC15E3C652EEEC60C8E29D6EA53FD587A41092248067E69786D42147151599CEC865E6C0094FECE
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
Preview:	/* [0] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2) format('woff2');. unicode-range: U+1f1e6-1f1ff;.}./ [1] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.woff2) format('woff2');. unicode-range: U+200d, U+2620, U+26a7, U+fe0f, U+1f308, U+1f38c, U+1f3c1, U+1f3f3-1f3f4, U+1f6a9, U+e0062-e0063, U+e0065, U+e0067, U+e006c, U+e006e, U+e0073-e0074, U+e0077, U+e007f;.}./ [2] */.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.woff2) format('woff2');. unicode-range

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11772, version 1.0
Category:	downloaded
Size (bytes):	11772
Entropy (8bit):	7.980951134807218
Encrypted:	false
SSDEEP:	192:ChWJPw3k6T0R3d4jwADqVhrh2x6eE/dSQp4/PQ0JJIOHU5/QyfjY:1JER0aZAda6kQIF44ec
MD5:	6F4D4A8899EE0298DB1717070AE4761E
SHA1:	44F0F6B77E5AB005E6F74C4EC65DC7600503B4E2
SHA-256:	CC3DCEB979B73443783E4E0837A1609009CBB7F6C31683B5171BC9A930F7D7AD
SHA-512:	9A53E083804C3D53A95337F07832E9C59B14F2A4974FA11074CF04EC427BD19BE7EAC368D27AD30EF1BC7AAA4E2DD5A19E3F27E45FA4DBB10A368356A60D0AC5
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
Preview:	wOF2......-.......q<..-..........................@..f..0.`....H..<........ ..t.....6.$..d. ..~. ..)..e.l\eF...!...E.ZM...q...K....4.1.:.......g.V....j.VuD.T....@uO.iD'.:i..:\.....@\|f....i...........S.....~..>.%...Su...$cv....@. ..V...........9L.S.T.g.'...K7'.D].D].9...&.............Y\|....F....r.2..BV./l-\...9........V..y..w.yo....K...".('..A.rv..24P..7.....R..do.dw..7b..c.;"...?..e.xl.$......T...B....\|....I.K..kYw.p.....Mr..N.....=.c.e....P...m..m`........A.fBW..8......l....#.....Z .!...O.{.........e...[....C...\|X..d.=A....9.\...(.T..=.vS.eZ.C/-...@...Y;Il[. ......}-.\..U%..O...0....36..-.z.....#....!(....(.c..b...3..(....?A..4.."..Yr8..u.o.P.(bf...&#.(7...2....>.O3...\..Z.%K.h.f...:...VI.&.....$.~.....-..X8,.\.}.}.:......Z....3.....{...._..Uo.x_...*@..s..x.6....../...Wy..+^....h.a..........J..p..;.V. t..rD.. .^.Z...,..-.....(.J...\|.......Y.A<..~..d.l.kZ'.....br%.X....Y...5...T(B./.C.....)K....bba.S.P.m..a.]v+V..>.j.kt.!G.s.W.6.:t...).

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 18, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlmttnljl//xl/k4E08up:6v/lhPST7Tp
MD5:	0E0320B915D2C2D7F127390F68A1BC77
SHA1:	FA3B92AE06494875D3C05375E40FE7856EC9D652
SHA-256:	D02EA52ABDE6F9A786D36A43FEA9C43827456718FF6D806CFFC529BD894A8B87
SHA-512:	D6BF3FDA5CCA3CCE60291E627B4DBBCBF60B259279468FF2BE3D2C37ABC8BCDCC51FE27FF2E80BC6D25A82E1C0A50FF06E0E522B50BEF2D1534F9E36F7882A70
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e4733fe9e3f6b4c/1731924968994/DaI4FYDoYFg-IhO
Preview:	.PNG........IHDR.............6nr>....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.664959056860514
Encrypted:	false
SSDEEP:	3:HniCnmzth+2K2mCGUpYk1G94kn:BmB3tYP
MD5:	A83BBFA2EE366E0DDD852BF6285A337E
SHA1:	98039160B0267199D10E4FE77546283DD2417187
SHA-256:	FF80EB8EC06E1ED5A6D0A0592CF148409DEC1594F9C6AAF0C4B8AEAEB0C86147
SHA-512:	79666D1140B8C1F0C46B834BE3BD937CAEFAC82E14FE380068F6769770414EC576AA2106A4B32CF329698C30164DCAA9D5378A1DF1300D3E5C9CEA7F7D3115F1
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTA5LjAuNTQxNC4xMjASEAmQMlRNxQnEhBIFDUbbxIkSEAnal8bI1t_HMRIFDQbtu_8SFwnKf47UcyJWzhIFDZSQkvoSBQ1pSEdH?alt=proto
Preview:	CgkKBw1G28SJGgAKCQoHDQbtu/8aAAoSCgcNlJCS+hoACgcNaUhHRxoA

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15996, version 1.0
Category:	downloaded
Size (bytes):	15996
Entropy (8bit):	7.989012096227512
Encrypted:	false
SSDEEP:	384:nH4UArsQ/nHYjtuHgovTC+H+b23+kMw/KjK0TQ59u98pgQXk:nYZQjtuHgYGbrMyjDiJXk
MD5:	CC536892EABDE0EAEB81493BDA8E189A
SHA1:	15C0180AD7BDF9D0F963747447BC9446FC42D2DC
SHA-256:	97399A2914C593DA2895D9729AA0170A1956E91EE54CF7550696691949558A37
SHA-512:	94F605C4C4FE76EBDB2D5428C6BA69F83B75C65B6932251C0C3E90F92CC1F421FD9F15E81D5985693DC564B8644D90A26DA3E9C63976CF5862ED54D5ED0C4320
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......>\|..........>...........................<..:..:.`..:.....p..~.....6.$..(. ..>..N.....5xn.u..b.....c..<..Rw.H..q.(.....9A...^.=h.%J...4.\.\.[....[....h.j..AP.....a..]N.o....6.a..uO..R.\|o...wO..t....s....^F...Oy....IN^..X...9sg...(;..L.....5.s~...?....%.0.f....b.. ..;.. "k+.v`.....1kq.\mqLp.]\|..Z\..O......=.......h..,u.................y.h.o.Z..%.....g#..B......V...3.r....J..>g.-rU?+.3A.....C...... .21..f...Z.......P..o..g\.b... v...6..0...b.....?..-WL...Z2...1..Q./....... ..C..G.^r....O......io;.o..4.<....7.Pm..!.Nu.=..Oc............e.w.g.....,...c...0V.P...R.){..u...>.fi..S.w.G...-..... $.8......w..hp...T@..Go....).......;.....B.)..p.\.?.-KC.S.5..pX9...'.!.-....R.Sg.>x.o.yP......S....a...m<.+".t%..3x.?3M;....k.....I&I.3g.26...p...}~....X.x..G.<)..k..U....AZ..A@....Cu..Tv{...\|v.04H.$Xc..E.)<...!........^..~.7P.u...xH..rX..8O....y.k(...0.p 0.%.U...Z...%...\|LlUJ.]L_...9..AX.$E.$.sa.(v8L!...rc.-....I..W..........^U...@.....3P............M..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5164, version 1.0
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	7.955022654419014
Encrypted:	false
SSDEEP:	96:0d/IkMLdBZmPHsHmJQE/h2ygZ5mPy6ldKPCH/S+fuG/mlVSOmxXvR:kQPLgUGhoygzqRlgPCHzfuOmNK/R
MD5:	E1D4C2969A3DD92F91FEA51F652831EF
SHA1:	FF3BE3617B93FCA22D758F43920ABFA313337BC2
SHA-256:	570D2DC2CE988D8AE09147EE2ECA5EC53F8D5F036E84E3212BF03503374054E5
SHA-512:	4F426BCCF3B2838DAF1356D90476E1D761B61431606E673718A4E6BB86946C759C3D9E68D1A4218EA24E9550DEF9C0B3D953066C2B0B2176C5003EDAA6F93AD0
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
Preview:	wOF2.......,......2(.............................(..L.6.`..(.H..<....D.3........6.$.... ..~. ..)..,..xp..D.{..>..l..Q$..(.#.....'.....Mc...z.P.N.Nx.Ey..\|..8...6..z..r........\|{#.Hk....B..1..q.-QGE.T]VC.6....Q...m.......,0.m..a/...U.n...r..fS7... ?....g....H......57.B...b..v#@c.K(I.P0l-...'.,.yh....P.E..yV..f..%.V.....#.....V.w:B............]i....~.......5.....2.U...Z......MRJ-(.AvO+......g..H(..0.....i...c.G=.."..u........l$......@Ud...23...f]j. ..\....k%@>.DS....^$W:...J`.J...Vd8~.1 A>.2....J.Y...}.MQ....s^.29-}...\=....$M...$...4.9.:l.y.w).5n9ef...xr..}}.D9,.v.Uv$5.F..h..X...D..2y.P..7.C......D,.w....:qq@8...S.b.2..o..E w..)..;../..........W....@K........o.H..`Z..P.N...h.<..]d...,.....r.a.X..d8T.V.G.g.Ot.^.2...~.~Q.._CO...<...[.UMo..,..$.o5..G.d...>.&Z./.SpyGk....r..x.j...X...In.....QX.E......Z.@2.u..F.b..`.~.......3{#.r.....^c..=...(...W. "...3......V<....0..`kp.q.h</).8.w..$...($..@!.=.\q.2..x.0.....S/...o.J...wjn.....d.`...W..Rh4...d.....

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21552, version 1.0
Category:	downloaded
Size (bytes):	21552
Entropy (8bit):	7.991124519925249
Encrypted:	true
SSDEEP:	384:sPsBjS050+6ZPTO5MZcvt18lQYjxHe+YeXIY3r9mgNRb4PBvCrdYq+sMM:sPMjX0Gj8lQYFFEY3JmgTbcqYo
MD5:	EA2C3CF1BE388BD3FBE9D0CD8AFEE11C
SHA1:	6647CBAF7BFEDD842F806549F5C3433A19EAB1AB
SHA-256:	1CF04407E728EA1EBF82DC1C6B45D12632CB3202FF8F4556F380B16E57484F27
SHA-512:	2B260F63CD6BD0C75A3E6EE9EB5FA5B477F1AB2E107F682165C8A4BDCB9A6CFBFD21AB172CE165A3C2EBF451AB91D27070EF5E4D985EF3105EBCAE964C6D8870
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2......T0.......d..S..............................,..@.`..~..<..u.....X........6.$.... ..r..X....\|.5......0...av .....p.........R...srCd..._o.,...A.4...w...{0.. ..A[.z...L."..j..&s..a.-O]........m......~l..yy..m.&.X.U0........G.\|..t....l\.HVN......o....4M.{.j..I.Kb.D.....7.....<0Ln._k.........d[&y.C...8..7w.,.L.....u.n.!..q..H..i.{.P.fq......D8....G).....m.;e.K,0...Z...<.......=#.}...]o._..t....<..Em.}..,P..........I...3..Q.G..g"..~nZ..P..Jb./..?q..}.=..v......N...f...,.!.3.V......s.?..g..X..5W...B.:.....H.Rq.Iw*A...rq,..;v.\"(.n.~K.Z.Q0>..P.....a%).y.LE.{.8..&...V..h.jJc....u.\.9K.MI...g\..M..~.....n.a(......j..J{ .E....Vv..^....8.2U.....{.%..A....48.oiIG...r9....hg@...QU.z[..8'd(.s...BB....a9a.t...fh...=.y...P....l._...?;......b.d.X..bf.p..m..$.... E.{...W..:.....8V.R."./."]3.M...G.....RB.!......>..Y.'..M.n.+.rC.2../u...U..#.........D..8...4..G.!Ad..".#.w..P.:-`.."DC..BBI)....]..$.}..q.<p..As...^.y.c...(:.......Q.D#1./..W......R...=.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	7.988919175869214
Encrypted:	false
SSDEEP:	384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
MD5:	D4FF90DB5DA894C833F356F47A16E408
SHA1:	30606044507D81B996C992895AB16B8A8D68BE97
SHA-256:	F2C761EE3CE27469F940A05B64E38A829A400427727CD0BDBB4E36F1D572AFD7
SHA-512:	85C6305EE6973EBF449EFCFC95BB10A66E5CBA92D026A2EC4F1072DC8CCBC5B4A4A384FE425E53E2DADE2180F37CCA56243ED354033CFCA5821CBB77FB8B0FA1
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Preview:	wOF2......T........P..Tp..........................4..,..@.`..~..d..u.....<..4.....6.$.... ..V..X..^...'..:...m......?..ts..6(#k.y........ON....Mn..X..~X%A...T...q.r.L..9..B}#e....}......{..l.I>.n.....u.>v(..}lo.2.f..D.TG...:mc.3.M..A...../aJl..ZT.b.S.E}..wq.B...&...Y..s.o....Qs....>.]u^O....d..Y....oEfh.........u..X.....E.3c....r...Eb.....N2+%\...J.6]N:.g[~..,..>@.`IXs........LP...c.!K.X[......A7Z....O..g....5..1...=..X....e!._.A..u.raef..y.....>li,/+..-.P-)...w.I..3\..s^.....T.\.1.;.x.:.r.7g...dK.$;....L2.t.i..hz.....>............5...,~}...W#..X.2...E,.Y.3..f.#........[..X......fDW.d...Y..8..T....^.{BC...+.W..9...`...\ ...c`.nc........_...}6A5eM.0r.IG...Km...l.'.o..py.~7.........P....9...hI.A'...D9.....4Q...9sc..9..........9lw.P...dI..z...S.>U.5.@Z...{.....=`R(...l.T.5...4{K.....L..A.]...Rg.3......l..a......I.>...p.q.H.E=.$...Ps..LU..=.$......YU....#Fn..Q..c...B...4...B..3....?....ywJ.$.I..L....yK...m.!..b_g.eH.3,.5 .@.D.........)N.?.<yR......Ro

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9768, version 1.0
Category:	downloaded
Size (bytes):	9768
Entropy (8bit):	7.975118282088062
Encrypted:	false
SSDEEP:	192:Wiy1McDcSTowj8gYHJHNr/LQ9BHkV1lnJAN7+hzY+XmRVPBWzFBZ0x0Zbs:CMcDowj8guHNr09FkV1lJBs+yVPBmscw
MD5:	49831701CBADCC981121971FD0DB8673
SHA1:	A74A7BE2195AA44D304F82681CE9BD7ED5FE12B4
SHA-256:	F5A2670F86A2248805A64CB46CD1F59BF05E9A8201B81C09F579F94820404354
SHA-512:	67D4DC6672C16D085E7CE81FC0D64581B4C5A1578F2F4866FADD8F4DF7F391A9CB741FDA8892BCFD3F2FAF116606EC2C22998F2C1D2E650A89619C1584CDAB52
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2
Preview:	wOF2......&(......_...%...........................H.....r.`..r....(.......6.$..\|. .....E....S%.X......;..... ..K...Q......5...._....D.lO...:.............xj.P.=.b.p..._.K..\|....P.)..R.Y..$.d...z.q.....?........$.....\|k.......3Ih..p....{w.1j...Glt...``.v.m.6)....+.\|.fx.V..b...P..fQPP.AJ.!..,l...+0V7....8.....4)g.t).S......d.ZO0.z...s.... y/.4.4..#H4...=ERu;.n...jm.0eE/......h..&...R^i2.z...O./.....n.^..f..b.X\|.X(/..wg..7.pM.";.{.X.......Y......1.Bbq......K6>#...~............A4..EC1k.h>k....A..XDB....$.6....[..?.q2.^...R.....6.5[....e..[..^6........r....hz..'.....2....X+.?....@..H.* j.h..M_.hR.(..\|y!.<.O..(fj......B....\U.6'..S......w.&J......$...$?...Z.r...........N.....@..`.1!..$A.."...8T 5.........@F. ....[..$ .\.C.\|!.AP.((...7..k>...h.e.........@..v...s.J......A...R..1'.SDP.*.F....tI;...0...k.O. }....@c.2.4.U.\|V......."G.{..\|...q..kA.. .F..@n.<.../..._.<......Px..M..$0..TB.u%....M...Z5\.`....Q..r,@.6.;&(.`\|.'...W..o:.P\\.V....(..w.j\|vjb)...(..^.px..

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15988, version 1.0
Category:	downloaded
Size (bytes):	15988
Entropy (8bit):	7.985554788162145
Encrypted:	false
SSDEEP:	384:JfFDqxG/bHq3qmBgWpwqOu9ulbiyuY+ifPqlBOpMEyNKF:1FuI/3mBgWpwLlmsaBOSuF
MD5:	CB4F5F85FAE1369135CB93997B0C7507
SHA1:	2FD7A68C2A0291BD74B6A6C6E229B60876B1C1F8
SHA-256:	06E60764F2F683EF1562780A928735CA90BD7FF7B7376D2818C8445BE9C29669
SHA-512:	9275475936E2840008A6D2FF86C1080D484178E964EB3C06D5A12D70F79F5E8E09C97126C139C86BE95EC15C9971142F2455E002C0B336344D3060C16D3B9B04
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2
Preview:	wOF2......>t..........>...........................<.....:.`..:.....(........6.$..(. ..&..N...X...!.q.........h.?=.H..q............uT7]/.....(K.ZRfl.d..=)....)..P..[...>J../.....z .tud;...w....Z8....k#.........uW.Y.8..C.d.N...\..-\|.zy........`..j.a...QjF&....?.w.\B.H..B8.B.!...B..:5.T..bR1P3j.X..i......(ox~.=c.7...1@".......A1Q,.\.N.yw.].....zW...}:.g$...MA..[{9S..\|@... .?...?..Kh=.{.#..;.P.........8.}..[K%.x@#....7..PBv.(...p....C.....~.........Dp......k.6.8 ~...\|..9FF..0.c.cG.qy... ...RK.R.....H.M6.6)/. .EX...9fIr..V...........}....y.....X.h.....=r.L.5..../.1X#".X,.D&...,%H.?.......mjs..$RXA>...a.\.\S<.....5)..."..J!.:.uh.(..cVX.:D,......!(.....w.^...Xp..=..ze.S+...y$....`.y../...j#.g..5.#r$"V..k...j.....E$..O.L..!.F....7..7.X/U.e...v.16.......R....G.J...pP..;.........Q....=.i.?GG&....B......+....E.....c.W.[.X,H($.J./..........L..@..c....(:.:...K...?..B...# .... ...^...q._FA.O..P.\|n-...XVT..}.8M...QD......#..s..b...@.L!..? -C..04 ..SK..O$...n.;.*....'

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 18, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlmttnljl//xl/k4E08up:6v/lhPST7Tp
MD5:	0E0320B915D2C2D7F127390F68A1BC77
SHA1:	FA3B92AE06494875D3C05375E40FE7856EC9D652
SHA-256:	D02EA52ABDE6F9A786D36A43FEA9C43827456718FF6D806CFFC529BD894A8B87
SHA-512:	D6BF3FDA5CCA3CCE60291E627B4DBBCBF60B259279468FF2BE3D2C37ABC8BCDCC51FE27FF2E80BC6D25A82E1C0A50FF06E0E522B50BEF2D1534F9E36F7882A70
Malicious:	false
Preview:	.PNG........IHDR.............6nr>....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5132, version 1.0
Category:	downloaded
Size (bytes):	5132
Entropy (8bit):	7.959814059351413
Encrypted:	false
SSDEEP:	96:HZkx6Qo+1cdqdwbpAO1sLJQOJyuUtGhrAzzLfptGiz:5kUQhckwlKLPk9t1zLfCiz
MD5:	7C438C68BED5CD5FBC47B724BF853634
SHA1:	4AEA344FD136A23926156212AE2AA156672BE4EA
SHA-256:	B7B835E506F41E07EE76C30AA7B140EE3B80C7D4F083282CD849C0AD19F705A5
SHA-512:	844D79F159661161F959A19F7B8E79642E958415BF6AD710CD405E4A5E60499F4D2A3DE58BCFB2CB2E657E8578C48EED8184E01B7620609790AE700C2ED0B30E
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2
Preview:	wOF2..............-d.................................4..B.`..j......J..f..6.$..H. .....V...8'EFm7i.p......2.6f.h-.2..S.Q.Rl..;F.B....JDo..{J.OnK..CI.........Gh.\....?wr..!"[b...T.,_....o...ad..q.#...L.1..AAd`.....V.7]....Jw/..Hw...`.~.Kk.mm!.m.%.B.J.>}.....<.l.++...N.............!FQ...!..9..Z..{{....I....r..z..m......=.9 ..NF...!X.y L.....Z%:d#.B..........UQOEE.D.c.}..S.,.@.........@....HQ.X.DI..dH.TH.tH.,......R.."#.T....(( ........ ..H...9.S..^s.5D.8n....P....Ko.....8xHX.....#....0~.m.D@qB.@1...1.. ...r.m..H. .eU..'.s4...)..(<.@.L."....-.e.......MB..A.\|...K...-.br.]5../{.#8..+....k......W(......x.....j.V3q.....g.oc...(.1...q....9....6DoX...c..R...tap.D.......ab....-.3.8.a.#...[2....$lS./W.,..x.3.1....,...[.DAIW!M...}.cG....J.....r.....J...,2. (.Xl[.u.6g..f..p .q..Mu..P.....)g@].^.6..f^........9.J4.Xva.^..0...0=8...8..=...P.t.S..-)..c.rP..0... %7.tg.b..g.......K.C..]!S.`.Q.....V(V.+..m.>...'...Uq".]....N..C/.~..!.....&......^(..v. .W.v/o..!..

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	dropped
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Preview:	Bad request.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	dropped
Size (bytes):	177688
Entropy (8bit):	5.552115167227387
Encrypted:	false
SSDEEP:	3072:fc3bXo9SLtl9UNXr+FqVBiFglYGHj4LsBUnL7BB19HD4VHDgJElS5bOFYG4bhlto:fc33Ltl9UhtVBiKlYij4LsBU7BB19HDA
MD5:	ECEBF8847900767E2B2638563B98EF63
SHA1:	34A9B7FB0660ADCBA7078127BA9AF23A2AC4AE2A
SHA-256:	EA19973935C025B2FDF674CF875B6162C7F6B25861788C6B34831C9D51689CEF
SHA-512:	483A1181841AAF8478903A8FE6A0BC89ED815A596B665EE1D4508BB77C9F8AB73725C2CA8F296EAA45CD0D2F0050AE73B17B707B8F2C29F98A2BA09683BD27F6
Malicious:	false
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.aj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var bj,cj,gj,jj,ij,ej,hj;bj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};cj=function(){_.Na()};gj=function(a,b){(_.dj\|\|(_.dj=new ej)).set(a,b);(_.fj\|\|(_.fj=new ej)).set(b,a)};jj=function(a){if(hj===void 0){const b=new ij([],{});hj=Array.prototype.concat.call([],b).length===1}hj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.kj=function(a,b,c){a=_.tb(a,b,c);return Array.isArray(a)?a:_.Gc};._.lj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.mj=function(a,b){a===0&&(a=_.lj(a,b));return a\|1};_.nj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.oj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.rj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.kj(a,b,d);var k=h[_.v]\|0,l=!!(4&k);if(!l){k=_.mj(k,b);var m=h,p=b;const q=!!(

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4005)
Category:	downloaded
Size (bytes):	121397
Entropy (8bit):	5.472638120984786
Encrypted:	false
SSDEEP:	1536:OYIcfKtWtBpDiQk+QlnjKQ/169Q1qL8QyeQbt0vza52AoNWyYNMf/WULPT1VjPuB:dIyK9umKQ4C6K0vz/PT1VCN8A
MD5:	21B4B6C5C9F0AD04F3EA3612108FDE49
SHA1:	60A9BFD282F5C1CDBF8567D552F055BB8CB5CB9D
SHA-256:	832A1311F1ED475C49B2C9E6B9F1A1602CE7173CC69D2FC6DD1324D300511B10
SHA-512:	CAC007A6DF7465BDDF3DE2D4B011736125AA6F5FE6DBEFD3AE435BEBF001E90150F8DE6FA05C7F48D83CF387727AFCD9480E184C2FC677C9303991BB6E9ECCF4
Malicious:	false
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6046), with no line terminators
Category:	downloaded
Size (bytes):	6046
Entropy (8bit):	5.35134104261919
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvUY6FrYpVv:lXT0TGKiqggdaAg8IF8uM8DMY6FrYpN
MD5:	D0311B6404553F93CB1DA65AF393EEAF
SHA1:	63968A253E55E6765E3FA1BF7A3A5D5BFD2FDCC4
SHA-256:	1068EA079C347EA7820A301FD89D91CA89B48BD2477D0461EB55C7733F390F65
SHA-512:	CBB17A823802CA1DDB06F5F91C4E34ECB71151837B496F323B5CCF5204502026DE1E490794D12A09577C2E6E0949795A4F8A22C15BD671F7E846841E3DCD3408
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=q_sf,qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4005)
Category:	dropped
Size (bytes):	121397
Entropy (8bit):	5.472638120984786
Encrypted:	false
SSDEEP:	1536:OYIcfKtWtBpDiQk+QlnjKQ/169Q1qL8QyeQbt0vza52AoNWyYNMf/WULPT1VjPuB:dIyK9umKQ4C6K0vz/PT1VCN8A
MD5:	21B4B6C5C9F0AD04F3EA3612108FDE49
SHA1:	60A9BFD282F5C1CDBF8567D552F055BB8CB5CB9D
SHA-256:	832A1311F1ED475C49B2C9E6B9F1A1602CE7173CC69D2FC6DD1324D300511B10
SHA-512:	CAC007A6DF7465BDDF3DE2D4B011736125AA6F5FE6DBEFD3AE435BEBF001E90150F8DE6FA05C7F48D83CF387727AFCD9480E184C2FC677C9303991BB6E9ECCF4
Malicious:	false
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2586)
Category:	downloaded
Size (bytes):	177688
Entropy (8bit):	5.552115167227387
Encrypted:	false
SSDEEP:	3072:fc3bXo9SLtl9UNXr+FqVBiFglYGHj4LsBUnL7BB19HD4VHDgJElS5bOFYG4bhlto:fc33Ltl9UhtVBiKlYij4LsBU7BB19HDA
MD5:	ECEBF8847900767E2B2638563B98EF63
SHA1:	34A9B7FB0660ADCBA7078127BA9AF23A2AC4AE2A
SHA-256:	EA19973935C025B2FDF674CF875B6162C7F6B25861788C6B34831C9D51689CEF
SHA-512:	483A1181841AAF8478903A8FE6A0BC89ED815A596B665EE1D4508BB77C9F8AB73725C2CA8F296EAA45CD0D2F0050AE73B17B707B8F2C29F98A2BA09683BD27F6
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.Ed7fPZdAP88.2019.O/rt=j/m=q_dnp,q_sf,q_pc,qmd,qcwid,qapid,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTsAQtU7Exa5LSjaPuQb-KRl1yfMjA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.aj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var bj,cj,gj,jj,ij,ej,hj;bj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};cj=function(){_.Na()};gj=function(a,b){(_.dj\|\|(_.dj=new ej)).set(a,b);(_.fj\|\|(_.fj=new ej)).set(b,a)};jj=function(a){if(hj===void 0){const b=new ij([],{});hj=Array.prototype.concat.call([],b).length===1}hj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.kj=function(a,b,c){a=_.tb(a,b,c);return Array.isArray(a)?a:_.Gc};._.lj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.mj=function(a,b){a===0&&(a=_.lj(a,b));return a\|1};_.nj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.oj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.rj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.kj(a,b,d);var k=h[_.v]\|0,l=!!(4&k);if(!l){k=_.mj(k,b);var m=h,p=b;const q=!!(

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11165
Entropy (8bit):	7.958731397886426
Encrypted:	false
SSDEEP:	192:aZh6bzNEiqeH6JZrA1ReFRCXNxaVhuZTxVJ9dJfSC1pWW56b3ggSZKmM1a0YULD:+h4qeHjMLcxauZTnLfNqW5eghd0R
MD5:	5A90A227C0681F63469074F730FCD7DD
SHA1:	4B8C0D5AC3777CE8C12480F177F195C0445C35FB
SHA-256:	129DB7C9798DB73AE79E678EBDFD5C92672D746C35A15D98018BF82E08AD462F
SHA-512:	0329D56F13040D8D976EACB9F7353C15238FE5E2D0BC6410EFFE22F150B5C989984BEB51DFB338C5EDEEE08F6EF7E66F401E7F3967CA602CA0C86A21DC256CF6
Malicious:	false
URL:	https://storage.googleapis.com/support-kms-prod/64VugE0xNwvKGnTUlnm6ycog0A37Awdi0mlV
Preview:	.PNG........IHDR...V...V.....UVa....ziCCPICC Profile..X..y.XUK...O... .......m...H..."..4... (..X.AQ............=..f.Zk...l....QQa0=.....{S.~W7w~........0.7&J......w..ey.@..}.uY....-.~.1..@.(....Gq.....Q.X.p.t...u......@.....M\|j..l...G{C...@.&.)...N.t.x.@T..*.........:s..o.....;.g[xx.:NE.8....z....Cf.....#.L...7.Q.F.1Qa...k......[.(Z..(f...G}8..i...Q.>...v..(....w.`RP...&?...c.....X.ld.bn..D..Xm.}..M.Q...N..5wD1;.....;l.TS".t....C.-.0...w]..P'.-..A..[.... G...P,...l.bZ...:Xn.h%......../.b{..S.M.H\|...~.?;<..\|..`s.-\|!6..l.?.U_...\.1..}..r.c\.~.....xs.....'.-9.b..7.bHQav[..A.0.u. ..b....b.c..)....k.i'&9.la.i...X.C`..A.Z}@$......G.m...2..@....(.G.l.D.O...>......g.....Q..?..4.......^.8.X.0.w...?..K..._..h.E..C.z......7E..XmQ.~k...3....p&8..'F....B.zhU..a....o~.+.]...8v..hg......3.\|.-_.....QT.2....JG%cX1.@........Q....^.......?...G.#.D6..Q..#i%i..HY..?..i.........~..x..m-...D."CH?r..B..?..#.H.:...^n.....7..E....>..uO.....[...O.].x..QI....X~}.v..7..

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8232, version 1.0
Category:	downloaded
Size (bytes):	8232
Entropy (8bit):	7.970977891824873
Encrypted:	false
SSDEEP:	192:M+IfXuoEfn8duoxJzlW4ANhYkck2pyrtGLBTeK3Ei6eLLO:M+cPg7/h2poEBTeKU4O
MD5:	11C1994DAED4419F53EA81BFA9D131E4
SHA1:	E61AED6167B0B196B9534B6B2B2A3252A283FD3B
SHA-256:	74BA235EBCCF81EF6B13BED997897CD6329DF2A19B9C0BC90AA2D5EC26E3036C
SHA-512:	2B6B5AE24A2CE29B2919D5663724D96936176506B11C72BE3EFEA7D8D54E4BBE3CC7EEAAF581F043E580889F406DB1784C9BA94051EB45E7302960386AB7A95E
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2
Preview:	wOF2...... (......N...............................0..@..H.`..H....8....X..6.$..,. .....E...pD%.m. p.@.~vGp42......(..o.t....9.@.$..so...06..:...v..h.(....X.2.^......5. A...).q....?....n...Ify...\|g...2.MvHvS..i.$.,...m.> ..`$`...* .!.Fa4...io.X...].[_t/...w..d..N\|?..Ia.E....M......L.'..je.Y{I...9.P..V.w.....[..Gr:.K....+...Wu.....)..4......;....#..X....@Zm.=..n......5I\|.q..bA....G.G.....?.)......(..p.N.?.g...)Li:)....q....Ct.]........X.\}.....l..m\2...?....R...$....n../sB....OV.{'.Z..J..0.}.QK.C..-5..^.O...l.V.L...k\|.z...w..d..W.K=\..t...G2RL.}....F.....0. ...!R.Cd)...@.. ...j:..#.......T...h.....1l..o."`.b...y.%. v..q....N.B @k..I.....v.<...v...!.Hm_'D...;.@.......i...T.QF._...\|U6.^..F .~..;e3...bA........H..L...N..&......<.....8..q(VbG,.t..P..}H{.&\uK......?8..f."=.#."b3.G......o\|&..J...^.u...=.n. ....c...nH\(" !......Z.....Z09.D<x.@.#. .h.."${.2......@.).....F.9.o0..........,.>x....%.`+.a7......!.C....Pb.....cy.5..:j&mS.R.I.%[..\y..10....

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	151
Entropy (8bit):	6.079677011439454
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xt7A7Ogvnv+cTvpddshoChexymXOPr0yFYcCcqCwaGeup:6v/lhPX7A7OFKf0M1XgAyNCPdp
MD5:	1459AF1FBD15FDFDB9BCEF3B4B875862
SHA1:	A8AF5219EEC6EF96DEBA897FA111DEB498A04A9E
SHA-256:	02ABB4D4952D1022BECCC0940964BAFDE027E95DBB007E1E9C699F66D2717320
SHA-512:	8CD89F240B877D8D776A40711C88C8EC22A66D0C6666EF2A2629086F85D6FA3C98ABB2CF868FA5D4896BE1BDF49C94A07D97EF7F36317F75EB465D9B07AFFE61
Malicious:	false
Preview:	.PNG........IHDR.............J~.s...^IDAT8.c`..0P.Z.J.r..W@(B.....p%.....A0.8.kxI.......;....).Cr.1.*]....W.R..U9...T....RG....0..._....IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://support.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7060, version 1.0
Category:	downloaded
Size (bytes):	7060
Entropy (8bit):	7.965390774927561
Encrypted:	false
SSDEEP:	96:JVhAH9n3i/HLXAfmYBaNZVqjXzsJmHUguBA9ikWnkwz6sTr9+QGDkJUEluFanxxk:zKH9n3fmYBaNqjUuUzS9fc6WcWRx6z
MD5:	7A6C0568007C5692727D88A3F35D427C
SHA1:	41B70C6167AF04E3EDD81E3932C7283F391FBFC7
SHA-256:	403679CC3CA882653C21AEF04BC7566E5155D1B93A9FDB196D1F07D9AAAB20F9
SHA-512:	EEAE2F5631AC4D9D0D895B23EB1B3C5700BEB8E82C5E05B0707366B69173090A6BD55C9C0AA8D83C758C67E0141E3AEAD7C65D5A06987A533BE3345CEDC6E5EB
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
Preview:	wOF2..............9....2.........................d..v.6.`....H..<....(.r..H..p.6.$.... ..~. ..).B3..%.q.fH...(W..(J......'2,....'..^I..9.2%.I\R.W..f...a3....t+I.!._#...`xj?...;..`.......j.....X<....Or...?..dA-e...]P.......N...B..?I\|8z7...Sa.......N.Qh<m..<..7...q@.QZ.Gk..p.m.\|......-xy....m...-.._....z.=]^.........Vq4>.t.g.=/..S........c...K.D.H.w.....[.L2.L..o-..t.B.C.+.,.....J...V.G.T..,........_.)Yv...;.J.v\...H./.i9..;...#N.KG..V...f.]}....kj.w{....V..[..i.'+}..8..XN..).NkV.f9ukC..Pk...Q.Z......._...N.......'.)Tj...`...d...V....b[.;..C..RA....i;.gD8E.6.a\f?.<.J...F.4 M.......4..CZ. }V.56!........&..P\|7.G........Q.k.}.$..#.K..}P@...R.-...%l...xY...^......Y.VO.....h...Z.<.&e...eR...."..j.........,.)%.]......0i..sV.......1.-.c. ..".>....EP...S..'@..\./=.`......7..}O.dH?.S3.4'E...........1...gJ4....)/..dd]s....Ixa.,JgZ&....../....._...[.c..W...'.xb=[Ln.lHdO..8.^...dU..K.\...w#....U.... _IR4v.qMtO...3.X3.Oq..W.a....L4...[...,..&.T.c..$...\|c

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	214999
Entropy (8bit):	5.536499943054931
Encrypted:	false
SSDEEP:	3072:L7II4PXhz039EOxHy0oASNEidT6BICQ3uRnuKY/knHHOEKf5R:XYhz0tEOOs5uKY/knHHOfR
MD5:	6728F25E6B34FCEA3FB27552B80AE9D1
SHA1:	44DA846B390001A7B68BF9DFE4F094FBD06B94D4
SHA-256:	68631F4E1C359A283E08E0363F2E0C5B007CA06DFD3F8C560263CD3B380CE08F
SHA-512:	B543B1D0BE7D8BB9F8D078FFAA8B8B6017FB58E1F4646E428933660A8F5343EB6012AB6CA8A0702194A821210C4D66255EBC76B4C57530387D951B640F0A737B
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	277732
Entropy (8bit):	5.581805937536312
Encrypted:	false
SSDEEP:	6144:NVWYhz0t1tOOGNsqP0KY/knHHQGS3SDY9lgQ9:nrOz4OW70DT9
MD5:	D072DC57E58CFC94C39E370B15376669
SHA1:	5B053D3507097771EB8E19D21C77514987E8D70F
SHA-256:	8A677B49EF884FE3F4FA7A62678A56C248CA6B54FF46560C19A1B28E27F80248
SHA-512:	0215A1269F3CDE8CFC319901A027AFF5C6209F0978E1B7C3AACF4B3583FE2E2E3C421FDB8A93EDDEBC58E474DC4B869FA5E109DE71FE5601681C83578C13EA8F
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Category:	downloaded
Size (bytes):	9832
Entropy (8bit):	7.975495830331784
Encrypted:	false
SSDEEP:	192:79QDvz0lcHvOOR57orEbKO0hYcDwFMwo8ch8+BZFuRIII4iT6GZ:79uvzScHvOO04GdhYcEMwoThnE1al
MD5:	4904E4512C44FF90A67249421A174F8D
SHA1:	6FF8BFAB9C2AD320BF52A628F35861790C75A23E
SHA-256:	8589F8DE6CFF2670DEBC131476EFDD070303664BCE3A0B7E231EF16A0BFB6BB9
SHA-512:	852FE99E3571340018FDE517AA6A3C301DC308EDE430EAD54ABBDC85112FFA5D60E50FE21D0C317C05904EC1A15E3CECAF557C86BFDCC540065BD5FE51778851
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
Preview:	wOF2......&h......[...&..........................j..z.6.`....H..<......1........6.$.... ..~. ..)..Q%l...;@...U:......6....V....4..$v...(F..Q.u..oe@.RO~...u.3.hP.b9...;[.6SN...P#.K.4..N.......W........r%<5o=...mh.z..r...A.6..gY@G.a................ .D6`...6...Q#.aq.u`......S.e0..0.:.....4...\....E....wP!.+..;....a.7.....K'M.:.U...].NEx...KU.....{3...'.W"T....TV19v..r....IV.4.....o.:..ip....S...).u...~............... %..Q.V.....}.%Y...[.R@BV.c.:N2&...gdm].,.O..U._.....Jm...a...WcE.7.{..}k.6...3...n..$.}<.j]7..x..iJ..x}..\&.+]J..Y..........f{.H[..{.{G).......Fs..tXp.@..(.....f...........X:.@. ....W.9.....ta.R,....:w.........N....e....g....[.JjC.......b........0B.....c...G.............o.T8H.H.(".11H.d.Ty .......(. .....#c...K....2....W..:.......h...sC....r...4.....+.........y~J.......6.1;DQ......A>1.jb...jb.(."-;..R).~..........5.V.X5Ue..\|5....Y.f..{..9A.8s..;..8.x.."...)t.f.CGN..r......x...7../ $,.!....f0.7.x......3...=..a\|y..b.rT..

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	215150
Entropy (8bit):	5.537208089361644
Encrypted:	false
SSDEEP:	3072:LpJI6PFDXBd+ew05OH54P7o7U4RPACtQfU7B7mP9MLlUMP:1NDXB0JPCU7B7mP9MD
MD5:	21DA3639688E02B98FD7631A3B22414F
SHA1:	284C983B7526CDB47BBAFB2A8B90D2EC49377919
SHA-256:	58328CC821691A889E1D9F8D223D6FC9573C59071651CDD48C232EE491995F33
SHA-512:	836A9A1F877A89839E888E42A3FA6E72095F9E7781E07B2E185D50DF266E03ABBC21BFE8EFAC0FEFB475B2BC66092D36ED307E20FB1CACBBEF3E86862B5197B4
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=UA-175894890-5&l=dataLayer&cx=c&gtm=45je4bc0v871812832za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	7.732285685105188
Encrypted:	false
SSDEEP:	24:pv9p3oyuIhVmsp/LAbXrBvwRS7SlU0sAhoaXAn:p+IqspjAkJm0+aQn
MD5:	690CB3BB457A1779CB1BC2F342D7595A
SHA1:	8B2EBAEEB449550FEC3ADF5F83883A7C1BE8DA18
SHA-256:	9766CA2F4DAFCE7C640702D0CBC8EBE5A0BEA071E5B91ED291225706044AEEAF
SHA-512:	D9E5471602CF110761A2B285C82622A621268A594529B6D117DC0D28D753ED6E63F9DFD7BD9A57B60FBC9C5E72D6D0B1D1CEA299CC9FDE65DE0FE05ACED314D1
Malicious:	false
URL:	https://storage.googleapis.com/support-kms-prod/Y57p9LEW3v1cnw4Svh3a53DOnyRPFkiDfTDc
Preview:	.PNG........IHDR..............w=.....IDATx..U...[..sg.l....7..F1v...o.m#.nlc...w..f'vou..v..p.A8.V.h.....hR.F....."....#._+.i...2........J.]D.N..B~.@.....c[\|n........\i+..". .......l./.............@@.N..J....QyL..uuA..w....Qj.zw.. .\|0..-....cFN>.B=. ../....[..9..v.>..}bSm.\...&\|.....}8:..-......f.u......{!o..DC..+bC.........;..X.......\|q... &. cW....gF....5.0.u.{...bx...~..1.=..L.....@$..'`].8/(.4&.f.....8..Y.....C..q$dm.{q.....$.I"..&..........zzx.. 5..p9^.U...[....=$)N..A.:..j.@.X\..w...64..h.....'g(...@h.I.....<5(/f[.S....Y.^.U.@..a..0.qG..?..>.'gx....f!.k..+%rf.Y.._....vy.0......w..F.W....i\|&.I........I.B....&.&{.....hOy.$Vo..Z..c...).2.d&2.Q.y...C.....=..q..f\|.@..7....u~.`......~..\,R.S......l^........P,.6O1.....C..v3...zQ...70w0.A.e.S6..%y{1.bK.5aL......#.=....8)5...fWT..f....].Kr;.......E.....~.Q.=H...G4=9f.^.......D.?.x..^.=...5...H07.74.b....5.N}ua..Pm&E3TV.7.Z.9..~...-;p!..2....o....=..k...oZ.8... .(........-.....IEND.B`

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	https://redirect-120685500130121.zerobot.org/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4444, version 1.0
Category:	downloaded
Size (bytes):	4444
Entropy (8bit):	7.943236702796996
Encrypted:	false
SSDEEP:	96:sMbEnnGk3N4NvIF1VgJRrSIFiLt8L06PejMUD4Ghm4syPtGjO4:5bEn/N4NvAAjrXQZ8L06PejXD1PVGjt
MD5:	2AEF37096667EFB04AA7F0C1BEDA5366
SHA1:	5CDF7572F100940C6FC1A27E4C997BDB3B6C95B7
SHA-256:	00BBA6533EE69E05126BF0F9E8B81C2A2EFFF265E2B04786E9EC52613AE37C73
SHA-512:	2CF60175E4EAFDAFB65E343B8923081F92F410AC402C5B06956F288B11913F3861184E8156573D67F8D4079E5CBD864AE4339EC20BCF030C8B7B3946777B1DD0
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2
Preview:	wOF2.......\....../.................................. ....`.......,.;..8..6.$..B. .........D..x.8...u%.?%.1v..A5.).S.JU.m..j..Y^...n.............x.i.H.N..!X..H...^.4...h.v..x".$3i".5.Q5.H$J5..y~...}Ox.F?..``%J...p..+......~...h..{.{...."K..8..g.._...w..{.....U.B.....?..Gp"0.g...G.......n...U.z......?..nv!....{5..D..v$...$.._Z......E/....5..{..}0y.'....K...S.]......'....d_>a..).b...y.$\Y...u=............<e...7.0>...SD.....'.H.(.C2.@TJ!F6..\|H.&H..H.A.).........!..&MYl.......%(G.z.........k......."..F.~.wC.q>.._... i1A.^....Il...!v....bP.!.&...i...Wz)..GQ.\|..K...jp...%....'/....h..C.}wq&TS..C..........5..F.js....3....m..\|.`.K-m..zk..\]..m....XSNi%.......K..#.?...P....?a...g........L.}..~z...\|._.S................../.[q=...x..PC.... ......8.....)..?6.~..P...\|B.hJ....~C[.2B.....}.>..[..:.N8.j.!t..,@'..\J..{.IR$.ri..T..T....l.R.....Y.I.@f.g]......lL.DL.DTb".......{Ff .0{...c.M.t.e..J4.....#V..f..z. .*..`.....q..%.....;.."{E.....u.C..P.:.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54329)
Category:	downloaded
Size (bytes):	1200248
Entropy (8bit):	5.705328354786888
Encrypted:	false
SSDEEP:	24576:84d4BgYOlesuGkGN6MEgvDDA90TAVm6/wHBLX9i0ocL3a3nrX8uyI3cPzVEWTSu:84d4BgYOlesuGkGN8MDA90TAVm+FXZy/
MD5:	D694ABD4B9D1A3274D4351936BD1A1AC
SHA1:	7E5187F54FAF32909EE7D6F0DDBB29C70D832CFD
SHA-256:	D548747F17CB2447C70BFE3B150C70673F386EDFD74102B25552423BDBB991A0
SHA-512:	EB3DCEA01784F16DBE5A8956D1F60B14160ECB6FA5227501F9619BB6F1D1FED315ADD5B71680E65CD1B283893CC957F53E7DD337ADB80566A716BFCA94E6C3B3
Malicious:	false
URL:	https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Download & install Google Chrome - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Google Chrome is a fast web browser available at no charge. Before you download, you can check if Chrome supports your operating system and you have all the other system requirements. How to install" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/95346?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92F

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	7.732285685105188
Encrypted:	false
SSDEEP:	24:pv9p3oyuIhVmsp/LAbXrBvwRS7SlU0sAhoaXAn:p+IqspjAkJm0+aQn
MD5:	690CB3BB457A1779CB1BC2F342D7595A
SHA1:	8B2EBAEEB449550FEC3ADF5F83883A7C1BE8DA18
SHA-256:	9766CA2F4DAFCE7C640702D0CBC8EBE5A0BEA071E5B91ED291225706044AEEAF
SHA-512:	D9E5471602CF110761A2B285C82622A621268A594529B6D117DC0D28D753ED6E63F9DFD7BD9A57B60FBC9C5E72D6D0B1D1CEA299CC9FDE65DE0FE05ACED314D1
Malicious:	false
Preview:	.PNG........IHDR..............w=.....IDATx..U...[..sg.l....7..F1v...o.m#.nlc...w..f'vou..v..p.A8.V.h.....hR.F....."....#._+.i...2........J.]D.N..B~.@.....c[\|n........\i+..". .......l./.............@@.N..J....QyL..uuA..w....Qj.zw.. .\|0..-....cFN>.B=. ../....[..9..v.>..}bSm.\...&\|.....}8:..-......f.u......{!o..DC..+bC.........;..X.......\|q... &. cW....gF....5.0.u.{...bx...~..1.=..L.....@$..'`].8/(.4&.f.....8..Y.....C..q$dm.{q.....$.I"..&..........zzx.. 5..p9^.U...[....=$)N..A.:..j.@.X\..w...64..h.....'g(...@h.I.....<5(/f[.S....Y.^.U.@..a..0.qG..?..>.'gx....f!.k..+%rf.Y.._....vy.0......w..F.W....i\|&.I........I.B....&.&{.....hOy.$Vo..Z..c...).2.d&2.Q.y...C.....=..q..f\|.@..7....u~.`......~..\,R.S......l^........P,.6O1.....C..v3...zQ...70w0.A.e.S6..%y{1.bK.5aL......#.=....8)5...fWT..f....].Kr;.......E.....~.Q.=H...G4=9f.^.......D.?.x..^.=...5...H07.74.b....5.N}ua..Pm&E3TV.7.Z.9..~...-;p!..2....o....=..k...oZ.8... .(........-.....IEND.B`

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Preview:	Bad request.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	277739
Entropy (8bit):	5.581835192968941
Encrypted:	false
SSDEEP:	6144:NVWYhz0t1tOPnNsqP0KY/knHHQGS3SDY9lgQ9:nrOz4PJ70DT9
MD5:	B59EB4D46302CADE875B22FD35EAC5E9
SHA1:	7A91512AAEA61202C8A8405A0524C7ADFD52E282
SHA-256:	B6DF0CF4514C2C7EFE7110C67420A216C2D22945978F9DDD1888CE6EFD3A5EC4
SHA-512:	52E10823A84DC654503B54D41C4CDFD88DC853232232F15B6299278C4E799E80A23EE84CFF4B29EFCECB976B69BD68ECB800DFF385739B01881FB8E3E9AD05C0
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	6.079677011439454
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xt7A7Ogvnv+cTvpddshoChexymXOPr0yFYcCcqCwaGeup:6v/lhPX7A7OFKf0M1XgAyNCPdp
MD5:	1459AF1FBD15FDFDB9BCEF3B4B875862
SHA1:	A8AF5219EEC6EF96DEBA897FA111DEB498A04A9E
SHA-256:	02ABB4D4952D1022BECCC0940964BAFDE027E95DBB007E1E9C699F66D2717320
SHA-512:	8CD89F240B877D8D776A40711C88C8EC22A66D0C6666EF2A2629086F85D6FA3C98ABB2CF868FA5D4896BE1BDF49C94A07D97EF7F36317F75EB465D9B07AFFE61
Malicious:	false
URL:	https://lh3.googleusercontent.com/gv4UzxwBWVHxxyY26lRgv7WIeFfZZSSCGe5vUBZdm7ePRpUvmf_5Cs23ZTgETaA2kyU4=w36-h36
Preview:	.PNG........IHDR.............J~.s...^IDAT8.c`..0P.Z.J.r..W@(B.....p%.....A0.8.kxI.......;....).Cr.1.*]....W.R..U9...T....RG....0..._....IEND.B`.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6015
Entropy (8bit):	5.417043325436399
Encrypted:	false
SSDEEP:	96:GhOEazFZMOEaK3qOEanOEajJc+u+OEa7NMhOXa7FZMOXa93qOXagOXaEJc+u+OXM:GuPK3Ng3k+tA93OoALmLy13Eq4tK
MD5:	0B414B7DB9A539E8EE336BCDCA5F8FDD
SHA1:	CB596295697D8D7CBAB3FE7C9FEAC1AC35FF384B
SHA-256:	40760A00D5366341EFF02BFD114E8FB328DD3926295073397F0CAA00B7E3B070
SHA-512:	51D9A66BFFB08E76F8413FB4B173070F3499F38C0C2AFFAAF1217E904B1FE6FDD500E9242EF8278BD7D948014070B2A5AB421E982AF82DD0DE7B33D5506788BA
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16396, version 1.0
Category:	downloaded
Size (bytes):	16396
Entropy (8bit):	7.985827035156134
Encrypted:	false
SSDEEP:	384:Lha7McMVhiB+XmITjsy+wHXjov+sc8idzmAKUcLIS:Va7McSPXpjsy+wHzu+nZdKDUcLr
MD5:	A2EDB5C7EB3C7EF98D0EB329C6FB268F
SHA1:	5F3037DC517AFD44B644C712C5966BFE3289354C
SHA-256:	BA191BF3B5C39A50676E4ECAE47ADFF7F404F9481890530CDBF64252FBB1A57E
SHA-512:	CC5644CAF32302521CA5D6FD3C8CC81A6BBF0C44A56C00F0A19996610D65CF40D5BAE6446610F05A601F63DEA343A9000E76F93A0680CFBF1E4CF15A3563A62C
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2
Preview:	wOF2......@...........?...........................<..l..:.`..:........d.....6.$..(. .....N.....5x.-.v.?..,...<Sn..O/.<.... ......{r2D!v@..?...."..F..\3...-5B....x.).x.$ze._c.l.)~Y..YE.J.e.uW.%).?..T.].q_7y.4...$....t.F #t8.j...GO..k..&.Ecb.X..m#.........k.s.Fr...<q~.@].PHN?..w.h.f...!h..A,H......H.R.T.R.......)...m..}u...".)(J.......>!. .V-....E^.bQ.....U.....u.s?$3.L$...y.........LpB.H.=...."R]\|=..._.o..W....N.j2.L.D.....{.<..s.W1I. zHx:..I.......G..~.6..E.&I4.J..h.Y...uM..D.z.u..)......<...T.......U...k...O......C.!vCy....&..y......t....e...(#.......%v..;.XTS...,....A.w.....K...vv.AI..~y..t..f.....D!...h.."e...h.pQ..{...\..G.......K.[.R....{.%]].0...!i.. ....w......4...`G.2...GD.wZV"...I.......tGQ.<..d..P...o.{......].hI#.....(..0_d..%....E.....?.\|...)...U."b....1bT.....~.U.[.NJ%....hW....s.;.Vm.}]..2............<...\|q.yW.x....sar!.J. .D...z..GcH.~k.r. >..kY...$2D..B@0.5.6.:...T.xr.~. `M...;.?..b6.Puc,.P.....F.pU.a.f_.xS.....IV.r~......6"..AX.

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.536442997734911
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Benefits_Update_2024.pdf
File size:	31'850 bytes
MD5:	76ce69deb34db183f44a90e13b5f2c59
SHA1:	de1e681e6159890887d07d4fc7ff8bfdd0730a0f
SHA256:	336352ca66331802d8c77c2aa747bf99746465e442de7ec458d5b829478bad80
SHA512:	57f6a4a3fe82849afcde249bccd0faef44b2a7c15405295fb584c7aeaf3e645a8302f98458843405e8b36accc48f89dcbf36d2099710eab63eac609bb257a0da
SSDEEP:	768:aQpLoHXxxB7FzP6o4EgC3JqL3mKGGVuq7GGX/Ep32GiMqcC:tQXVNP6bEgEJMXGG0q7GGgS
TLSH:	89E2D001DDB0A894CD9F7C326AE0BA5925BEF0CADEF09AD34258660C7177A157418AB3
File Content Preview:	%PDF-1.4.%.....1 0 obj.<</Title (Untitled 1)./Creator (Mozilla/5.0 $Macintosh; Intel Mac OS X 10_15_7$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/128.0.0.0 Safari/537.36 OPR/114.0.0.0)./Producer (Skia/PDF m128)./CreationDate (D:20241118075304+00'00

File Icon


Icon Hash:	62ceacaeb29e8aa0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.536443
Total Bytes:	31850
Stream Entropy:	7.509559
Stream Bytes:	29806
Entropy outside Streams:	5.249839
Bytes outside Streams:	2044
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	12
endobj	12
stream	4
endstream	4
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	4
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
4	0000000000000000	57b91eed88b06030cebdca481c24577c

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 18, 2024 11:15:58.047995090 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:58.048078060 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:58.048151970 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:58.049535990 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:58.049618959 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:58.049741030 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:58.060678959 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:58.060717106 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:58.074387074 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:58.074425936 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.160300970 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.162679911 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.163028002 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.163084984 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.163146019 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.163204908 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.164159060 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.164227009 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.164804935 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.164870024 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.384500980 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.384670019 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.384790897 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.384816885 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.384874105 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.385052919 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.583734035 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.583767891 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.583863974 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.583921909 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.785959005 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.786019087 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.786217928 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.788151026 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.788386106 CET	443	49162	23.101.59.196	192.168.2.22
Nov 18, 2024 11:15:59.788474083 CET	49162	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:15:59.803220034 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:15:59.803339958 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:15:59.803430080 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:15:59.803555012 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:15:59.803575039 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.421829939 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.422205925 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.422238111 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.423141003 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.423213959 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.424753904 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.424808979 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.425106049 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.425117970 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.557463884 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.557568073 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.557621956 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.557652950 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.557717085 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.557725906 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.557856083 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.557902098 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.557909966 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.558108091 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.558165073 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.558176994 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.558381081 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.558439016 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.558834076 CET	49166	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.558865070 CET	443	49166	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.563683987 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:16:00.568586111 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:00.568671942 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:00.568753958 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:00.568993092 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:00.569024086 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:00.607332945 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:16:00.840182066 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:16:00.840821028 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:16:00.840903044 CET	443	49163	23.101.59.196	192.168.2.22
Nov 18, 2024 11:16:00.840981960 CET	49163	443	192.168.2.22	23.101.59.196
Nov 18, 2024 11:16:00.842938900 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.843019009 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:00.843097925 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.843425035 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:00.843462944 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.169189930 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.170110941 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.170171022 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.171194077 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.171310902 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.172955990 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.172955990 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.172987938 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.173052073 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.314773083 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.319349051 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.319428921 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.325587988 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.344198942 CET	49168	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.344198942 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.344285011 CET	443	49168	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.344343901 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.344629049 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.344963074 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:01.345000982 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:01.454519033 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.460549116 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.460611105 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.461777925 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.462780952 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.463026047 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.463071108 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.503334999 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.613861084 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.613959074 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614036083 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614120960 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614164114 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.614164114 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.614231110 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614346027 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614578962 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614655018 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614789963 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.614852905 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.614897013 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.623416901 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.624732018 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.804624081 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.809027910 CET	49169	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:01.809067965 CET	443	49169	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:01.945588112 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:02.124952078 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:02.125011921 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:02.125735044 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:02.152523041 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:02.152609110 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:02.152698994 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:02.255496025 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:02.255714893 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:02.257282019 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:02.257314920 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:02.257993937 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:02.299324989 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:02.401408911 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:02.402470112 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:02.402554989 CET	443	49170	35.190.80.1	192.168.2.22
Nov 18, 2024 11:16:02.402611971 CET	49170	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:16:02.479410887 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:02.479441881 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:02.479491949 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:02.481096983 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:02.481115103 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:02.865649939 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:02.865964890 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:02.865991116 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:02.866430998 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:02.867415905 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:02.867485046 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:02.867708921 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:02.915322065 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.003258944 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.003344059 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.003387928 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.003438950 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.003448963 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.003670931 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.004002094 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.004040956 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.004040956 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.004055977 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.004436016 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.004471064 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.004477024 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.119811058 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.119873047 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.119895935 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.120167971 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.120209932 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.120243073 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.120250940 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.120505095 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.120682955 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.120688915 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.120975018 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.121014118 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.121020079 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.121344090 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.121381044 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.121387005 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.236958027 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.237018108 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.237039089 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.237287045 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.237420082 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.237426043 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.237668991 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.237708092 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.237714052 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.238065958 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.238106012 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.238111973 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.284312963 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.284358978 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.284379959 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.284388065 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.284445047 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.331284046 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:03.331579924 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:03.331598043 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:03.332808971 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:03.332880974 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:03.333875895 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:03.333944082 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:03.353990078 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.354199886 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.354384899 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.354410887 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.354424953 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.354439974 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.354469061 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.354732037 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.401321888 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.401371002 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.401442051 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.401463985 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.471115112 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.471256971 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.471280098 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.471451044 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.471506119 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.471544981 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.471553087 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.471594095 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.518490076 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.518692017 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.518716097 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.518928051 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.519064903 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.519087076 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.534185886 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:03.534214020 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:03.588428974 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.588562012 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.588583946 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.588706017 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.588743925 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.588749886 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.635551929 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.635647058 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.635654926 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.636027098 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.636087894 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.636094093 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.705192089 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.705399036 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.705430031 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.705542088 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.705593109 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.705600977 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.705934048 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.705980062 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.705986977 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.706299067 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.706389904 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.706542969 CET	49171	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.706558943 CET	443	49171	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.730956078 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.731050014 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.731118917 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.731378078 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:03.731430054 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:03.731564045 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.731583118 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:03.731600046 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.731703997 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:03.731723070 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:03.734175920 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:03.734675884 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:03.734684944 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:03.734735012 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:03.734882116 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:03.734891891 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:03.841203928 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.841245890 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:03.841303110 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.841710091 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:03.841723919 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.339554071 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:04.342737913 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.343678951 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:04.343698978 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:04.345141888 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:04.345201969 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:04.346395016 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:04.451921940 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.486241102 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.486306906 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.487818956 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.489783049 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.489994049 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.549377918 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:04.650897980 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:04.650948048 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:04.652631998 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:04.652653933 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:04.652709961 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:04.659368992 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.659449100 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.708935976 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:04.709326982 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:04.711412907 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.711513996 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.727463961 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.727478027 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.728190899 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.915338993 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:04.915396929 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:04.918720007 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.918760061 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.918921947 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.918978930 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.919049978 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.935329914 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.935386896 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.956475019 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.956645966 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:04.957137108 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:04.957238913 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:04.957299948 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:04.957581997 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:04.957624912 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:04.957634926 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:04.999321938 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:04.999322891 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.060503006 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.060657978 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.060717106 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.060755014 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.060842991 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.060890913 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.060900927 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.061075926 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.061115980 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.061127901 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.061222076 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.061264038 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.061273098 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.064966917 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.065023899 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.065032005 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.065174103 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.065210104 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.086525917 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.086590052 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.086625099 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.086637974 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.086792946 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.086836100 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.086841106 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.087228060 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.087255955 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.087260962 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.087635040 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.087668896 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.087675095 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.087687969 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.087718010 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.091384888 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.091422081 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.091428041 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.091577053 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.091613054 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.091618061 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.091830015 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.091830969 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.091861010 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.091866016 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.092269897 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.092303991 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.092308998 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.203675032 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.203752041 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.203814030 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.203906059 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.203975916 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.203994989 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.204087019 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.204132080 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.204144955 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.204554081 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.204603910 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.204617023 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.204940081 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.204982042 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.204993963 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.206655979 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.208096027 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.208134890 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.208147049 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.208165884 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.208198071 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.208218098 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.208240032 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.208586931 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.208633900 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.208647966 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.208786964 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.208833933 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.208847046 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.209199905 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.209240913 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.209244013 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.209256887 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.209302902 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.209415913 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.209677935 CET	49173	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.209717989 CET	443	49173	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.226279020 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.226517916 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.226569891 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.240616083 CET	49176	443	192.168.2.22	172.67.189.16
Nov 18, 2024 11:16:05.240636110 CET	443	49176	172.67.189.16	192.168.2.22
Nov 18, 2024 11:16:05.287028074 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.287120104 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.287262917 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.301008940 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.301091909 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.320276022 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.320537090 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.320590019 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.320628881 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.320846081 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.320907116 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.320920944 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.321223021 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.321338892 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.321352005 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.321449041 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.321506023 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.321520090 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.321974993 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.322026014 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.322038889 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.325177908 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.325373888 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.325423002 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.325438023 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.325705051 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.325843096 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.325845003 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.325860023 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.325901031 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.325913906 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.326160908 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.326204062 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.326217890 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.326419115 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.326462030 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.326473951 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.393868923 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.394062042 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.394081116 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.437493086 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.437721968 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.437772036 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.437781096 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.437880039 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.437922955 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.437932014 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.442275047 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.442329884 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.442337036 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.442570925 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.442612886 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.442619085 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.442713022 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.442750931 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.443438053 CET	49175	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.443454027 CET	443	49175	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.481618881 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.481709957 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.481786966 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.486238003 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.486282110 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.570540905 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.570594072 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.570662022 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.571342945 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:05.571357012 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:05.587457895 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.587507963 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.587527037 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.671024084 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.671113968 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.671133041 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.671447039 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.671494007 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.671499014 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.671946049 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.671999931 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.672005892 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.672161102 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.672194004 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.672202110 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.672745943 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.672796011 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.672802925 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.673119068 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.673161983 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.673167944 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.681696892 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.788242102 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.788253069 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.788315058 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.788667917 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.788676977 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.788708925 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.821162939 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.821172953 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.821228981 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.905391932 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.905402899 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.905440092 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.905462027 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.905476093 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.905484915 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.916042089 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.916330099 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.916358948 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.916687012 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.917053938 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.917113066 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.917346001 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.938224077 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.938297987 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.938309908 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.938597918 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.938652039 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.938657999 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.938685894 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.938724041 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.961646080 CET	49174	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:05.961658001 CET	443	49174	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:05.963325977 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:06.057296038 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:06.057368040 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:06.057485104 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:06.081927061 CET	49178	443	192.168.2.22	104.21.81.97
Nov 18, 2024 11:16:06.081940889 CET	443	49178	104.21.81.97	192.168.2.22
Nov 18, 2024 11:16:06.090845108 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.113106966 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.113115072 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.113971949 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.114025116 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.114474058 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.114517927 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.114671946 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.114676952 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.166577101 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.171592951 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.171633959 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.172672033 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.172730923 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.173240900 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.173304081 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.173481941 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.173496962 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.263942003 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.263991117 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.264002085 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.264175892 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.264216900 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.264221907 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.264652014 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.264682055 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.264688015 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.264692068 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.264725924 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.265080929 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.305809975 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.305892944 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.305926085 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.306332111 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.306359053 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.306390047 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.306410074 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.306462049 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.306691885 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.306749105 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.306796074 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.306809902 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.362955093 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.363017082 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.363091946 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.380266905 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.380320072 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.380417109 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.380424976 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.380537987 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.380570889 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.380574942 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.381072044 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.381102085 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.381225109 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.381230116 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.381875992 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.381995916 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.381997108 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.382004976 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.382055998 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.382060051 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.382313013 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.382347107 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.421943903 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.422007084 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.422029972 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.422059059 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.422107935 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.422355890 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.422651052 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.422681093 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.422694921 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.422713995 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.422774076 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.422786951 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.438215971 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.438232899 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.439439058 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.439461946 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.440222979 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.440350056 CET	49179	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.440360069 CET	443	49179	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.449604034 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.449637890 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.449681044 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.450221062 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.450234890 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.462990046 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.463154078 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.463171959 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.537600040 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.537666082 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.537691116 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.537777901 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.537820101 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.537827969 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.538038969 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.538081884 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.538089991 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.538389921 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.538435936 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.538444042 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.578218937 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.578259945 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.578272104 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.578295946 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.578344107 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.618752003 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.663707972 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.663799047 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.663820028 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.663867950 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.663903952 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.663976908 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.663990974 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.664011955 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:06.664061069 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.681296110 CET	49180	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:06.681334019 CET	443	49180	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.058033943 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.059602976 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.116345882 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.116394043 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.116662025 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.116679907 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.117717028 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.117872000 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.136459112 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.136713028 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.136883020 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.137089014 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.137109995 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.137140989 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.179356098 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.179368973 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.271465063 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.271553040 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.274332047 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.274477005 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.274537086 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.274564028 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.274662971 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.274709940 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.274725914 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.274874926 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.274921894 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.274936914 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.275274992 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.275357962 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.275372028 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.323678017 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.323694944 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393141031 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393218040 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.393241882 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393335104 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393399000 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.393414021 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393589973 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393645048 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.393659115 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393910885 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.393995047 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.394001961 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.394031048 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.394104004 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.394402981 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.425220966 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.425364017 CET	49183	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.425385952 CET	443	49183	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.511454105 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.511648893 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.511719942 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.511784077 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.512020111 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.512072086 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.512089014 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.512450933 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.512499094 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.512516022 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.512799025 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.512855053 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.512868881 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.522496939 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.554518938 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.554676056 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.554732084 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.554755926 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.627532959 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.627645016 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.627701044 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.630664110 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.630749941 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.630774021 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.630870104 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.630917072 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.630934954 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.631027937 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.631081104 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.631093979 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.633800983 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.633838892 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.672889948 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.673000097 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.673067093 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.673086882 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.749370098 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.749402046 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.749500036 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.749528885 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.749778986 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.749855995 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.749870062 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.791771889 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.791801929 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.791831970 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.791851044 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.791898012 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.792068005 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.792087078 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.792119026 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.867974043 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.868035078 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.868063927 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.868366957 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.868427038 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.868442059 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.910491943 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.910551071 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.910567999 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.910834074 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.910888910 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.910902023 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.986680031 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.986742020 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.986776114 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.987092972 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.987152100 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.987184048 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.987606049 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:07.987667084 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:07.987679958 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.029748917 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.029824018 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.029844999 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.030041933 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.030101061 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.030114889 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.105714083 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.105789900 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.105809927 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.106173038 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.106231928 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.106246948 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.148298025 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.148354053 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.148377895 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.148571014 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.148610115 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.148853064 CET	49182	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.148873091 CET	443	49182	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.153593063 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.153645992 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.153685093 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.153954029 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.153968096 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.247164965 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.247484922 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.247510910 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.247958899 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.248302937 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.248370886 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.248445988 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.295325994 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.303236961 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.303293943 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.303347111 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.303855896 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.303877115 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.387123108 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.387214899 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.387276888 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.389628887 CET	49186	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.389646053 CET	443	49186	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.791893005 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.792289972 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.792321920 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.792757034 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.793097973 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.793169975 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.793226957 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.835326910 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.911576986 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.911844015 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.911890030 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.912199020 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.912597895 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.912674904 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.912950039 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.912983894 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.912996054 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.913054943 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.913085938 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.930514097 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.930663109 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.930710077 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.930732012 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.930819035 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.930860996 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.930870056 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.930973053 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.931022882 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.931029081 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.931143999 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.931191921 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.931197882 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.931370974 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:08.931412935 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:08.931426048 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.049525023 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.049619913 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.049643993 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.049736977 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.050054073 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.050139904 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.050172091 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.050180912 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.050226927 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.050318003 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.050730944 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.050812006 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.050923109 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.050930023 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.069305897 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.069363117 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.069458008 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.069948912 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.069971085 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.070086956 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.070149899 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.070199966 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.071527958 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.071542978 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.071708918 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.074486017 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.168967009 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.169089079 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.169173956 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.169181108 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.169208050 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.169236898 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.169707060 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.169835091 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.169866085 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.169874907 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.170020103 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.170027018 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.186382055 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.186489105 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.186551094 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.186650991 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.186947107 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.186950922 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.186961889 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.187005997 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.187040091 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.187055111 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.187546015 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.187556982 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.187839985 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.187943935 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.187954903 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.210969925 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.211067915 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.211091042 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.211100101 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.211443901 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.211451054 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.288438082 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.288491011 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.288539886 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.288563967 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.288589001 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.288954973 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.288980007 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.288990974 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.289280891 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.289288044 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.303147078 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.303277016 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.303301096 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.303363085 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.303699970 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.303709984 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.303940058 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.303961039 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.304194927 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.304212093 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.304222107 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.304316044 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.330121994 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.330225945 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.330246925 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.344118118 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.344175100 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.344233036 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.344247103 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.407783031 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.407951117 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.407968998 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.408349991 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.408394098 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.408427954 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.408437014 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.409614086 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.420309067 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.420339108 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.420406103 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.420428991 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.420432091 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.420445919 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.420469999 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.420778990 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.420799017 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.420864105 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.420874119 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.449785948 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.449812889 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.449994087 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.450015068 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.450123072 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.450131893 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.461417913 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.461555958 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.461591005 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.528078079 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.528208971 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.528222084 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.528270006 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.528306007 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.528335094 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.529021025 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.529344082 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.529355049 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.536916971 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.537235022 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.537241936 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.537271023 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.540755987 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.540791035 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.540904999 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.569341898 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.573726892 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.573759079 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.577841997 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.577862024 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.578049898 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.578085899 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.578155994 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.578192949 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.663682938 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.663793087 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.663803101 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.664293051 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.664305925 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.664500952 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.664530039 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.665096045 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.665127993 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.665127993 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.665436983 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.665447950 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.665469885 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.665493965 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.665519953 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.665532112 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.668781042 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.668792009 CET	443	49188	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.668816090 CET	49188	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.688352108 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.688611984 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.688627958 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.689719915 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.689738989 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.705099106 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.705136061 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.712577105 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.766119003 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.766561031 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.766571999 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.766616106 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.766655922 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.766675949 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.766726017 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.772432089 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.789000988 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.789032936 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:09.878456116 CET	49187	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:09.878500938 CET	443	49187	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.171125889 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.171226978 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.171313047 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.171797991 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.171833992 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.400981903 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.401384115 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.401406050 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.402584076 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.402929068 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.403052092 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.403058052 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.403111935 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.539623022 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.539710999 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.540335894 CET	49189	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.540354967 CET	443	49189	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.782901049 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.783237934 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.783274889 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.783755064 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.784105062 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.784209967 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.784243107 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.827346087 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.926909924 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.926985979 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.928159952 CET	49190	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.928189993 CET	443	49190	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.932328939 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.932363033 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.932425976 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.933357000 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.933449030 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.933613062 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.933623075 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:10.933649063 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.933882952 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:10.933917046 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.544994116 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.545396090 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.545475960 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.545531034 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.546092987 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.546123981 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.546823978 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.547158957 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.547308922 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.547336102 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.547499895 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.547657967 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.547796965 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.547957897 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.548094988 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.681268930 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.681442976 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.682156086 CET	49191	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.682168961 CET	443	49191	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.683178902 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.683267117 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.683290005 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.683334112 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.683976889 CET	49192	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.684019089 CET	443	49192	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.817152023 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.817235947 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:11.817445993 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.817702055 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:11.817733049 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.432281971 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.432655096 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.432713032 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.433182001 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.433598995 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.433684111 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.433810949 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.433811903 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.433854103 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.433936119 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.433973074 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.434051991 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.434088945 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.434176922 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.434192896 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.717536926 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.717678070 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.717761993 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.717864990 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.717864037 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.717936993 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.717974901 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.718051910 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.718096972 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.718112946 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.718269110 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.718307972 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.718321085 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.835513115 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.835586071 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.835623980 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.835669041 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.835706949 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.835745096 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.835745096 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.835745096 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.835815907 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.836229086 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.836262941 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.836283922 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.836298943 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.836359978 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.836371899 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.836405039 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.836447954 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.836663008 CET	49193	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.836697102 CET	443	49193	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.845211029 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.845334053 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:12.845448971 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.854211092 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:12.854244947 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:13.327990055 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:13.328129053 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:13.328210115 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:13.472927094 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:13.473361015 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:13.473392963 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:13.474884033 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:13.475233078 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:13.475377083 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:13.475383043 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:13.475454092 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:13.582680941 CET	49172	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:16:13.582756042 CET	443	49172	172.217.16.196	192.168.2.22
Nov 18, 2024 11:16:13.611532927 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:16:13.611596107 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:13.612131119 CET	49194	443	192.168.2.22	104.18.94.41
Nov 18, 2024 11:16:13.612148046 CET	443	49194	104.18.94.41	192.168.2.22
Nov 18, 2024 11:17:00.572988987 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:00.573035002 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:00.573112965 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:00.573368073 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:00.573386908 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:00.583018064 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:00.583065033 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:00.583226919 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:00.583323002 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:00.583334923 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.190985918 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.191373110 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.191395044 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.192863941 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.192928076 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.194434881 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.194510937 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.194798946 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.194807053 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.203001022 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.203347921 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.203372002 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.206921101 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.206991911 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.207492113 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.207664967 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.207670927 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.207818031 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.340847969 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.340924025 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.341586113 CET	49200	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.341609955 CET	443	49200	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.342315912 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.342349052 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.342415094 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.343548059 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.343563080 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.352993965 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.353101015 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.401160002 CET	49201	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.401194096 CET	443	49201	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.401925087 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.401954889 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.402017117 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.402622938 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.402637959 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.956626892 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.956918955 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.956939936 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.957396030 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.957937956 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.958002090 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:01.958101988 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.958122015 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:01.958127022 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.023564100 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.023865938 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:02.023896933 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.024357080 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.024723053 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:02.024787903 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.024879932 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:02.071321964 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.103197098 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.103463888 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:02.103507996 CET	443	49202	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.103564024 CET	49202	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:02.170018911 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.170480013 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:02.170531034 CET	443	49203	35.190.80.1	192.168.2.22
Nov 18, 2024 11:17:02.170584917 CET	49203	443	192.168.2.22	35.190.80.1
Nov 18, 2024 11:17:02.538439989 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:02.538486004 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:02.538552999 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:02.538789988 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:02.538800955 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:03.541464090 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:03.541846991 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:03.541872025 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:03.542390108 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:03.542685032 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:03.542768955 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:03.751329899 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:03.751571894 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:13.395836115 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:13.395912886 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:13.396090031 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:14.399000883 CET	49204	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:14.399072886 CET	443	49204	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:16.072573900 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.072674036 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.072747946 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.072835922 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.072859049 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.072896004 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.073029041 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.073066950 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.073157072 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.073168993 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.916326046 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.916584015 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.916640043 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.917895079 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.917979956 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.920397997 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.920483112 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.921291113 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.921408892 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.921457052 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.921957970 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.922146082 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.922162056 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.922672987 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.922805071 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.923700094 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.923757076 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.923906088 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:16.923989058 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:16.963329077 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.123830080 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.123855114 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.129926920 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.129941940 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.323875904 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.323926926 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.324404955 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.324465990 CET	443	49205	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.324528933 CET	49205	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.326165915 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.371326923 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.725153923 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.725209951 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.725230932 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.725256920 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.725276947 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.725423098 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.734441996 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.734472990 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.734514952 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.734524012 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.734563112 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.741508961 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.741564989 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.741642952 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.741682053 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.750231981 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.750283003 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.842240095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.842345953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.842366934 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.842438936 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.842438936 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.842457056 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.842674971 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.842715979 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.842724085 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.851648092 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.851720095 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.851727962 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.851738930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.851773977 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.851780891 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.858355999 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.858402014 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.858412027 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.858695984 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.858736038 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.858737946 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.858751059 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.858783007 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.908173084 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.908252954 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.959382057 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.959486961 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.959872007 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.959918022 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.959986925 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.960025072 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.968628883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.968699932 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.968753099 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.968796015 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.968806028 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.975788116 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:17.975855112 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:17.975864887 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.025531054 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.025568008 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.025594950 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.025604963 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.025639057 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.076574087 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.076956987 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.077001095 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.077011108 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.077122927 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.077159882 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.077167988 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.085885048 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.085946083 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.085954905 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.093297005 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.093359947 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.093367100 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.093374014 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.093405008 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.142621994 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.193573952 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.193609953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.193641901 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.193654060 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.193691015 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.194084883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.202835083 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.202883959 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.202894926 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.409910917 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:18.409925938 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:18.609950066 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.251390934 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.251480103 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.251575947 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.251593113 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.251787901 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.251831055 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.251847982 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.251985073 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.252027988 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.252043962 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.252353907 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.252430916 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.252438068 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.252737999 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.252806902 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.252815008 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.253175020 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.253213882 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.253215075 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.253230095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.253289938 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.253295898 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.254075050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.254105091 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.254129887 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.254143953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.254174948 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.254180908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.257575989 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.257608891 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.257635117 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.257642984 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.257688046 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.257836103 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.257882118 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.257919073 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.257926941 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258377075 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258424997 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.258430004 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258582115 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258727074 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.258733988 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258908033 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258944035 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258968115 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.258970976 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.258979082 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.259309053 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.261651039 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.261682987 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.261723995 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.261732101 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.261938095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.261972904 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.261981964 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.261987925 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.262022018 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.262455940 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.262561083 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.262568951 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.262773991 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.262837887 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.262844086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.263308048 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.263340950 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.263355970 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.263362885 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.263407946 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.263573885 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.263839006 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.264008045 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.264255047 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.264281034 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.264286041 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.264297009 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.264317989 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.264504910 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.264976025 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.265109062 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.265116930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.265264988 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.265326023 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.265335083 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.265484095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.265530109 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.265537024 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.266067982 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.266093969 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.266114950 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.266123056 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.266168118 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.266642094 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.266992092 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.267060041 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.267065048 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.267322063 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.267399073 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.267405987 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.267666101 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.267709017 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.267716885 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268018007 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268112898 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.268120050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268506050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268563032 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.268569946 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268603086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268636942 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.268645048 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268867970 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.268942118 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.268949986 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.269925117 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.269961119 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.269990921 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.269998074 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.270087004 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.270389080 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.270441055 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.270471096 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.270490885 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.270499945 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.270558119 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.270688057 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271081924 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271111012 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271128893 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.271135092 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271174908 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.271190882 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271552086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271579981 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271608114 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271639109 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271644115 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.271644115 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.271655083 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.271728039 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.271743059 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.272437096 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.272469044 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.272492886 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.272507906 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.272514105 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.272548914 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.272558928 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.272599936 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.272604942 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273354053 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273385048 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273402929 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.273410082 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273437977 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273469925 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.273477077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273525953 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.273768902 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273840904 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273874998 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273888111 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.273894072 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273927927 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273947001 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.273955107 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.273991108 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.274702072 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.274781942 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.274817944 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.274853945 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.274874926 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.274880886 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.274890900 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.275371075 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.275409937 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.275417089 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.275423050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.275557995 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.275779963 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.275784016 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.275850058 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.275975943 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.296109915 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.296310902 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.296386957 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.296396971 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.296597004 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.296648026 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.296654940 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352250099 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352319002 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.352333069 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352417946 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352466106 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.352473974 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352615118 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352638006 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352652073 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.352668047 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.352771044 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.352972031 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.353010893 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.353054047 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.353149891 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.353157997 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.353219032 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.353349924 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.353511095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.353562117 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.353579044 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.355654955 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.413302898 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.413347006 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.413371086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.413453102 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.413465977 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.413568020 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.469340086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.469432116 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.469472885 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.469487906 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.469655991 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.469707012 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.469708920 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.469722033 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.469765902 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.469964027 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470326900 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470361948 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470385075 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470396996 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.470406055 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470417023 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.470906973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470937014 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470952034 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.470961094 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.470988035 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.471000910 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.471008062 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.471069098 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.485918999 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.530134916 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.530241013 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.530370951 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.530380964 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.546051979 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:19.546144009 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:19.546212912 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:19.547456026 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:19.547494888 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:19.586332083 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586363077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586384058 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586421013 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.586431026 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586447001 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.586749077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586776018 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586796999 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586800098 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.586810112 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.586847067 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.587352037 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587392092 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587418079 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587440968 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.587449074 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587471962 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.587774038 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587798119 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587829113 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.587830067 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587842941 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.587893009 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.590123892 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.632047892 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.647300005 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.647330046 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.647383928 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.647393942 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.647453070 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.647550106 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.703418016 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.703449011 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.703495979 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.703514099 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.703587055 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.703604937 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.703737020 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.703797102 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.703804016 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.703948021 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704020977 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.704030037 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704360962 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704394102 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704410076 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.704416990 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704480886 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.704488993 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704930067 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704961061 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.704973936 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.704981089 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.705060005 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.712017059 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.749185085 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.749346972 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.749435902 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.749452114 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.764462948 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.764535904 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.764547110 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.764717102 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.764743090 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.764772892 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.764786005 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.764856100 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.820595026 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.820720911 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.820760012 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.820789099 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.820812941 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.820823908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.820839882 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.821305037 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.821378946 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.821383953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.821455002 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.821485043 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.821547031 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.821554899 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.821615934 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.821852922 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866194963 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866224051 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866276026 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.866308928 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866359949 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.866759062 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866859913 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866889954 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866903067 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.866919994 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.866969109 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.866977930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.881508112 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.881563902 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.881573915 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.881665945 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.881726027 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.881736040 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.884027958 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.937761068 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938033104 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938061953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938086033 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938112974 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.938144922 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938170910 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.938457012 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938488007 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938509941 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938556910 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.938556910 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.938566923 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.938947916 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.939003944 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.939013004 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.942828894 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.983499050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.983542919 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.983608007 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.983640909 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.983747005 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.983764887 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.983784914 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.983788013 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.983808994 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.983860016 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.984209061 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.984261990 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.984282017 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.984718084 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.998655081 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.998950958 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.998976946 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.999017954 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:19.999028921 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:19.999106884 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.054811001 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.054953098 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.054979086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.055011988 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.055042028 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.055057049 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.055078030 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.055409908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.055443048 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.055465937 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.055474043 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.055519104 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.055814981 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.100594997 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.100620985 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.100646973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.100703001 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.100703001 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.100739956 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.100931883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.100961924 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.100995064 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.101005077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.101382971 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.101391077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.101587057 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.101617098 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.101645947 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.101655006 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.101907969 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.115880966 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.115921974 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.116105080 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.116116047 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.116158962 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.116245031 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.116252899 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.171873093 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172040939 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172069073 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172080040 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.172116041 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172168016 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.172441959 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172487020 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.172497034 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172635078 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172652960 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172682047 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.172692060 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.172763109 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.173058033 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.178102970 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.178112984 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.217696905 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.217746973 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.217758894 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.217911959 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.217957020 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.217966080 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218116999 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218224049 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.218231916 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218554974 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218583107 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218601942 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.218611956 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218641043 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218676090 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.218686104 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.218738079 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.232963085 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.280049086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.280077934 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.280154943 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.280169010 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.280250072 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.289082050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.289170980 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.289227009 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.289236069 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.289417982 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.289443970 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.289468050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.289475918 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.289484024 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.289509058 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.290051937 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.290088892 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.290097952 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.290491104 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.290517092 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.290543079 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.290553093 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.290592909 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.334758043 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.334923983 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.334974051 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.334995031 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335217953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335244894 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335283041 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.335290909 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335335016 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.335464001 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335551977 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335580111 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335596085 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.335613966 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.335679054 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.350148916 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.398757935 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.398808956 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.398842096 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.398857117 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.398895979 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.398935080 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.407560110 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.407622099 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.407632113 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409188032 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409241915 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409287930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409290075 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.409302950 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409336090 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.409370899 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409399033 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409415007 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.409427881 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409437895 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409485102 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.409492970 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409523964 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.409590960 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.409598112 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.414349079 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.437822104 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.451948881 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.452058077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.452152967 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.452166080 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.452651024 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.452713013 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.452723026 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.452929974 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.452987909 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.452996016 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.453165054 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.453186989 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.453216076 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.453233957 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.453241110 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.453257084 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.461355925 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:20.461416960 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.462965012 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.463043928 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:20.463057041 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.463095903 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.463114023 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:20.467279911 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.467334986 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.467344999 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.467405081 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.516284943 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.516316891 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.516366959 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.516385078 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.516429901 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.516603947 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524059057 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524152040 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.524159908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524184942 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524208069 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524229050 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524238110 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.524245977 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524266005 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.524732113 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524749994 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524785042 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.524792910 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.524835110 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.524859905 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.525337934 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.525397062 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.525404930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.569417000 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.569437981 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.569456100 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.569479942 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.569504023 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.569535017 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.570153952 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.570173979 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.570192099 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.570199013 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.570207119 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.570250034 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.570681095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.570698023 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.570785999 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.570796013 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.570837021 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.570861101 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.584456921 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.584520102 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.584530115 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.598064899 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.633222103 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.640754938 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.640822887 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.640836954 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.640863895 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.640913010 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.640922070 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.641180038 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.641201973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.641237974 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.641247034 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.641298056 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.641486883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.641519070 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.641556978 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.641566992 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.642138958 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.642162085 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.642184019 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.642185926 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.642199993 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.642221928 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.658221006 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.671369076 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.671463013 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:20.682229996 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:20.682456970 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.684199095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.685569048 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:20.685599089 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.686219931 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686279058 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686332941 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.686352015 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686394930 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.686444044 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686779022 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686803102 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686824083 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.686824083 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686844110 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.686860085 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.687319040 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.687339067 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.687366962 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.687377930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.687503099 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.687556028 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.701379061 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.701421976 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.701447010 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.701457977 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.701543093 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.701551914 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.709445953 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.709465027 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.750297070 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.750355959 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.750366926 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.757957935 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758028030 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.758037090 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758363008 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758392096 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758411884 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758423090 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.758431911 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758454084 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.758748055 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758766890 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758800030 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.758810043 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.758847952 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.759294033 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.759337902 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.759375095 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.759394884 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.801214933 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.801276922 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.801296949 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.803385973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.803493023 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.803504944 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.803569078 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.803633928 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.803642988 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.803771019 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.803823948 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.803833008 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804012060 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804035902 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804059982 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.804069996 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804131985 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.804332972 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804543972 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804564953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804579973 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.804588079 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.804663897 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.818847895 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.818953037 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.819000006 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.819010973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.819091082 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.819098949 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.867398977 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.867516041 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.867526054 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875335932 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875423908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875437975 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.875449896 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875504017 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.875511885 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875680923 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875725031 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.875741959 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875829935 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.875874043 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.875890017 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.876305103 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.876359940 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.876378059 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.877059937 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.877115011 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.877123117 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.877214909 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.877269030 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.877276897 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.892069101 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:20.918673038 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.918775082 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.918788910 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.920521021 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.920559883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.920583963 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.920595884 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.920664072 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.920747995 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.920933962 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.920981884 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.920991898 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.921242952 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.921319008 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.921330929 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.921869040 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.921902895 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.921916962 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.921926975 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.921968937 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.921978951 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.934072971 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:20.935693026 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.935759068 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.935774088 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.935801983 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.935868025 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.935883045 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.984924078 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.985044003 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.985054016 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.992680073 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.992757082 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.992758036 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.992783070 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.992822886 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.992857933 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.992980957 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993041039 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.993063927 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993140936 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993182898 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.993204117 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993419886 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993485928 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.993489981 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993513107 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993557930 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.993680954 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993803978 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993871927 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993910074 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.993920088 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:20.993957043 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:20.994507074 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.035650015 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.037512064 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.037601948 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.037604094 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.037626028 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.037671089 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.037723064 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038091898 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038145065 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.038167000 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038243055 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038280964 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.038290024 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038379908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038465977 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.038472891 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038687944 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038789034 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.038794041 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038817883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.038873911 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.038896084 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.052824974 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:21.052920103 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:21.053154945 CET	49215	443	192.168.2.22	142.250.186.129
Nov 18, 2024 11:17:21.053180933 CET	443	49215	142.250.186.129	192.168.2.22
Nov 18, 2024 11:17:21.053944111 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.054003954 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.054023027 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.054048061 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.054100037 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.054265976 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.065452099 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:21.065493107 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:21.065536022 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:21.065680981 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:21.065695047 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:21.102212906 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.102315903 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.102355957 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.109503031 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.109572887 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.109591007 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.109618902 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.109673023 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.109724998 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110029936 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110093117 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.110102892 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110217094 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110306025 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110308886 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.110331059 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110404015 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.110416889 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110816002 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.110887051 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.110905886 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.111166000 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.111186981 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.111196041 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.111252069 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.111259937 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.112910032 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.112920046 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.152942896 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.153090000 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.153100967 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.154582024 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.154664040 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.154671907 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.154977083 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.155044079 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.155050993 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.155137062 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.155232906 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.155242920 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.155406952 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.155455112 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.155463934 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.155764103 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.155818939 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.155827999 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.156009912 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.156142950 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.156152964 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.156338930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.156379938 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.156397104 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.164637089 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.170696020 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.170953035 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.171036959 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.171039104 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.171061993 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.171132088 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.171159029 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.180629015 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.218991995 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.219150066 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.219187975 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.219199896 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.226732969 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.226813078 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.226814985 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.226840973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.226892948 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.226946115 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227094889 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227173090 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.227180958 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227444887 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227488041 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.227504969 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227612972 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227654934 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.227672100 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227757931 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.227850914 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.227859020 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.228111982 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.228233099 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.228241920 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.228458881 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.270098925 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.271713972 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.271814108 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.271831036 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.271842003 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.271922112 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.271979094 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272258997 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272356987 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.272366047 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272548914 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272594929 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.272610903 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272712946 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272785902 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.272795916 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272907972 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.272964001 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.272973061 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.273241043 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.273298025 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.273305893 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.273614883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.273699045 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.273703098 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.273722887 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.273760080 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.273824930 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.288110971 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.288162947 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.288180113 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.288256884 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.288300037 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.288307905 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.336760044 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.336882114 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.336891890 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.343853951 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.343911886 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.343936920 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344192982 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344264984 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.344274044 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344475985 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344561100 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344572067 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.344588041 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344634056 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.344681978 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344886065 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.344937086 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.344944954 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.345052958 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.345092058 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.345108986 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.345434904 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.345494032 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.345500946 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.345599890 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.345647097 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.345654011 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.387257099 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.387330055 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.387340069 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.388900995 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.388973951 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.388983965 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.389172077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.389221907 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.389230967 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.389406919 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.389451981 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.389468908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.389807940 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.389873981 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.389882088 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.390058994 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.390103102 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.390120029 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.391016006 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.391083002 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.391105890 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.391130924 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.391175985 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.391213894 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.391374111 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.391422987 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.391433001 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.391941071 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.392039061 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.392069101 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.392087936 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.392158031 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.405019999 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.405301094 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.405369043 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.405376911 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.453398943 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.453499079 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.453510046 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.453525066 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.453572035 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.460794926 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.461071014 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.461133957 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.461152077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.461302996 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.461354971 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.461371899 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.461443901 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.461481094 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.461498022 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.461945057 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.462007999 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.462025881 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.462102890 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.462147951 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.462165117 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.462296963 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.462363005 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.462372065 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.462738037 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.462851048 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.462860107 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.504429102 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.504508018 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.504524946 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506047964 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506122112 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.506130934 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506158113 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506222963 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.506243944 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506366968 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506413937 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.506432056 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506758928 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506855011 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.506858110 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506896973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.506947041 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.507116079 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.507438898 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.507489920 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.507507086 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.507587910 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.507668018 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.507677078 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.508127928 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.508179903 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.508196115 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.508261919 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.508316040 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.508323908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.508419991 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.508462906 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.508471966 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.522313118 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.522377968 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.522393942 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.522460938 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.522530079 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.522537947 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.522623062 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.522663116 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.522677898 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.570890903 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.570976973 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.571007013 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.579216957 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.579328060 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.579338074 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.579503059 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.579555035 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.579565048 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.579679966 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.579725981 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.579736948 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.580233097 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.580290079 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.580308914 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.580385923 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.580430031 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.580440998 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.580528021 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.580576897 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.580585957 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.580966949 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.581017971 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.581027985 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.620151997 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.620223999 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.620233059 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.621818066 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.621874094 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.621882915 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623502970 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623574972 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.623583078 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623681068 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623725891 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.623733997 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623816013 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623902082 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623927116 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.623935938 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.623974085 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.624227047 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.624598980 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.624679089 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.624696016 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.624705076 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.624754906 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.624763966 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.624882936 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.624922037 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.624943018 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.625374079 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.625444889 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.625454903 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.625539064 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.625592947 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.625602007 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.625700951 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.625763893 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.625772953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.639511108 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.639576912 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.639596939 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.639624119 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.639691114 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.639708996 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.687747002 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.687792063 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.687824011 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.687923908 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.688003063 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.688018084 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.696110010 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.696156979 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.696172953 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.697704077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.697724104 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.697760105 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.697786093 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.697786093 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.697799921 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.697820902 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.697846889 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.697861910 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.697861910 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.697916031 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.699785948 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.740684986 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.740727901 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.740751028 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.740751028 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.740765095 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.740802050 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.740802050 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.740822077 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.740931988 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.741646051 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.741703033 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.741719007 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.741734028 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.741750002 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.741961956 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.757833958 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:21.757874966 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:21.757956028 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:21.762269020 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:21.762290955 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:21.805011034 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.805056095 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.805099010 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.805159092 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.805195093 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.805253983 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.806734085 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.806750059 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.806934118 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.806961060 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.813194990 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.813254118 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.813257933 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.813285112 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.813345909 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.814218998 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.814266920 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.814270973 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.814295053 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.814346075 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.815279007 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.829729080 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.829775095 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.829829931 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.831125975 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.831156015 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.857420921 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.857462883 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.857505083 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.857525110 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.857579947 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.857610941 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.857626915 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.858582973 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.858634949 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.858675957 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.858684063 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.858724117 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.858951092 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.874705076 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.874768019 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.874797106 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.874814987 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.874885082 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.874950886 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.875021935 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.875138044 CET	443	49206	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.875180006 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.875180006 CET	49206	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.920207024 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.920237064 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.920275927 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.921036005 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:21.921049118 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:21.937453985 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.937515974 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.937602997 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.938325882 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.938359022 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.939467907 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.939526081 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.940535069 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.940535069 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.940607071 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.941823959 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.941854000 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.942023993 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.942193985 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:21.942203999 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:21.945982933 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:21.946293116 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:21.946316957 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:21.946842909 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:21.946858883 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:21.946923018 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:21.946923018 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:21.946935892 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:22.109682083 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:22.109702110 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:22.109750986 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:22.109924078 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:22.109951019 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:22.155330896 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:22.155405045 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:22.156621933 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:22.156814098 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:22.156816959 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:22.203330994 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:22.367171049 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:22.367194891 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:22.543041945 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:22.543148041 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:22.544780016 CET	49228	443	192.168.2.22	142.250.186.33
Nov 18, 2024 11:17:22.544806957 CET	443	49228	142.250.186.33	192.168.2.22
Nov 18, 2024 11:17:22.600981951 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:22.601299047 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:22.601326942 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:22.601649046 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:22.601980925 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:22.602036953 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:22.602138996 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:22.647327900 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:22.670991898 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.671255112 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.671278954 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.671833992 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.671888113 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.672848940 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.672898054 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.673727036 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.673816919 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.673901081 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.673909903 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.675178051 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.675401926 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.675421953 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.675744057 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.675801039 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.676353931 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.676405907 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.676568985 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.676624060 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.676690102 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.676696062 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.682925940 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.683150053 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.683211088 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.683753014 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.684117079 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.684212923 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.684284925 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.684284925 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.684331894 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.784612894 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.787728071 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.787755966 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.789127111 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.789191008 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.790517092 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.790564060 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.795129061 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.797008991 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.803225994 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.803256989 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.803275108 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.803293943 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.803599119 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.803806067 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.803930998 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.803930998 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.803934097 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.803936005 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.803944111 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.804008007 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.804049969 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.804959059 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.805021048 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.805021048 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.805092096 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.806535959 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.806622982 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.806696892 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.806781054 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.806818008 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.806828976 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.806864977 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.806874037 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.814852953 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.815068007 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.815114021 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.816395044 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.816468000 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.818891048 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.818959951 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.819097996 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.819185972 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.819196939 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.819276094 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.846543074 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:22.847106934 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:22.847147942 CET	443	49234	172.217.16.196	192.168.2.22
Nov 18, 2024 11:17:22.847207069 CET	49234	443	192.168.2.22	172.217.16.196
Nov 18, 2024 11:17:22.851341963 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.877161980 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.879156113 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.948625088 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.949604034 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.949661970 CET	443	49236	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.949709892 CET	49236	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.950644016 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.950709105 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.950771093 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.951376915 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.951409101 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.964534998 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.965167046 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.965207100 CET	443	49235	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.965250969 CET	49235	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.965852022 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.965887070 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.965938091 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.966067076 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:22.966075897 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:22.970181942 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.970366001 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.970431089 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.974653006 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:22.981936932 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:22.981961012 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:22.983108044 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.983205080 CET	443	49237	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:22.983268976 CET	49237	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:22.983565092 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:22.983618021 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.007174015 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.007174969 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.009154081 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:23.023375034 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.023442984 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.081553936 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.084645987 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.103634119 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.119436026 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:23.119513988 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:23.119551897 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:23.202972889 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.203015089 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.203985929 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.204035044 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.225800037 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.225987911 CET	443	49239	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.226072073 CET	49239	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.239139080 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:23.239228964 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:23.275368929 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.275747061 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.275851011 CET	49240	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.275875092 CET	443	49240	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.276344061 CET	49241	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.276376963 CET	443	49241	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.284634113 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.284701109 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.284751892 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.286406994 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.286434889 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.286478996 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.286994934 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.287031889 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.287071943 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.287463903 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.287475109 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.287518978 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.287802935 CET	49238	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:23.287822962 CET	443	49238	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:23.288541079 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.288574934 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.289855003 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.289866924 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.290129900 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.290142059 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.290307999 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.290318012 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.290524006 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.290534973 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.301285028 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:23.301315069 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:23.301356077 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:23.301521063 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:23.301533937 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:23.305820942 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:23.305835962 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:23.305875063 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:23.306066990 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:23.306076050 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:23.489675999 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.537900925 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.538041115 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.538095951 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.538132906 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.538229942 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.538280010 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.538295031 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.538372040 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.538423061 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.538435936 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.546137094 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.546189070 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.546202898 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.668791056 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.668889999 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.668901920 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.668931007 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.668981075 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.669069052 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.669284105 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.669400930 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.669415951 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.669511080 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.669567108 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.669579983 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.671216011 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.671267033 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.671279907 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.771586895 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.771651983 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.771672964 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.771792889 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.771845102 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.771857977 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.774224997 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.774285078 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.774300098 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.778884888 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.778934002 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.778947115 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.792707920 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.792764902 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.792779922 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.810031891 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.810389042 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.810403109 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.810904980 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.810977936 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.811923027 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.812038898 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.812231064 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.812324047 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.812419891 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.812426090 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.812546015 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.812572956 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.813258886 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.813493967 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.813522100 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.814733028 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.814798117 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.817243099 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.817297935 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.817476988 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.817656040 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.817657948 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.817679882 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:23.817816973 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:23.833128929 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.833201885 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.833224058 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.888655901 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.888736010 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.888753891 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.888782978 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.888829947 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.888881922 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.893526077 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.893587112 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.893605947 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.895512104 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.895559072 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.895572901 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.909687042 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.909754992 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.909773111 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.950083971 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:23.950176954 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:23.950193882 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.017241001 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.017261028 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.142251968 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.203819990 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.204205036 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.204284906 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.204324007 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.204354048 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.204406977 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.204421997 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.205202103 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.205244064 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.205264091 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.206177950 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.206227064 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.206244946 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.207997084 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.208055973 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.208070993 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.210742950 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.210808992 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.210824013 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.210912943 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.210997105 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.211042881 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.211064100 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.211112976 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.211694956 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.211743116 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.211756945 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.212133884 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.212536097 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.213550091 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.213599920 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.213618994 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.217231035 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.217252970 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.217711926 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.218173981 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.218226910 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.218240023 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.220558882 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.220619917 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.221095085 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.221159935 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.221162081 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.221724987 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.221735954 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.221765041 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.221843004 CET	443	49253	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.221904039 CET	49253	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.222670078 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.222700119 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.222744942 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.223436117 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.223834038 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.228293896 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.228324890 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.228683949 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.228777885 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.228950977 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.228964090 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.228991985 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.229051113 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.229182005 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.229192019 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.229317904 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.229335070 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.229871035 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.229923010 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.229949951 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.230022907 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.230062008 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.230185986 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.230220079 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.230895996 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.230921030 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.230942965 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.230957985 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.230986118 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.231192112 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.231271982 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.231297970 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.231318951 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.231476068 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.231522083 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.231699944 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.231709003 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.231880903 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.231976986 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.232110023 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.232261896 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.232269049 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.232295036 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.232316971 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.232357025 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.232500076 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.232541084 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.232651949 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.232723951 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.233266115 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.233284950 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.233287096 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.233302116 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.233320951 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.233334064 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.233383894 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.233395100 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.233414888 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.233447075 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.233515978 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.233531952 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.233591080 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.233597994 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.233612061 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.233628988 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.234333038 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.234412909 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.234673023 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.234699965 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.234707117 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.239289045 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.240807056 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.240947962 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.240967989 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.241020918 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.241513014 CET	49254	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.241528034 CET	443	49254	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.241756916 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.241782904 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.241945982 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.242000103 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.242006063 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.242022038 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.242568016 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.242588043 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.244474888 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.244546890 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.244559050 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.244643927 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.246006012 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.246017933 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.246464968 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.247987986 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.247999907 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.255408049 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.257431984 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.257450104 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.300966978 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.301054001 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.301237106 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.301301956 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.336122990 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:24.336163044 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:24.336236954 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:24.336363077 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:24.336374998 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:24.358833075 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.361449003 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.361469030 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.361532927 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.361609936 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.361628056 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.361723900 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.362055063 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.362071037 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.363418102 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.363483906 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.363527060 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.363698959 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.363832951 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.363859892 CET	443	49246	216.58.206.78	192.168.2.22
Nov 18, 2024 11:17:24.363887072 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.363887072 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.364949942 CET	49246	443	192.168.2.22	216.58.206.78
Nov 18, 2024 11:17:24.435338974 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.435467958 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.439332962 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.439333916 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.439357042 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.439367056 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.439400911 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.439404011 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.439435005 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.439434052 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.443331003 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.443401098 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.448018074 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:24.448056936 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:24.448575020 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:24.450083971 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:24.450102091 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:24.486711025 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.492249012 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.511904001 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.514719009 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.525808096 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.607203007 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.607273102 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.607520103 CET	49259	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.607558012 CET	443	49259	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.611979961 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.612036943 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.612313032 CET	49260	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:24.612329006 CET	443	49260	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:24.632359982 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.632457018 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.632591009 CET	49258	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.632606983 CET	443	49258	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.634555101 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.634654045 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.634830952 CET	49255	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.634855986 CET	443	49255	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.666280031 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.666335106 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.666562080 CET	49256	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.666568995 CET	443	49256	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.670634985 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:24.670663118 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:24.670717955 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:24.670887947 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:24.670892000 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:24.842295885 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.961971998 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:24.962137938 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.962352037 CET	49257	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:24.962368965 CET	443	49257	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.070163012 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.070739031 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.070821047 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.070887089 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.071187973 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.071194887 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.071959019 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.072012901 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.072534084 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.072570086 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.072967052 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.073012114 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.073221922 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.073302031 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.075089931 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.075095892 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.075133085 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.075189114 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.079324961 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.079353094 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.079395056 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.079942942 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.079960108 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.081612110 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.081640959 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.082459927 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.083595991 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.083616018 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.083667994 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.086760998 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.086777925 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.087287903 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.087302923 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.091485023 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.091515064 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.091582060 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.091768026 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.091778994 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.100333929 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.100636005 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.100646973 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.101185083 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.101567030 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.101651907 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.101922989 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.101954937 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.101959944 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.198055983 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.198369980 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.198379993 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.199404955 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.199558020 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.200406075 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.200457096 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.200637102 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.200714111 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.200807095 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.200814962 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.278295040 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.304574013 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.304788113 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.304817915 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.306276083 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.306329012 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.306626081 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.306716919 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.306895971 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.306905985 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.353065968 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.382675886 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.401166916 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.474680901 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.474778891 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.476238012 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.476290941 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.476419926 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.476443052 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.491291046 CET	49263	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.491337061 CET	443	49263	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.503174067 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.503249884 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.511341095 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.511431932 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.519766092 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.541338921 CET	49264	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.541393042 CET	443	49264	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.555109978 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.555166006 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.555200100 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.555232048 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.555260897 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.555299044 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.555301905 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.555329084 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.555361986 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.555367947 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.563199043 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.563285112 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.563318968 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.564428091 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.564462900 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.565202951 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.565262079 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.566222906 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.566272020 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.622363091 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.622492075 CET	443	49265	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.622555017 CET	49265	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.623035908 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.623090029 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.623136044 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.673053026 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.673130989 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.673165083 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.673201084 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.673234940 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.673289061 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.673798084 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.673836946 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.673854113 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.681629896 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.681699038 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.681721926 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.690603018 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.690675974 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.690697908 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.711688042 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.711714029 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.759057045 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.759291887 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.788290024 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.788326979 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.791819096 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.791985989 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.792016029 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.792412996 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.792453051 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.792464018 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.796927929 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.796988010 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.797000885 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.805787086 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.805861950 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.805881023 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.814680099 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.814735889 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.814754963 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.814778090 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.814815044 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.841451883 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:25.841494083 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:25.855166912 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.855210066 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.855261087 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.861998081 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.862010956 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.862395048 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.910366058 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.910718918 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.910773039 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.910800934 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.911117077 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.911159992 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.911173105 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.915482998 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.915528059 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.915544033 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.920938015 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.921154976 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.921164036 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.921703100 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.921998978 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.922079086 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.922143936 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.922171116 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.922215939 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.924058914 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.924117088 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.924132109 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.929950953 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.930171967 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.930203915 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.930923939 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.931246042 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.931351900 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.931411982 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.931442976 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.931452990 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.934900045 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.935022116 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.935070038 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:25.935087919 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:25.935133934 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.935142040 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.935657978 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.935961008 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.936044931 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.936125040 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.936125040 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.936147928 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.940680981 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.940893888 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.940921068 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.941436052 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.941716909 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.941813946 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:25.941837072 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:25.957489014 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.957743883 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.957773924 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.958321095 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.958622932 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.958707094 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.958785057 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.958808899 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:25.958817959 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:25.983345985 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.028902054 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.029057980 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.029088020 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.029386997 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.029428959 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.029437065 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.034008980 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.034054041 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.034060001 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.042732000 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.042788982 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.042795897 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.049057961 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.051727057 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.063344002 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.063397884 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:26.092325926 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.092406034 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.092448950 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.092473030 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.092506886 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.092528105 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.115492105 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.115612030 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.115667105 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:26.115688086 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.134716988 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:26.134804010 CET	443	49267	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.134850025 CET	49267	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:26.145158052 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:26.148375034 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.148426056 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.148444891 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.148458004 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.148490906 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.152723074 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.161484003 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.161523104 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.161530018 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.161545038 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.161582947 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.161629915 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.170389891 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.170432091 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.170439005 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.194099903 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.195463896 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.195545912 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.195580959 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:26.195594072 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.195630074 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.195664883 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:26.195671082 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.204333067 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.209378958 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.210722923 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.210772038 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.210802078 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.266833067 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.266992092 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.267021894 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.271255970 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.271302938 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.271311045 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.280070066 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.280109882 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.280114889 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.280123949 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.280163050 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.280211926 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.288899899 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.288944006 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.288952112 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.313715935 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.313772917 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:26.313875914 CET	49274	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:26.313895941 CET	443	49274	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.324317932 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.324371099 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.324472904 CET	49272	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.324489117 CET	443	49272	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.325160980 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.325207949 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:26.326098919 CET	49275	443	192.168.2.22	172.217.16.206
Nov 18, 2024 11:17:26.326105118 CET	443	49275	172.217.16.206	192.168.2.22
Nov 18, 2024 11:17:26.329356909 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.329462051 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.329473019 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.329907894 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.329973936 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.330089092 CET	49271	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.330141068 CET	443	49271	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.342884064 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.385380983 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.385437012 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.385561943 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.385595083 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.385648966 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.389658928 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.395628929 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:26.395638943 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:26.395684958 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:26.395816088 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:26.395831108 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:26.397867918 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:26.397901058 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:26.397978067 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:26.398447037 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:26.398459911 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:26.398622990 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.398674011 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.398684025 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.398727894 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.398766994 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.398767948 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.398778915 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.398861885 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.398878098 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.398958921 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.399000883 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.399022102 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.399039030 CET	443	49266	172.217.18.14	192.168.2.22
Nov 18, 2024 11:17:26.399049044 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.399077892 CET	49266	443	192.168.2.22	172.217.18.14
Nov 18, 2024 11:17:26.474193096 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.474271059 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.478194952 CET	49273	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.478209972 CET	443	49273	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.675609112 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.676175117 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:26.676189899 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.677900076 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.678250074 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:26.678402901 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:26.678407907 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.678437948 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:26.692485094 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.692509890 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.692569971 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.692790985 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.692799091 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.694380045 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.694431067 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.694483042 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.694703102 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.694725037 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.709922075 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.710220098 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.710244894 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.710762978 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.711071014 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.711150885 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.711208105 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.711221933 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:26.711236000 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:26.879270077 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.139234066 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.139367104 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.139389038 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.139436960 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.139503002 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.140808105 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.140863895 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.141213894 CET	49277	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.141231060 CET	443	49277	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.143865108 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.143959045 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.144020081 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.144669056 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.144773960 CET	443	49276	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.144835949 CET	49276	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.145672083 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.145716906 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.150487900 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.150542021 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.150599003 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.150820017 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:27.150849104 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:27.279644012 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.334480047 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.334494114 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.336034060 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.336390018 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.336561918 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.336568117 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.336602926 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.536912918 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.549652100 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.549911976 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.549973965 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.550558090 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.550950050 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.551044941 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.551148891 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.551192045 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.551248074 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.554213047 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.554466009 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.554476023 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.555737972 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.556071043 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.556232929 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.556246042 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.556260109 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.556360960 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.596594095 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.618324995 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.628648996 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.628669977 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.629692078 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.631711960 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.631897926 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.631985903 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.679337025 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.716128111 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.716218948 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.716519117 CET	49280	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.716532946 CET	443	49280	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.763406992 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.763484955 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.827310085 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.833483934 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.927539110 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.927669048 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.927753925 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.927771091 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.927802086 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.927849054 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:27.928029060 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:27.951009989 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.951133966 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:27.953393936 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:27.953463078 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:28.009581089 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.031306028 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.056742907 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:28.056998968 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:28.171169043 CET	49281	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:28.171237946 CET	443	49281	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:28.172120094 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.172182083 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.172889948 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.172920942 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.172921896 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.172939062 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.173000097 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.173120022 CET	49282	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:28.173151016 CET	443	49282	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:28.173964024 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.174026012 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.174665928 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.174706936 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.174740076 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.175137997 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.175230026 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.175503969 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.175520897 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.177263975 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.177340031 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.177357912 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.177680016 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.177839041 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.177853107 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.177881956 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.253251076 CET	49279	443	192.168.2.22	142.250.186.174
Nov 18, 2024 11:17:28.253273964 CET	443	49279	142.250.186.174	192.168.2.22
Nov 18, 2024 11:17:28.371184111 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.395378113 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.395473957 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.453870058 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.453986883 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.454082966 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.454149008 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.462037086 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.462095022 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.462172985 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.462235928 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.667639017 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.714468002 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.967585087 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.967673063 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.967806101 CET	443	49283	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.967865944 CET	49283	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.967958927 CET	443	49284	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.968023062 CET	49284	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.972399950 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:28.972439051 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:28.972486973 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:29.020122051 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:29.020149946 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:29.872159004 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:29.872441053 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:29.872456074 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:29.872773886 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:29.872823954 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:29.873377085 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:29.873419046 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:29.873652935 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:29.873703957 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:29.873920918 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:29.873929024 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.083337069 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.083385944 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.151288986 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.151413918 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.151561022 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.151573896 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.152661085 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.152731895 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.153126001 CET	443	49285	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.153160095 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.153182983 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.153182983 CET	49285	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.153202057 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:30.156842947 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.157047987 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:30.157061100 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.255307913 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.255671978 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.255718946 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.257057905 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.257133961 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.259601116 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.259648085 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.259824991 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.259916067 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.260119915 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.260138035 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.466995955 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.545944929 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.546066999 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.546123981 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.546166897 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.547178030 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.547257900 CET	443	49286	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.547329903 CET	49286	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.547827005 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.547858000 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.547894001 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.548244953 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:31.548254967 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:31.698527098 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:31.698565960 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:31.698602915 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:31.699335098 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:31.699347019 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:31.702100992 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:31.702133894 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:31.702172995 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:31.702752113 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:31.702764988 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.409615040 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.410649061 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.410661936 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.411171913 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.411228895 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.412178040 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.412220001 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.412369013 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.412448883 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.412542105 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.459326982 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.619376898 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.621213913 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.687266111 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.687568903 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.687582970 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.687589884 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.687788010 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.687802076 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.689182997 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.689223051 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.689568043 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.689753056 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.689851046 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.689935923 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.690093040 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.690114975 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.690126896 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.690200090 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.690212965 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:32.690227032 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:32.826024055 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.900379896 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.900507927 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.901885986 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.901902914 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.901921034 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.901985884 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.902102947 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.902134895 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.902194977 CET	443	49287	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:32.902245998 CET	49287	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.902615070 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:32.902646065 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.174168110 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:33.178231955 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:33.294267893 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:33.294362068 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:33.298039913 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:33.298110962 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:33.302967072 CET	49288	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:33.302989960 CET	443	49288	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:33.308679104 CET	49289	443	192.168.2.22	172.217.23.110
Nov 18, 2024 11:17:33.308697939 CET	443	49289	172.217.23.110	192.168.2.22
Nov 18, 2024 11:17:33.764235973 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.764594078 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:33.764658928 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.765216112 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.765281916 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:33.766212940 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.766268969 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:33.766463041 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:33.766546965 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.766654968 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:33.766671896 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.975331068 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:33.975424051 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.048728943 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.048772097 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.048836946 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.048862934 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.049918890 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.049977064 CET	443	49290	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.050031900 CET	49290	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.050946951 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.050991058 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.051049948 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.051251888 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.051264048 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.929395914 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.929742098 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.929766893 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.930275917 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.930342913 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.931287050 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.931338072 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.931543112 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.931621075 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:34.931726933 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:34.931735992 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:35.137065887 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:35.212445974 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:35.212501049 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:35.212562084 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:35.212579012 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:35.213845968 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:35.213884115 CET	443	49291	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:35.213929892 CET	49291	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:35.214310884 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:35.214344025 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:35.214395046 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:35.214708090 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:35.214720964 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.089657068 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.089998960 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.090018034 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.090584993 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.090648890 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.091665983 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.091722012 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.091906071 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.091986895 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.092081070 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.092087030 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.291467905 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.401751995 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.401866913 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.401911974 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.401923895 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.402496099 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.402573109 CET	443	49292	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.402622938 CET	49292	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.402959108 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.402997971 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:36.403049946 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.403636932 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:36.403650045 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.284744024 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.285190105 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.285223961 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.286489010 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.286586046 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.288997889 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.289055109 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.289308071 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.289480925 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.289503098 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.331393003 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.489612103 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.489650011 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.566653013 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.566767931 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.566804886 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.567894936 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.568015099 CET	443	49293	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.568079948 CET	49293	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.568459034 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.568501949 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:37.568671942 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.569293022 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:37.569313049 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.429229975 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.429527044 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.429543972 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.431118965 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.431186914 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.434084892 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.434146881 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.434314013 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.434499025 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.434521914 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.479332924 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.640285969 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.640311956 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.710177898 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.710282087 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.710302114 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.711436033 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.711487055 CET	443	49294	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.711534977 CET	49294	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.712202072 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.712249041 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:38.712294102 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.712729931 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:38.712747097 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.600369930 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.600816965 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.600845098 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.601547003 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.601627111 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.602552891 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.602612972 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.602801085 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.602883101 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.603104115 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.603111982 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.807424068 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.807512045 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.889863014 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.889981985 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.890038967 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.890057087 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.891166925 CET	49296	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.891207933 CET	443	49296	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.891223907 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.891254902 CET	49296	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.891305923 CET	443	49295	216.58.212.174	192.168.2.22
Nov 18, 2024 11:17:39.891371012 CET	49295	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.891632080 CET	49296	443	192.168.2.22	216.58.212.174
Nov 18, 2024 11:17:39.891647100 CET	443	49296	216.58.212.174	192.168.2.22

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 18, 2024 11:15:45.079423904 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:45.828872919 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:46.578895092 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:54.073942900 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:54.823441982 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:55.573424101 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:57.968462944 CET	63926	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:15:57.971255064 CET	65510	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:15:57.975356102 CET	53	63926	8.8.8.8	192.168.2.22
Nov 18, 2024 11:15:57.976058960 CET	53	52781	8.8.8.8	192.168.2.22
Nov 18, 2024 11:15:58.053776026 CET	53	56475	8.8.8.8	192.168.2.22
Nov 18, 2024 11:15:58.269280910 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:58.269479036 CET	53	65510	8.8.8.8	192.168.2.22
Nov 18, 2024 11:15:59.019078970 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:59.769016027 CET	137	137	192.168.2.22	192.168.2.255
Nov 18, 2024 11:15:59.790714979 CET	64928	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:15:59.790894985 CET	57390	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:15:59.802062035 CET	53	64928	8.8.8.8	192.168.2.22
Nov 18, 2024 11:15:59.802788019 CET	53	57390	8.8.8.8	192.168.2.22
Nov 18, 2024 11:15:59.875969887 CET	53	54261	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:00.561304092 CET	60507	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:00.561527967 CET	50446	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:00.567883968 CET	53	50446	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:00.568171978 CET	53	60507	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:02.470568895 CET	62453	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:02.471724987 CET	50568	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:02.477902889 CET	53	62453	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:02.478566885 CET	53	50568	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:03.718312979 CET	54422	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:03.718566895 CET	52074	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:03.721746922 CET	50337	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:03.721904039 CET	61826	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:03.729151011 CET	53	52074	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:03.730107069 CET	53	54422	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:03.732490063 CET	53	61826	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:03.734281063 CET	53	50337	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:05.463814020 CET	63469	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:05.470758915 CET	53	63469	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:05.473017931 CET	59447	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:05.480376959 CET	53	59447	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:05.551361084 CET	51828	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:05.551546097 CET	53406	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:16:05.561058998 CET	53	51828	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:05.563375950 CET	53	53406	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:13.590605021 CET	53	56207	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:16.807924986 CET	53	49690	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:23.811423063 CET	53	54738	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:34.167000055 CET	53	54615	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:53.044867992 CET	53	57998	8.8.8.8	192.168.2.22
Nov 18, 2024 11:16:57.883481026 CET	53	55277	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:00.572408915 CET	56156	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:00.572530031 CET	60971	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:00.579183102 CET	53	60971	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:00.582595110 CET	53	56156	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:16.056972027 CET	55388	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:16.060193062 CET	60624	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:16.069462061 CET	53	60624	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:16.072089911 CET	53	55388	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:17.778700113 CET	53	53602	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:19.296564102 CET	53	58291	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:19.297969103 CET	53	51161	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:19.514964104 CET	63036	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:19.515429974 CET	56243	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:19.522617102 CET	53	60333	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:19.523802042 CET	53	63036	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:19.524931908 CET	53	56243	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:21.004333019 CET	53	62131	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:21.057063103 CET	63036	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:21.057200909 CET	63535	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:21.063555956 CET	53	63036	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:21.065150023 CET	53	63535	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:21.773730040 CET	58671	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:21.774106979 CET	56415	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:21.780956030 CET	53	58671	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:21.782505035 CET	53	56415	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:21.939806938 CET	138	138	192.168.2.22	192.168.2.255
Nov 18, 2024 11:17:21.967075109 CET	53	58147	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:22.095309019 CET	57607	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:22.095547915 CET	53681	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:22.105084896 CET	53	57607	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:22.105448961 CET	53	58322	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:22.109363079 CET	53	53681	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:22.495611906 CET	53	54052	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:23.288285017 CET	52772	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:23.288409948 CET	59180	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:23.295346022 CET	53	52772	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:23.315855980 CET	53	59180	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:24.327037096 CET	59120	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:24.327157974 CET	54670	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:24.334857941 CET	53	54670	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:24.335731983 CET	53	59120	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:24.431546926 CET	54450	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:24.431665897 CET	53959	53	192.168.2.22	8.8.8.8
Nov 18, 2024 11:17:24.440934896 CET	53	53959	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:24.446305990 CET	53	54450	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:24.856686115 CET	53	63716	8.8.8.8	192.168.2.22
Nov 18, 2024 11:17:39.428368092 CET	53	64002	8.8.8.8	192.168.2.22

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 18, 2024 11:15:58.269582033 CET	192.168.2.22	8.8.8.8	d038	(Port unreachable)	Destination Unreachable
Nov 18, 2024 11:17:22.105535984 CET	192.168.2.22	8.8.8.8	d046	(Port unreachable)	Destination Unreachable
Nov 18, 2024 11:17:23.315906048 CET	192.168.2.22	8.8.8.8	d03a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 18, 2024 11:15:57.968462944 CET	192.168.2.22	8.8.8.8	0x164c	Standard query (0)	lnk.ie	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:15:57.971255064 CET	192.168.2.22	8.8.8.8	0x530b	Standard query (0)	lnk.ie	65	IN (0x0001)	false
Nov 18, 2024 11:15:59.790714979 CET	192.168.2.22	8.8.8.8	0xee30	Standard query (0)	redirect-120685500130121.zerobot.org	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:15:59.790894985 CET	192.168.2.22	8.8.8.8	0x36f3	Standard query (0)	redirect-120685500130121.zerobot.org	65	IN (0x0001)	false
Nov 18, 2024 11:16:00.561304092 CET	192.168.2.22	8.8.8.8	0xafe7	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:00.561527967 CET	192.168.2.22	8.8.8.8	0x795e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 18, 2024 11:16:02.470568895 CET	192.168.2.22	8.8.8.8	0x539	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:02.471724987 CET	192.168.2.22	8.8.8.8	0x68e5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 18, 2024 11:16:03.718312979 CET	192.168.2.22	8.8.8.8	0x5d29	Standard query (0)	redirect-120685500130121.zerobot.org	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:03.718566895 CET	192.168.2.22	8.8.8.8	0x39dd	Standard query (0)	redirect-120685500130121.zerobot.org	65	IN (0x0001)	false
Nov 18, 2024 11:16:03.721746922 CET	192.168.2.22	8.8.8.8	0x41cc	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:03.721904039 CET	192.168.2.22	8.8.8.8	0x1c3f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 18, 2024 11:16:05.463814020 CET	192.168.2.22	8.8.8.8	0x46de	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:05.473017931 CET	192.168.2.22	8.8.8.8	0xbbb5	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 18, 2024 11:16:05.551361084 CET	192.168.2.22	8.8.8.8	0x5ee0	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:05.551546097 CET	192.168.2.22	8.8.8.8	0x5a58	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:00.572408915 CET	192.168.2.22	8.8.8.8	0xdafc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:00.572530031 CET	192.168.2.22	8.8.8.8	0x5abf	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:16.056972027 CET	192.168.2.22	8.8.8.8	0x9461	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:16.060193062 CET	192.168.2.22	8.8.8.8	0xf8ae	Standard query (0)	support.google.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:19.514964104 CET	192.168.2.22	8.8.8.8	0xa6b6	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:19.515429974 CET	192.168.2.22	8.8.8.8	0x3836	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:21.057063103 CET	192.168.2.22	8.8.8.8	0x4ed3	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:21.057200909 CET	192.168.2.22	8.8.8.8	0x3896	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:21.773730040 CET	192.168.2.22	8.8.8.8	0xc7d2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:21.774106979 CET	192.168.2.22	8.8.8.8	0x7701	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:22.095309019 CET	192.168.2.22	8.8.8.8	0xdc6f	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:22.095547915 CET	192.168.2.22	8.8.8.8	0xe7e1	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:23.288285017 CET	192.168.2.22	8.8.8.8	0xb7c0	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:23.288409948 CET	192.168.2.22	8.8.8.8	0x4737	Standard query (0)	support.google.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:24.327037096 CET	192.168.2.22	8.8.8.8	0x1d41	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:24.327157974 CET	192.168.2.22	8.8.8.8	0xdf5d	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 18, 2024 11:17:24.431546926 CET	192.168.2.22	8.8.8.8	0xb3ea	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:24.431665897 CET	192.168.2.22	8.8.8.8	0x12f	Standard query (0)	apis.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 18, 2024 11:15:57.975356102 CET	8.8.8.8	192.168.2.22	0x164c	No error (0)	lnk.ie		23.101.59.196	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:15:59.802062035 CET	8.8.8.8	192.168.2.22	0xee30	No error (0)	redirect-120685500130121.zerobot.org		172.67.189.16	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:15:59.802062035 CET	8.8.8.8	192.168.2.22	0xee30	No error (0)	redirect-120685500130121.zerobot.org		104.21.81.97	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:15:59.802788019 CET	8.8.8.8	192.168.2.22	0x36f3	No error (0)	redirect-120685500130121.zerobot.org			65	IN (0x0001)	false
Nov 18, 2024 11:16:00.568171978 CET	8.8.8.8	192.168.2.22	0xafe7	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:02.477902889 CET	8.8.8.8	192.168.2.22	0x539	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:02.478566885 CET	8.8.8.8	192.168.2.22	0x68e5	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 18, 2024 11:16:03.729151011 CET	8.8.8.8	192.168.2.22	0x39dd	No error (0)	redirect-120685500130121.zerobot.org			65	IN (0x0001)	false
Nov 18, 2024 11:16:03.730107069 CET	8.8.8.8	192.168.2.22	0x5d29	No error (0)	redirect-120685500130121.zerobot.org		104.21.81.97	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:03.730107069 CET	8.8.8.8	192.168.2.22	0x5d29	No error (0)	redirect-120685500130121.zerobot.org		172.67.189.16	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:03.732490063 CET	8.8.8.8	192.168.2.22	0x1c3f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 18, 2024 11:16:03.734281063 CET	8.8.8.8	192.168.2.22	0x41cc	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:03.734281063 CET	8.8.8.8	192.168.2.22	0x41cc	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:05.470758915 CET	8.8.8.8	192.168.2.22	0x46de	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:05.470758915 CET	8.8.8.8	192.168.2.22	0x46de	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:05.480376959 CET	8.8.8.8	192.168.2.22	0xbbb5	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 18, 2024 11:16:05.561058998 CET	8.8.8.8	192.168.2.22	0x5ee0	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:05.561058998 CET	8.8.8.8	192.168.2.22	0x5ee0	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:16:05.563375950 CET	8.8.8.8	192.168.2.22	0x5a58	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 18, 2024 11:17:00.582595110 CET	8.8.8.8	192.168.2.22	0xdafc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:16.072089911 CET	8.8.8.8	192.168.2.22	0x9461	No error (0)	support.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:19.523802042 CET	8.8.8.8	192.168.2.22	0xa6b6	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:19.523802042 CET	8.8.8.8	192.168.2.22	0xa6b6	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.129	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:19.524931908 CET	8.8.8.8	192.168.2.22	0x3836	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:21.063555956 CET	8.8.8.8	192.168.2.22	0x4ed3	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:21.063555956 CET	8.8.8.8	192.168.2.22	0x4ed3	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.33	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:21.065150023 CET	8.8.8.8	192.168.2.22	0x3896	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:21.780956030 CET	8.8.8.8	192.168.2.22	0xc7d2	No error (0)	play.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:22.105084896 CET	8.8.8.8	192.168.2.22	0xdc6f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:22.105084896 CET	8.8.8.8	192.168.2.22	0xdc6f	No error (0)	plus.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:22.109363079 CET	8.8.8.8	192.168.2.22	0xe7e1	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:23.295346022 CET	8.8.8.8	192.168.2.22	0xb7c0	No error (0)	support.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:24.335731983 CET	8.8.8.8	192.168.2.22	0x1d41	No error (0)	play.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Nov 18, 2024 11:17:24.440934896 CET	8.8.8.8	192.168.2.22	0x12f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:24.446305990 CET	8.8.8.8	192.168.2.22	0xb3ea	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 11:17:24.446305990 CET	8.8.8.8	192.168.2.22	0xb3ea	No error (0)	plus.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

lnk.ie

redirect-120685500130121.zerobot.org

a.nel.cloudflare.com

https:

challenges.cloudflare.com

lh3.googleusercontent.com

www.google.com

support.google.com

apis.google.com

play.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.22	49162	23.101.59.196	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:15:59 UTC	658	OUT	GET /7469O/e= HTTP/1.1 Host: lnk.ie Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:15:59 UTC	422	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw Server: Microsoft-IIS/8.5 Set-Cookie: ASP.NET_SessionId=xk1szzlyx0fns5uy1x0hthty; path=/; HttpOnly; SameSite=Lax X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Mon, 18 Nov 2024 10:15:58 GMT Connection: close Content-Length: 197
2024-11-18 10:15:59 UTC	197	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 64 69 72 65 63 74 2d 31 32 30 36 38 35 35 30 30 31 33 30 31 32 31 2e 7a 65 72 6f 62 6f 74 2e 6f 72 67 2f 72 65 64 69 72 65 63 74 3f 75 70 6e 3d 62 33 5a 4e 65 6b 45 7a 59 6b 78 76 53 79 39 4b 64 47 68 51 51 77 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.22	49166	172.67.189.16	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:00 UTC	715	OUT	GET /redirect?upn=b3ZNekEzYkxvSy9KdGhQQw HTTP/1.1 Host: redirect-120685500130121.zerobot.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:00 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Mon, 18 Nov 2024 10:16:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-11-18 10:16:00 UTC	914	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 57 2f 74 79 71 6a 5a 55 38 42 63 68 54 36 45 67 45 47 63 51 2f 31 53 66 33 41 44 5a 76 69 4c 43 49 6c 61 69 34 35 74 77 38 78 69 6b 7a 50 34 31 48 53 50 53 4a 4f 73 31 48 6b 4e 36 67 71 4c 39 79 6f 2b 69 44 52 6c 38 44 78 61 2f 6b 65 43 76 41 6d 47 49 4d 30 44 47 38 69 4c 34 7a 69 79 5a 77 42 2f 54 6e 58 2b 76 59 52 45 3d 24 66 37 53 66 57 71 55 30 43 73 33 45 69 77 4e 41 6e 42 42 33 72 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: W/tyqjZU8BchT6EgEGcQ/1Sf3ADZviLCIlai45tw8xikzP41HSPSJOs1HkN6gqL9yo+iDRl8Dxa/keCvAmGIM0DG8iL4ziyZwB/TnX+vYRE=$f7SfWqU0Cs3EiwNAnBB3rA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-11-18 10:16:00 UTC	1369	IN	Data Raw: 32 34 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 244b<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-11-18 10:16:00 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-11-18 10:16:00 UTC	1369	IN	Data Raw: 39 32 34 39 36 30 2d 31 2e 32 2e 31 2e 31 2d 4b 55 74 4b 39 55 68 61 78 55 5f 53 79 52 59 58 4c 4a 4f 58 48 31 5a 2e 32 54 63 63 70 4f 36 30 38 48 36 50 57 35 31 75 4d 65 77 7a 5f 31 47 77 7a 51 51 30 7a 48 39 49 4f 6f 72 58 54 6d 70 64 43 69 67 5a 42 41 62 6b 58 6b 5f 49 4a 32 59 46 78 74 4e 74 65 73 54 4b 65 77 33 56 33 7a 50 62 39 32 76 65 58 38 75 75 38 42 4f 45 44 51 78 6f 48 76 54 33 79 36 69 67 77 6e 33 73 4f 79 4e 63 6e 36 64 47 50 46 70 50 52 44 39 52 61 39 57 79 57 51 63 46 50 54 45 50 48 76 46 67 30 78 5f 70 6b 68 67 5f 71 59 30 4e 69 52 72 6d 77 46 49 61 6d 68 77 6a 44 78 6f 78 4a 79 4a 62 73 4d 67 73 69 73 32 71 55 62 6f 4c 48 55 5f 35 34 57 39 75 75 37 73 6e 5a 34 66 43 65 61 52 75 78 45 32 38 56 41 51 41 58 42 31 59 7a 66 58 65 4b 52 5a 75 Data Ascii: 924960-1.2.1.1-KUtK9UhaxU_SyRYXLJOXH1Z.2TccpO608H6PW51uMewz_1GwzQQ0zH9IOorXTmpdCigZBAbkXk_IJ2YFxtNtesTKew3V3zPb92veX8uu8BOEDQxoHvT3y6igwn3sOyNcn6dGPFpPRD9Ra9WyWQcFPTEPHvFg0x_pkhg_qY0NiRrmwFIamhwjDxoxJyJbsMgsis2qUboLHU_54W9uu7snZ4fCeaRuxE28VAQAXB1YzfXeKRZu
2024-11-18 10:16:00 UTC	1369	IN	Data Raw: 4d 55 47 30 50 67 45 62 50 67 67 73 64 33 6d 32 78 78 43 79 47 51 5f 36 75 77 5f 77 42 58 70 4e 57 57 4e 66 68 61 75 45 43 54 6a 58 37 74 71 31 52 35 49 49 75 68 70 68 73 56 5f 53 49 5a 5f 43 49 75 35 76 47 30 34 63 76 7a 6c 77 76 72 78 4f 79 4d 34 2e 66 43 53 2e 48 45 6f 66 63 78 46 62 7a 45 77 41 73 42 4b 4f 32 67 41 70 5f 4d 4d 59 4b 41 61 58 75 78 38 4d 68 78 37 68 4f 4c 54 5f 4c 57 64 79 6a 6f 4f 65 41 52 51 55 79 69 66 42 2e 76 55 64 44 76 77 64 4a 6e 53 54 33 51 6c 41 35 54 4a 79 35 59 79 59 57 46 43 75 52 79 45 71 38 73 71 61 7a 6a 6a 75 71 65 4c 48 47 77 69 78 2e 38 41 72 71 70 4f 73 2e 32 65 78 55 38 6c 4f 74 48 34 65 77 35 6b 74 49 6f 4f 6d 32 45 31 51 58 6e 41 61 53 70 46 66 66 6a 45 57 77 6d 4a 35 30 76 69 49 58 34 6b 67 73 76 78 32 71 6f 78 Data Ascii: MUG0PgEbPggsd3m2xxCyGQ_6uw_wBXpNWWNfhauECTjX7tq1R5IIuhphsV_SIZ_CIu5vG04cvzlwvrxOyM4.fCS.HEofcxFbzEwAsBKO2gAp_MMYKAaXux8Mhx7hOLT_LWdyjoOeARQUyifB.vUdDvwdJnST3QlA5TJy5YyYWFCuRyEq8sqazjjuqeLHGwix.8ArqpOs.2exU8lOtH4ew5ktIoOm2E1QXnAaSpFffjEWwmJ50viIX4kgsvx2qox
2024-11-18 10:16:00 UTC	1369	IN	Data Raw: 62 76 38 44 70 73 35 64 47 37 78 52 53 34 35 75 75 52 62 31 36 79 48 6a 68 41 71 4f 52 30 73 33 30 54 30 39 64 38 51 2d 31 37 33 31 39 32 34 39 36 30 2d 31 2e 32 2e 31 2e 31 2d 77 6e 43 6c 65 77 52 48 38 4e 44 49 64 69 53 70 7a 77 76 4b 5a 58 57 4f 58 62 56 6a 41 59 62 78 75 58 6e 61 50 72 77 4f 72 79 38 39 7a 32 4a 6c 72 62 4e 78 52 35 6d 55 58 69 74 34 49 42 35 2e 35 47 6f 5a 6f 35 46 68 6c 34 5f 76 5a 75 44 7a 6c 78 47 33 37 4a 39 76 64 68 51 36 4a 69 52 61 4b 78 70 4e 64 44 6d 38 68 63 4b 66 35 2e 5a 6f 43 42 77 66 37 67 39 6f 2e 71 78 43 48 6e 62 4e 76 37 75 6f 5f 47 4f 50 72 44 74 44 5a 66 42 62 75 39 47 30 7a 66 4e 77 62 4f 76 6d 4c 55 77 5f 39 32 36 53 36 4a 4a 4c 41 41 41 64 38 65 67 38 39 45 37 76 53 70 6d 44 6b 76 69 6e 53 6c 39 5f 4c 35 36 42 Data Ascii: bv8Dps5dG7xRS45uuRb16yHjhAqOR0s30T09d8Q-1731924960-1.2.1.1-wnClewRH8NDIdiSpzwvKZXWOXbVjAYbxuXnaPrwOry89z2JlrbNxR5mUXit4IB5.5GoZo5Fhl4_vZuDzlxG37J9vdhQ6JiRaKxpNdDm8hcKf5.ZoCBwf7g9o.qxCHnbNv7uo_GOPrDtDZfBbu9G0zfNwbOvmLUw_926S6JJLAAAd8eg89E7vSpmDkvinSl9_L56B
2024-11-18 10:16:00 UTC	1369	IN	Data Raw: 31 45 75 45 74 35 39 4a 59 70 69 4d 37 56 76 30 6e 31 68 34 65 37 32 4a 74 45 38 67 65 49 44 4c 4d 71 73 50 70 4f 55 69 68 4e 65 75 72 79 42 50 4b 6d 48 4a 5a 57 55 4d 68 34 48 65 70 69 77 35 39 5a 41 6b 72 32 72 37 52 57 31 67 6e 36 32 4e 4d 65 53 41 58 6b 78 79 47 6f 42 61 6c 4d 59 52 46 51 6a 69 39 76 68 2e 72 51 47 77 58 76 4a 66 63 79 67 69 43 6f 70 4c 58 4d 68 52 51 5a 76 35 51 4d 44 45 49 66 52 71 61 5f 4e 75 34 49 52 4e 4d 71 63 6b 54 2e 44 46 76 79 44 44 5a 36 6b 77 45 37 59 72 70 69 54 57 33 6e 32 64 54 6e 4d 39 46 71 6b 37 4d 61 4d 30 71 58 39 58 71 59 33 4e 78 54 4c 76 4e 33 63 30 4d 5f 50 58 63 54 45 63 71 79 62 73 77 71 58 59 34 6e 37 5f 42 4a 79 71 4f 4a 45 6f 45 39 6f 2e 6c 41 48 34 59 4c 69 73 30 69 74 58 47 59 50 4c 41 5f 41 34 46 52 34 Data Ascii: 1EuEt59JYpiM7Vv0n1h4e72JtE8geIDLMqsPpOUihNeuryBPKmHJZWUMh4Hepiw59ZAkr2r7RW1gn62NMeSAXkxyGoBalMYRFQji9vh.rQGwXvJfcygiCopLXMhRQZv5QMDEIfRqa_Nu4IRNMqckT.DFvyDDZ6kwE7YrpiTW3n2dTnM9Fqk7MaM0qX9XqY3NxTLvN3c0M_PXcTEcqybswqXY4n7_BJyqOJEoE9o.lAH4YLis0itXGYPLA_A4FR4
2024-11-18 10:16:00 UTC	1085	IN	Data Raw: 5f 4e 54 39 50 51 42 4c 39 46 65 6f 31 63 41 5f 6c 6d 6f 57 6f 32 79 58 59 68 7a 58 6c 73 49 73 58 4f 50 66 4c 76 50 44 2e 2e 55 49 49 45 46 5a 59 44 63 5f 6e 77 6c 4f 45 46 41 6f 69 64 56 33 43 76 33 7a 6f 48 71 4a 67 2e 48 46 48 6f 62 78 5f 33 4f 52 65 52 63 42 58 42 42 54 66 4e 4b 55 68 5f 71 74 79 7a 79 66 73 42 4d 30 66 53 58 4c 71 31 71 68 56 67 4c 59 53 79 46 4b 4b 69 68 65 69 2e 77 68 63 47 66 6c 63 22 7d 3b 76 61 72 20 63 70 6f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 62 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 38 Data Ascii: _NT9PQBL9Feo1cA_lmoWo2yXYhzXlsIsXOPfLvPD..UIIEFZYDc_nwlOEFAoidV3Cv3zoHqJg.HFHobx_3OReRcBXBBTfNKUh_qtyzyfsBM0fSXLq1qhVgLYSyFKKihei.whcGflc"};var cpo = document.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8
2024-11-18 10:16:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.22	49163	23.101.59.196	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:00 UTC	710	OUT	GET /7469O/e= HTTP/1.1 Host: lnk.ie Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=xk1szzlyx0fns5uy1x0hthty
2024-11-18 10:16:00 UTC	334	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Mon, 18 Nov 2024 10:16:00 GMT Connection: close Content-Length: 197
2024-11-18 10:16:00 UTC	197	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 64 69 72 65 63 74 2d 31 32 30 36 38 35 35 30 30 31 33 30 31 32 31 2e 7a 65 72 6f 62 6f 74 2e 6f 72 67 2f 72 65 64 69 72 65 63 74 3f 75 70 6e 3d 62 33 5a 4e 65 6b 45 7a 59 6b 78 76 53 79 39 4b 64 47 68 51 51 77 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.22	49168	35.190.80.1	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:01 UTC	589	OUT	OPTIONS /report/v4?s=fMXGztVDTfo5VJ9XHTLbXDTavgJy5XUjpyHWEnqf%2F85w8pVjGDb%2BzUT3xKaCc%2F8qQ4YINg03%2F6GOm492uWCCdcY8qG9QBMEz2NhBPYDZGj8FlCIQFMTOVzGBr2zsjiniUvdRKuh0ZA0E%2B7sdbqH9l8nYaKX2qXM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://redirect-120685500130121.zerobot.org Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:01 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 18 Nov 2024 10:16:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.22	49169	172.67.189.16	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:01 UTC	987	OUT	GET /redirect?upn=b3ZNekEzYkxvSy9KdGhQQw HTTP/1.1 Host: redirect-120685500130121.zerobot.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-full-version: "109.0.5414.120" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "0.1.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Not_A Brand";v="99.0.0.0", "Google Chrome";v="109.0.5414.120", "Chromium";v="109.0.5414.120" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:01 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Mon, 18 Nov 2024 10:16:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-11-18 10:16:01 UTC	909	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 7a 44 43 45 37 6e 72 47 36 79 58 4a 57 31 6b 78 31 46 51 73 73 78 30 55 37 66 53 63 31 7a 70 71 63 51 33 41 68 61 68 42 48 50 4b 53 71 33 48 33 44 68 5a 61 6b 4c 41 6c 70 61 70 64 63 37 63 68 55 49 66 58 56 53 79 35 4d 59 4e 2f 33 4a 33 52 47 39 72 79 6d 7a 50 6c 52 77 65 73 4c 38 4b 64 53 2f 30 4b 46 43 32 76 33 48 4d 3d 24 31 59 34 67 68 63 56 78 43 52 6a 47 4a 4a 69 79 64 59 67 44 70 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: zDCE7nrG6yXJW1kx1FQssx0U7fSc1zpqcQ3AhahBHPKSq3H3DhZakLAlpapdc7chUIfXVSy5MYN/3J3RG9rymzPlRwesL8KdS/0KFC2v3HM=$1Y4ghcVxCRjGJJiydYgDpA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-11-18 10:16:01 UTC	1369	IN	Data Raw: 32 34 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 24e1<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-11-18 10:16:01 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-11-18 10:16:01 UTC	1369	IN	Data Raw: 39 32 34 39 36 31 2d 31 2e 32 2e 31 2e 31 2d 5a 69 5f 36 4f 6f 58 37 55 6f 77 34 52 38 5f 66 5f 44 48 65 6e 37 6b 68 37 72 37 4e 6d 6c 54 69 48 45 41 47 74 31 58 6d 71 78 41 4c 62 41 66 39 33 4a 77 6f 6b 61 41 68 6c 50 51 4a 59 4f 41 67 4d 75 36 5a 64 6d 6e 77 59 34 38 32 64 7a 44 61 36 6c 58 66 6f 73 30 54 56 4c 76 67 69 42 6b 4c 77 59 32 73 74 59 67 32 2e 37 4d 65 34 4e 46 61 4f 49 6b 37 51 46 30 75 49 4c 33 67 31 43 6f 62 61 32 46 53 6a 56 66 4e 6e 62 6b 4b 5a 38 55 61 44 52 37 7a 50 65 72 67 5f 70 77 37 64 63 36 72 57 44 4b 4a 4e 4b 41 6c 36 64 58 64 73 67 52 34 65 36 64 33 59 30 58 74 6e 64 38 52 34 41 39 74 59 43 52 75 51 6b 7a 33 37 66 48 73 61 35 2e 51 75 63 32 32 30 70 62 64 79 6b 6c 67 5a 48 50 31 41 71 30 38 67 64 6a 44 51 4d 47 67 4c 47 76 55 Data Ascii: 924961-1.2.1.1-Zi_6OoX7Uow4R8_f_DHen7kh7r7NmlTiHEAGt1XmqxALbAf93JwokaAhlPQJYOAgMu6ZdmnwY482dzDa6lXfos0TVLvgiBkLwY2stYg2.7Me4NFaOIk7QF0uIL3g1Coba2FSjVfNnbkKZ8UaDR7zPerg_pw7dc6rWDKJNKAl6dXdsgR4e6d3Y0Xtnd8R4A9tYCRuQkz37fHsa5.Quc220pbdyklgZHP1Aq08gdjDQMGgLGvU
2024-11-18 10:16:01 UTC	1369	IN	Data Raw: 4f 4e 4f 6d 6a 4a 32 54 6d 4b 59 52 55 37 67 69 65 42 6b 75 36 69 75 36 76 4f 51 6a 73 67 44 63 47 36 4b 38 6f 72 33 61 47 6d 49 51 58 41 76 32 77 73 31 59 49 35 47 58 30 7a 6e 32 44 61 5f 68 6c 6f 54 31 73 76 6c 31 78 4d 42 4d 2e 61 76 76 6b 4f 4e 43 6c 68 2e 76 4c 38 73 31 55 4e 5f 55 47 43 32 51 4b 36 43 45 76 72 43 57 79 4d 38 50 58 38 46 48 38 55 33 42 48 45 30 48 34 68 4c 6a 54 51 68 44 68 6f 71 30 5a 33 5f 42 62 44 73 55 58 7a 68 50 73 77 52 47 6b 50 70 4b 4d 68 7a 34 4a 6c 4b 79 7a 31 31 65 62 6c 39 55 41 68 69 6f 32 66 42 32 77 41 7a 69 72 34 51 54 36 78 4c 41 51 75 4a 5a 4f 31 63 52 32 54 67 50 30 45 39 6e 43 56 6c 41 4e 6b 4c 70 62 35 6b 2e 31 4e 48 42 71 6a 34 6d 31 51 45 43 76 61 38 47 4c 35 35 63 78 63 5a 79 56 48 32 51 79 69 75 47 48 77 75 Data Ascii: ONOmjJ2TmKYRU7gieBku6iu6vOQjsgDcG6K8or3aGmIQXAv2ws1YI5GX0zn2Da_hloT1svl1xMBM.avvkONClh.vL8s1UN_UGC2QK6CEvrCWyM8PX8FH8U3BHE0H4hLjTQhDhoq0Z3_BbDsUXzhPswRGkPpKMhz4JlKyz11ebl9UAhio2fB2wAzir4QT6xLAQuJZO1cR2TgP0E9nCVlANkLpb5k.1NHBqj4m1QECva8GL55cxcZyVH2QyiuGHwu
2024-11-18 10:16:01 UTC	1369	IN	Data Raw: 39 41 53 73 37 34 76 75 46 46 4e 5f 64 42 65 76 73 46 36 48 6c 68 6d 48 52 51 62 38 7a 4f 6b 56 73 6f 68 55 4c 78 6f 2d 31 37 33 31 39 32 34 39 36 31 2d 31 2e 32 2e 31 2e 31 2d 76 53 65 6f 6d 55 53 72 74 62 6f 33 35 52 42 74 51 35 5a 4e 70 69 74 4e 79 48 66 6b 42 42 36 4b 4b 63 52 52 6b 5f 61 69 70 2e 7a 6d 32 50 6d 63 57 68 7a 41 79 43 4a 70 54 62 68 34 47 52 65 64 59 69 66 74 4f 30 70 79 32 6f 2e 39 31 53 72 52 31 53 33 44 4e 69 7a 6e 76 52 38 41 50 67 31 6e 62 77 4b 63 67 6a 68 43 56 59 6a 6d 43 41 38 6b 6e 35 42 47 5a 47 4c 48 73 53 5a 50 4d 67 65 52 5a 66 6e 6b 55 38 61 45 4c 4b 78 37 32 57 4a 70 7a 4b 53 64 4a 35 43 72 4a 41 55 51 38 32 77 69 32 35 65 61 6f 61 43 4d 61 4b 54 34 36 54 6b 50 78 68 2e 50 70 53 58 52 5f 4c 56 44 32 35 76 68 6f 77 35 77 Data Ascii: 9ASs74vuFFN_dBevsF6HlhmHRQb8zOkVsohULxo-1731924961-1.2.1.1-vSeomUSrtbo35RBtQ5ZNpitNyHfkBB6KKcRRk_aip.zm2PmcWhzAyCJpTbh4GRedYiftO0py2o.91SrR1S3DNiznvR8APg1nbwKcgjhCVYjmCA8kn5BGZGLHsSZPMgeRZfnkU8aELKx72WJpzKSdJ5CrJAUQ82wi25eaoaCMaKT46TkPxh.PpSXR_LVD25vhow5w
2024-11-18 10:16:01 UTC	1369	IN	Data Raw: 49 42 76 62 56 75 32 65 57 73 67 43 71 57 75 49 31 34 30 57 76 43 34 79 4d 35 2e 42 33 6e 74 61 4d 32 39 4e 5f 78 4e 44 39 34 71 4a 5f 58 46 79 72 67 30 6d 6f 6f 32 48 61 43 39 4a 6d 4d 45 48 37 6f 48 6a 57 4d 53 67 4a 72 6d 76 32 38 31 4e 4b 42 6d 33 4c 6a 75 66 57 6f 41 4a 5f 47 54 49 34 43 58 48 50 6b 37 41 7a 35 47 37 6d 78 65 76 75 43 43 6e 38 6c 4e 45 39 38 44 30 30 37 63 2e 61 46 36 50 37 47 77 71 33 38 30 68 37 47 42 33 4c 49 38 46 46 32 75 69 74 75 39 68 69 4f 62 53 57 5f 43 4e 66 4e 33 47 52 37 5a 6a 31 6b 4b 50 54 4b 52 4c 52 74 56 4e 5f 55 47 33 67 69 2e 6c 5f 38 5a 4f 69 6b 62 50 54 55 30 74 61 69 79 39 79 43 73 61 61 65 4a 58 32 4d 77 78 56 6e 52 4d 5f 38 69 4d 33 34 44 58 71 49 77 78 74 77 37 6f 77 31 43 62 37 72 5f 51 72 4c 70 51 6e 69 68 Data Ascii: IBvbVu2eWsgCqWuI140WvC4yM5.B3ntaM29N_xND94qJ_XFyrg0moo2HaC9JmMEH7oHjWMSgJrmv281NKBm3LjufWoAJ_GTI4CXHPk7Az5G7mxevuCCn8lNE98D007c.aF6P7Gwq380h7GB3LI8FF2uitu9hiObSW_CNfN3GR7Zj1kKPTKRLRtVN_UG3gi.l_8ZOikbPTU0taiy9yCsaaeJX2MwxVnRM_8iM34DXqIwxtw7ow1Cb7r_QrLpQnih
2024-11-18 10:16:01 UTC	1235	IN	Data Raw: 39 4d 4b 4b 71 59 58 4d 36 70 5a 63 75 6f 59 31 32 6c 74 54 4a 74 41 4e 4e 2e 56 5a 6b 79 43 61 61 5f 4e 74 52 76 45 4e 32 76 32 50 4b 6a 6c 4b 30 48 6a 41 32 51 6d 37 64 4e 6a 51 7a 39 74 4b 51 66 4a 53 31 56 46 59 6a 64 4a 38 68 4d 58 46 64 66 32 2e 41 46 50 66 2e 6c 6d 59 2e 56 54 32 50 5a 4c 4e 62 51 58 63 37 51 52 49 6f 51 64 2e 66 48 30 56 56 47 43 72 36 42 34 4d 56 38 37 33 65 6f 72 39 30 68 76 74 6c 79 79 7a 55 30 31 4d 55 66 42 39 70 4f 7a 72 66 6f 76 4c 68 31 63 4c 6d 2e 39 31 34 71 64 69 68 6a 75 48 48 63 72 4e 51 6b 74 7a 51 4f 4a 63 4b 54 63 66 36 48 4f 70 33 57 78 76 54 45 75 39 71 76 34 74 73 33 71 6f 6f 65 50 52 51 41 7a 65 70 4d 4c 63 51 4e 56 75 53 74 4f 78 72 6a 62 54 6d 50 6b 57 6b 58 54 37 4e 32 4f 65 74 2e 45 5a 47 51 52 43 58 41 43 Data Ascii: 9MKKqYXM6pZcuoY12ltTJtANN.VZkyCaa_NtRvEN2v2PKjlK0HjA2Qm7dNjQz9tKQfJS1VFYjdJ8hMXFdf2.AFPf.lmY.VT2PZLNbQXc7QRIoQd.fH0VVGCr6B4MV873eor90hvtlyyzU01MUfB9pOzrfovLh1cLm.914qdihjuHHcrNQktzQOJcKTcf6HOp3WxvTEu9qv4ts3qooePRQAzepMLcQNVuStOxrjbTmPkWkXT7N2Oet.EZGQRCXAC
2024-11-18 10:16:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.22	49170	35.190.80.1	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:02 UTC	510	OUT	POST /report/v4?s=fMXGztVDTfo5VJ9XHTLbXDTavgJy5XUjpyHWEnqf%2F85w8pVjGDb%2BzUT3xKaCc%2F8qQ4YINg03%2F6GOm492uWCCdcY8qG9QBMEz2NhBPYDZGj8FlCIQFMTOVzGBr2zsjiniUvdRKuh0ZA0E%2B7sdbqH9l8nYaKX2qXM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 441 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:02 UTC	441	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 36 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 39 2e 31 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 64 69 72 65 63 74 2d 31 32 30 36 38 35 35 Data Ascii: [{"age":2,"body":{"elapsed_time":767,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.189.16","status_code":403,"type":"http.error"},"type":"network-error","url":"https://redirect-1206855
2024-11-18 10:16:02 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 18 Nov 2024 10:16:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.22	49171	172.67.189.16	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:02 UTC	1060	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8e4733e18ee24790 HTTP/1.1 Host: redirect-120685500130121.zerobot.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "109.0.5414.120" sec-ch-ua-platform-version: "0.1.0" sec-ch-ua-full-version-list: "Not_A Brand";v="99.0.0.0", "Google Chrome";v="109.0.5414.120", "Chromium";v="109.0.5414.120" sec-ch-ua-bitness: "64" sec-ch-ua-model: sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw&__cf_chl_rt_tk=DhMu7jS_FU2ufxAYvvvNtHiQAb8PbfaOxLvHNwtGuio-1731924961-1.0.1.1-Pmsh4l5MyD9fbaAPePAxbHJlIZ2ybma0EH0c8fbjFVI Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:02 UTC	875	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 102641 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1EoQ2GLnXD8fKmtcX4YwMdgH2ge38jF6PV59xOsHxkiNPtzcW%2FK8yMTwABqspjdNviIAvH1%2Bd%2FeFRTcsY5SiSUZhPo76Et1yz3TTa0TvH8SRBKHgeZldFWv8OulM%2FMHrWcbpfkTMBJyPmVvXxspxiggrJ5qo2Lc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4733ea4ef82cc6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1609&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1638&delivery_rate=1716656&cwnd=250&unsent_bytes=0&cid=ce9cc734b84217ce&ts=143&x=0"
2024-11-18 10:16:02 UTC	494	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"}
2024-11-18 10:16:02 UTC	1369	IN	Data Raw: 74 5f 73 75 70 70 6f 72 74 65 64 5f 61 75 78 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 76 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 25 32 30 59 6f 75 72 25 32 30 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 37 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 25 32 37 25 33 45 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 75 6e 73 75 70 70 6f 72 74 65 64 25 Data Ascii: t_supported_aux":"%25%7Bplaceholder.com%7D%20needs%20to%20verify%20you%20are%20human%20before%20proceeding.%20Your%20%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%27challenge.supported_browsers%27%3Ebrowser%20is%20unsupported%
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 6c 6f 63 61 74 69 6f 6e 5f 6d 69 73 6d 61 74 63 68 5f 77 61 72 6e 69 6e 67 22 3a 22 57 65 62 73 69 74 65 25 32 30 69 73 25 32 30 6e 6f 74 25 32 30 61 63 63 65 73 73 69 62 6c 65 25 32 30 76 69 61 25 32 30 74 68 69 73 25 32 30 61 64 64 72 65 73 73 2e 22 2c 22 62 72 6f 77 73 65 72 5f 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 42 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 75 6e 73 75 70 70 6f 72 74 65 64 25 32 30 61 6e 64 25 32 30 63 61 6e 6e 6f 74 25 32 30 63 6f 6d 70 6c 65 74 65 25 32 30 76 65 72 69 66 69 63 61 74 69 6f 6e 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 Data Ascii: 0by%20an%20intermediary%20and%20is%20no%20longer%20available","location_mismatch_warning":"Website%20is%20not%20accessible%20via%20this%20address.","browser_not_supported":"Browser%20is%20unsupported%20and%20cannot%20complete%20verification","stuck_helper
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 5f 74 65 78 74 22 3a 22 57 61 69 74 69 6e 67 25 32 30 66 6f 72 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 74 6f 25 32 30 72 65 73 70 6f 6e 64 2e 2e 2e 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 74 69 74 6c 65 22 3a 22 53 74 75 63 6b 25 32 30 6f 6e 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 33 46 22 2c 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 22 3a 22 45 6e 61 62 6c 65 25 32 30 4a 61 76 61 53 63 72 69 70 74 25 32 30 61 6e 64 25 32 30 63 6f 6f 6b 69 65 73 25 32 30 74 Data Ascii: %20persists.","human_button_text":"Verify%20you%20are%20human","redirecting_text":"Waiting%20for%20%25%7Bplaceholder.com%7D%20to%20respond...","stuck_helper_title":"Stuck%20on%20this%20page%3F","js_cookies_missing":"Enable%20JavaScript%20and%20cookies%20t
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 6f 6e 25 33 43 25 32 46 61 25 33 45 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 4d 2c 65 4e 2c 65 4f 2c Data Ascii: on%3C%2Fa%3E"},"polyfills":{"turnstile_feedback_description":false,"feedback_report_output_subtitle":false,"testing_only_always_pass":false,"turnstile_overrun_description":false,"turnstile_timeout":false},"rtl":false,"lang":"en-us"};~function(gF,eM,eN,eO,
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 67 46 28 31 33 31 30 29 5d 3d 27 62 27 2c 65 54 3d 65 53 2c 65 4d 5b 67 46 28 31 31 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 67 57 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 67 57 3d 67 46 2c 6f 3d 7b 27 4a 6e 4f 70 61 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 6c 74 5a 53 75 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 74 55 4e 62 58 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 4b 61 44 59 55 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 70 4a 59 6d 65 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 Data Ascii: gF(1310)]='b',eT=eS,eM[gF(1147)]=function(g,h,i,j,gW,o,x,B,C,D,E,F){if(gW=gF,o={'JnOpa':function(G,H){return G<H},'ltZSu':function(G,H){return G===H},'tUNbX':function(G,H){return G(H)},'KaDYU':function(G,H){return G<H},'pJYme':function(G,H,I,J){return G(H
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3c 6f 7d 2c 27 78 44 6d 46 5a 27 3a 67 59 28 38 37 37 29 7d 2c 6a 3d 4f 62 6a 65 63 74 5b 67 59 28 39 38 36 29 5d 28 68 29 2c 6b 3d 30 3b 69 5b 67 59 28 31 32 35 31 29 5d 28 6b 2c 6a 5b 67 59 28 32 33 39 29 5d 29 3b 6b 2b 2b 29 69 66 28 69 5b 67 59 28 31 32 35 35 29 5d 3d 3d 3d 67 59 28 31 33 32 34 29 29 7b 66 6f 72 28 54 3d 31 2c 55 3d 30 3b 56 3c 57 3b 59 3d 69 5b 67 59 28 31 32 33 36 29 5d 28 5a 2c 31 29 7c 61 30 2c 61 31 3d 3d 61 32 2d 31 3f 28 61 33 3d 30 2c 61 34 5b 67 59 28 31 31 31 33 29 5d 28 61 35 28 61 36 29 29 2c 61 37 3d 30 29 3a 61 38 2b 2b 2c 61 39 3d 30 2c 58 2b 2b 29 3b 66 6f 72 28 61 61 3d 61 62 5b 67 59 28 32 39 38 29 5d 28 30 29 2c 61 63 3d 30 3b 69 5b 67 59 28 33 38 33 Data Ascii: function(n,o){return n<o},'xDmFZ':gY(877)},j=Object[gY(986)](h),k=0;i[gY(1251)](k,j[gY(239)]);k++)if(i[gY(1255)]===gY(1324)){for(T=1,U=0;V<W;Y=i[gY(1236)](Z,1)\|a0,a1==a2-1?(a3=0,a4[gY(1113)](a5(a6)),a7=0):a8++,a9=0,X++);for(aa=ab[gY(298)](0),ac=0;i[gY(383
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 75 53 66 50 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 7a 65 4e 73 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 4d 6f 70 66 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 44 77 42 64 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 78 75 71 43 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 56 49 61 56 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 44 53 45 52 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 Data Ascii: tion(h,i){return h==i},'uSfPa':function(h,i){return h<<i},'zeNsW':function(h,i){return i\|h},'MopfD':function(h,i){return h==i},'DwBdm':function(h,i){return h\|i},'xuqCV':function(h,i){return h<<i},'VIaVb':function(h,i){return h-i},'DSERm':function(h,i){ret
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 29 5d 5b 68 33 28 36 39 34 29 5d 5b 68 33 28 31 32 37 32 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 68 33 28 31 33 31 39 29 5d 28 32 35 36 2c 43 5b 68 33 28 32 39 38 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 33 28 31 31 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 68 33 28 32 39 38 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 68 33 28 37 35 31 29 5d 28 48 3c 3c 31 2e 37 35 2c 64 5b 68 33 28 31 32 31 32 29 5d 28 4f 2c 31 29 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 33 28 31 31 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 Data Ascii: )][h3(694)][h3(1272)](B,C)){if(d[h3(1319)](256,C[h3(298)](0))){for(s=0;s<F;H<<=1,I==j-1?(I=0,G[h3(1113)](o(H)),H=0):I++,s++);for(O=C[h3(298)](0),s=0;8>s;H=d[h3(751)](H<<1.75,d[h3(1212)](O,1)),I==j-1?(I=0,G[h3(1113)](o(H)),H=0):I++,O>>=1,s++);}else{for(O=1
2024-11-18 10:16:03 UTC	1369	IN	Data Raw: 3d 30 2c 47 5b 68 33 28 31 31 31 33 29 5d 28 64 5b 68 33 28 34 32 30 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 44 3d 3d 30 26 26 46 2b 2b 7d 66 6f 72 28 4f 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 4f 26 31 2e 32 34 2c 49 3d 3d 64 5b 68 33 28 31 30 37 39 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 33 28 31 31 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 68 33 28 35 36 38 29 5d 28 6a 2c 31 29 29 7b 47 5b 68 33 28 31 31 31 33 29 5d 28 64 5b 68 33 28 32 31 35 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 68 33 28 32 33 32 29 Data Ascii: =0,G[h3(1113)](d[h3(420)](o,H)),H=0):I++,O>>=1,s++);D--,D==0&&F++}for(O=2,s=0;s<F;H=H<<1\|O&1.24,I==d[h3(1079)](j,1)?(I=0,G[h3(1113)](o(H)),H=0):I++,O>>=1,s++);for(;;)if(H<<=1,I==d[h3(568)](j,1)){G[h3(1113)](d[h3(215)](o,H));break}else I++;return G[h3(232)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.22	49173	172.67.189.16	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:04 UTC	1378	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1213075623:1731923031:IM7zHx7btM8cpvqoTXGBRT2jhn4ACFmouUGLaATwKkw/8e4733e18ee24790/yYXUjRHcmsMssvX_1rGjOZKXdjHe494ZESvPC9d8YNY-1731924961-1.2.1.1-42QdKm5Y4Wx7cA21XRK_vJ76MYaRBnV.oEG6TpYZxD2VhJhP4GEKtkunEohPFP88 HTTP/1.1 Host: redirect-120685500130121.zerobot.org Connection: keep-alive Content-Length: 4473 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "109.0.5414.120" sec-ch-ua-platform-version: "0.1.0" sec-ch-ua-full-version-list: "Not_A Brand";v="99.0.0.0", "Google Chrome";v="109.0.5414.120", "Chromium";v="109.0.5414.120" sec-ch-ua-bitness: "64" sec-ch-ua-model: CF-Challenge: yYXUjRHcmsMssvX_1rGjOZKXdjHe494ZESvPC9d8YNY-1731924961-1.2.1.1-42QdKm5Y4Wx7cA21XRK_vJ76MYaRBnV.oEG6TpYZxD2VhJhP4GEKtkunEohPFP88 sec-ch-ua-platform: "Windows" Accept: / Origin: https://redirect-120685500130121.zerobot.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:04 UTC	4473	OUT	Data Raw: 76 5f 38 65 34 37 33 33 65 31 38 65 65 32 34 37 39 30 3d 31 6d 72 58 56 58 46 58 65 58 32 58 74 58 6f 79 6b 57 79 47 6b 79 58 4c 5a 25 32 62 33 75 42 56 6b 34 72 6b 31 65 6b 65 6d 65 24 36 6e 6b 67 65 46 6e 4e 48 71 34 6a 6b 6b 75 66 24 59 71 61 6b 52 58 43 6d 6b 4b 6b 4c 61 44 68 49 6b 32 30 7a 41 6b 38 4e 72 49 31 7a 6b 71 30 6b 4d 6b 6e 6d 6b 2d 43 50 39 51 74 36 58 7a 75 4d 68 32 4f 6b 6e 59 6b 51 58 6b 33 31 42 6b 6e 53 42 6b 57 71 2b 44 2d 63 4d 74 33 57 35 62 47 43 50 39 41 32 6b 6e 34 6b 6b 42 59 67 72 31 42 68 55 52 58 6b 70 36 6b 51 39 31 32 72 72 31 43 4e 50 57 46 66 39 66 4c 56 6b 77 74 59 6b 76 34 2b 33 4e 6b 6b 55 6b 57 72 6b 6a 74 53 59 45 58 65 4e 66 56 72 6b 45 62 6e 6d 64 6a 72 6b 31 58 71 50 69 47 58 44 6b 31 56 39 6e 2d 41 59 53 55 4b Data Ascii: v_8e4733e18ee24790=1mrXVXFXeX2XtXoykWyGkyXLZ%2b3uBVk4rk1ekeme$6nkgeFnNHq4jkkuf$YqakRXCmkKkLaDhIk20zAk8NrI1zkq0kMknmk-CP9Qt6XzuMh2OknYkQXk31BknSBkWq+D-cMt3W5bGCP9A2kn4kkBYgr1BhURXkp6kQ912rr1CNPWFf9fLVkwtYkv4+3NkkUkWrkjtSYEXeNfVrkEbnmdjrk1XqPiGXDk1V9n-AYSUK
2024-11-18 10:16:05 UTC	875	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:04 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 13600 Connection: close cf-chl-gen: fpEFl+SvKLXcFeb9HeISdD6XT/WU5uCoaPnvK6nTlLP8hqibEdb/nv3/Bg2XtNwSTuOrspZutTU=$TvH/kSRhSRa5VoC7 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c7KfsLetuLMs2EL3y4s7JkippL2Bc3%2BpiRFWiTHMURF%2B54iQrRMzgXSXHdvfOcaEUC5e6Ng%2FVLjfMYQgqwiLgve5njdQ3xn%2BtA7jszUbA%2Bnsek%2FezdrEfqTpU3RHj48LKVDwRpsQzyVqs9q3v98o2zfD4epy5YI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4733f7185a6bec-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1241&sent=8&recv=11&lost=0&retrans=0&sent_bytes=2825&recv_bytes=6473&delivery_rate=2212375&cwnd=251&unsent_bytes=0&cid=5c9834d74e967d2b&ts=725&x=0"
2024-11-18 10:16:05 UTC	494	IN	Data Raw: 76 4b 2b 31 72 4c 6a 42 65 61 75 4b 74 4d 53 2b 74 4d 61 38 77 38 4e 2b 67 4e 50 57 6c 58 76 54 78 73 7a 44 7a 39 69 51 77 72 2b 56 77 36 53 50 79 70 47 6d 6a 4f 54 58 33 64 54 67 36 61 48 54 30 4b 66 55 74 61 44 63 6f 72 65 64 6e 70 2b 67 39 2b 50 31 70 4f 54 70 37 65 66 73 38 76 66 72 38 41 4d 49 73 4d 36 79 39 41 66 38 44 41 58 39 43 41 38 50 39 38 33 37 32 71 72 42 77 73 50 45 48 41 67 61 79 42 30 51 47 68 45 41 46 43 45 6d 46 79 59 6f 31 50 4c 57 47 53 73 68 4d 43 6b 69 4c 44 4d 7a 48 50 49 67 2f 73 37 50 35 75 66 6f 36 54 51 79 37 50 55 75 4d 7a 63 78 4e 6a 78 42 4e 54 70 4d 55 51 67 73 51 31 45 71 44 77 41 65 48 79 41 45 46 51 38 48 59 2f 4c 7a 43 77 77 4e 44 67 38 51 45 52 4a 53 56 31 74 56 57 6d 42 6c 57 56 35 77 64 52 34 38 49 48 77 4d 49 79 51 Data Ascii: vK+1rLjBeauKtMS+tMa8w8N+gNPWlXvTxszDz9iQwr+Vw6SPypGmjOTX3dTg6aHT0KfUtaDcorednp+g9+P1pOTp7efs8vfr8AMIsM6y9Af8DAX9CA8P98372qrBwsPEHAgayB0QGhEAFCEmFyYo1PLWGSshMCkiLDMzHPIg/s7P5ufo6TQy7PUuMzcxNjxBNTpMUQgsQ1EqDwAeHyAEFQ8HY/LzCwwNDg8QERJSV1tVWmBlWV5wdR48IHwMIyQ
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 6a 5a 32 74 76 63 33 64 37 66 34 4f 45 54 46 78 77 67 4e 50 6f 44 36 55 49 31 4f 7a 49 2b 52 2f 34 78 4e 6a 6f 30 4f 54 39 45 4f 45 6c 4c 55 41 74 47 4f 46 4a 55 46 67 4d 52 42 56 31 51 56 6b 31 5a 59 68 70 4d 55 56 56 50 56 46 70 66 55 32 52 6d 61 79 5a 6f 63 45 52 6a 4d 69 6f 4a 49 43 45 69 49 79 51 6c 4a 69 63 6f 4b 53 6f 72 57 48 4a 58 68 6f 42 47 54 44 4f 4c 66 6f 52 37 68 35 42 49 65 6e 2b 44 66 59 4b 49 6a 59 47 53 6c 4a 6c 55 6c 34 2b 64 6e 47 39 67 54 56 74 50 70 35 71 67 6c 36 4f 73 5a 4a 61 62 6e 35 6d 65 70 4b 6d 64 72 72 43 31 63 4a 79 77 6e 62 68 38 64 46 4e 71 61 32 78 74 62 6d 39 77 63 58 4a 7a 64 48 58 47 78 39 43 36 6a 70 56 38 31 4d 66 4e 78 4e 44 5a 6b 63 50 49 7a 4d 62 4c 30 64 62 4b 32 39 33 69 6e 64 4f 36 78 74 7a 68 32 73 6d 6a 67 Data Ascii: jZ2tvc3d7f4OETFxwgNPoD6UI1OzI+R/4xNjo0OT9EOElLUAtGOFJUFgMRBV1QVk1ZYhpMUVVPVFpfU2RmayZocERjMioJICEiIyQlJicoKSorWHJXhoBGTDOLfoR7h5BIen+DfYKIjYGSlJlUl4+dnG9gTVtPp5qgl6OsZJabn5mepKmdrrC1cJywnbh8dFNqa2xtbm9wcXJzdHXGx9C6jpV81MfNxNDZkcPIzMbL0dbK293indO6xtzh2smjg
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 74 49 43 55 70 49 79 67 75 4d 79 63 34 4f 6a 2f 35 4d 44 59 37 45 55 45 37 49 6b 59 2b 50 55 42 47 42 65 50 36 2b 2f 7a 39 2f 67 41 42 41 67 4d 45 42 51 59 73 58 46 34 32 47 79 59 4e 5a 56 68 65 56 57 46 71 49 6c 52 5a 58 56 64 63 59 6d 64 62 62 47 35 7a 4c 6d 52 71 62 30 56 31 62 31 6c 72 58 7a 59 56 4c 43 30 75 4c 7a 41 78 4d 6a 4d 30 4e 54 59 33 59 33 35 6c 6a 55 78 58 50 70 61 4a 6a 34 61 53 6d 31 4f 46 69 6f 36 49 6a 5a 4f 59 6a 4a 32 66 70 46 39 39 6d 48 2b 6e 5a 6d 4e 43 57 56 70 62 58 46 31 65 58 32 42 68 59 6d 4e 6b 71 62 71 55 6f 71 4b 43 68 57 7a 45 74 37 32 30 77 4d 6d 42 73 37 69 38 74 72 76 42 78 72 72 4c 7a 64 4b 4e 78 4e 57 76 76 62 32 64 6b 6e 47 49 69 59 71 4c 6a 49 32 4f 6a 35 43 52 6b 70 50 58 36 65 2f 52 76 71 79 30 6d 2f 50 6d 37 4f Data Ascii: tICUpIyguMyc4Oj/5MDY7EUE7IkY+PUBGBeP6+/z9/gABAgMEBQYsXF42GyYNZVheVWFqIlRZXVdcYmdbbG5zLmRqb0V1b1lrXzYVLC0uLzAxMjM0NTY3Y35ljUxXPpaJj4aSm1OFio6IjZOYjJ2fpF99mH+nZmNCWVpbXF1eX2BhYmNkqbqUoqKChWzEt720wMmBs7i8trvBxrrLzdKNxNWvvb2dknGIiYqLjI2Oj5CRkpPX6e/Rvqy0m/Pm7O
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 30 4e 48 6f 36 65 72 72 37 4f 33 75 37 2f 44 78 38 76 4e 4c 4e 30 6e 33 53 7a 39 50 2b 78 72 39 42 67 63 63 36 77 4d 45 42 51 59 48 43 41 6b 4b 43 77 77 4e 44 6d 56 52 59 78 4a 65 57 57 35 43 58 47 59 5a 4e 78 74 6e 59 6e 63 74 62 47 5a 77 61 6e 68 74 51 53 63 53 4b 53 6f 72 4c 43 30 75 4c 7a 41 78 4d 6a 4d 30 69 33 65 4a 4f 48 71 4d 6a 57 69 43 6a 44 39 64 51 59 4f 56 6c 6c 4f 53 6a 4a 61 51 6e 70 4e 6e 54 54 68 50 55 46 46 53 55 31 52 56 56 6c 64 59 57 56 71 68 71 36 39 65 5a 37 61 69 74 47 4f 74 71 62 35 6e 68 57 6c 36 68 6d 79 32 73 73 64 77 6a 58 4b 30 78 73 65 69 76 4d 61 55 65 73 54 41 31 59 6d 4b 69 59 48 64 62 59 53 46 68 6f 65 49 69 59 71 4c 6a 49 32 4f 6a 35 43 52 6b 70 50 6d 32 75 71 58 6f 37 61 61 34 65 37 73 36 38 4c 6f 34 76 54 47 38 2b 6e Data Ascii: 0NHo6err7O3u7/Dx8vNLN0n3Sz9P+xr9Bgcc6wMEBQYHCAkKCwwNDmVRYxJeWW5CXGYZNxtnYnctbGZwanhtQScSKSorLC0uLzAxMjM0i3eJOHqMjWiCjD9dQYOVllOSjJaQnpNnTThPUFFSU1RVVldYWVqhq69eZ7aitGOtqb5nhWl6hmy2ssdwjXK0xseivMaUesTA1YmKiYHdbYSFhoeIiYqLjI2Oj5CRkpPm2uqXo7aa4e7s68Lo4vTG8+n
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 54 6f 43 39 7a 5a 45 52 55 4e 48 48 30 55 2b 53 43 6b 39 52 6b 4a 42 55 77 77 42 52 55 74 48 57 56 34 54 43 42 42 66 58 52 6c 56 54 31 31 55 58 56 64 6c 47 78 34 78 41 52 67 5a 47 68 73 63 48 52 34 66 49 43 45 69 49 79 51 6c 4a 69 65 46 4e 53 6f 38 50 44 5a 4a 47 54 41 78 4d 6a 4d 30 4e 54 59 33 4f 44 6b 36 4f 34 57 44 52 70 61 4a 6a 34 61 53 6d 31 4e 70 63 6d 35 2f 65 56 78 61 70 49 39 33 6e 47 6c 61 57 71 4f 6c 70 71 61 71 72 61 2b 70 70 62 43 79 71 4b 4e 75 70 62 4b 79 75 61 2b 31 76 61 71 2b 74 4c 75 37 64 58 68 35 63 63 31 64 64 48 56 32 64 33 68 35 65 6e 74 38 66 58 35 2f 67 49 47 43 67 39 76 4f 31 4d 76 58 34 4a 6a 65 30 65 48 43 32 4e 33 57 34 65 6a 6f 6e 64 7a 73 35 74 7a 75 35 4f 76 72 70 71 69 67 2f 49 79 6a 70 4b 57 6d 70 36 69 70 71 71 75 73 Data Ascii: ToC9zZERUNHH0U+SCk9RkJBUwwBRUtHWV4TCBBfXRlVT11UXVdlGx4xARgZGhscHR4fICEiIyQlJieFNSo8PDZJGTAxMjM0NTY3ODk6O4WDRpaJj4aSm1Npcm5/eVxapI93nGlaWqOlpqaqra+ppbCyqKNupbKyua+1vaq+tLu7dXh5cc1ddHV2d3h5ent8fX5/gIGCg9vO1MvX4Jje0eHC2N3W4ejondzs5tzu5Ovrpqig/IyjpKWmp6ipqqus
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 6a 38 50 45 78 47 50 45 35 45 53 30 73 47 43 41 42 63 36 77 4d 45 42 51 59 48 43 41 6b 4b 43 77 77 4e 44 67 38 51 45 52 49 54 46 42 55 57 62 6d 46 6e 58 6d 70 7a 4b 30 70 48 51 6d 64 78 4e 79 77 75 51 52 45 6f 4b 53 6f 72 4c 43 30 75 4c 7a 41 78 4d 6a 4d 30 4e 54 59 33 6c 55 55 36 54 45 78 4e 54 6b 68 62 4b 30 4a 44 52 45 56 47 52 30 68 4a 53 6b 74 4d 54 61 75 55 6e 4b 53 58 72 6a 35 56 56 6c 64 59 57 56 70 62 58 46 31 65 58 32 42 68 59 6d 4e 6b 71 4b 36 71 76 4d 47 6c 63 71 50 43 73 37 71 48 65 4b 39 7a 6b 58 57 4b 6b 6d 4a 35 65 6e 74 38 66 58 35 2f 67 49 47 43 67 34 53 46 68 6f 65 49 7a 4e 4c 4f 34 4f 58 4a 6c 75 6e 58 76 4f 48 62 70 35 33 55 6f 4b 4b 45 6d 35 79 64 6e 70 2b 67 6f 61 4b 6a 70 4b 57 6d 42 5a 4b 70 71 71 75 73 72 61 36 76 73 41 2b 79 2b Data Ascii: j8PExGPE5ES0sGCABc6wMEBQYHCAkKCwwNDg8QERITFBUWbmFnXmpzK0pHQmdxNywuQREoKSorLC0uLzAxMjM0NTY3lUU6TExNTkhbK0JDREVGR0hJSktMTauUnKSXrj5VVldYWVpbXF1eX2BhYmNkqK6qvMGlcqPCs7qHeK9zkXWKkmJ5ent8fX5/gIGCg4SFhoeIzNLO4OXJlunXvOHbp53UoKKEm5ydnp+goaKjpKWmBZKpqqusra6vsA+y+
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 47 46 2b 5a 42 51 46 4e 47 43 55 6f 30 50 6d 42 61 54 30 4a 4d 45 69 59 4e 59 46 52 6b 5a 6d 52 68 4c 2f 35 5a 57 47 74 65 49 53 49 32 42 78 34 66 49 43 46 68 5a 6d 70 6b 61 57 39 30 61 47 31 2f 68 44 74 66 64 6f 52 64 51 6a 34 2f 55 44 59 68 4f 44 6b 36 4f 33 75 41 68 48 36 44 69 59 36 43 68 35 6d 65 67 6f 65 4d 6b 49 71 50 6c 5a 71 4f 6b 36 57 71 59 59 57 63 71 6f 4e 6f 6c 6c 70 34 58 4c 68 49 58 32 42 68 59 6d 4e 6b 5a 57 61 61 6e 5a 32 6b 74 59 43 48 62 6e 62 48 68 73 53 58 77 36 76 42 75 73 2f 4a 77 63 72 54 6b 71 7a 56 68 34 31 73 67 34 53 46 68 6f 65 49 69 59 72 58 76 64 76 43 75 4b 43 72 6b 70 58 74 32 75 6d 5a 70 49 4f 61 6d 35 79 64 6e 70 2b 67 6f 64 6e 4f 32 76 79 33 77 61 69 77 35 4d 33 65 34 77 59 43 43 39 58 38 35 75 54 59 41 2f 72 6e 36 75 Data Ascii: GF+ZBQFNGCUo0PmBaT0JMEiYNYFRkZmRhL/5ZWGteISI2Bx4fICFhZmpkaW90aG1/hDtfdoRdQj4/UDYhODk6O3uAhH6DiY6Ch5megoeMkIqPlZqOk6WqYYWcqoNollp4XLhIX2BhYmNkZWaanZ2ktYCHbnbHhsSXw6vBus/JwcrTkqzVh41sg4SFhoeIiYrXvdvCuKCrkpXt2umZpIOam5ydnp+godnO2vy3waiw5M3e4wYCC9X85uTYA/rn6u
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 4f 7a 63 6f 54 42 59 69 38 66 49 4b 43 77 77 4e 44 67 38 51 45 57 5a 6c 62 52 56 78 41 52 67 5a 47 68 73 63 48 52 34 66 49 43 45 69 49 32 64 74 63 6d 70 38 67 57 55 79 59 34 4a 7a 65 6b 63 34 62 7a 4e 52 4e 55 5a 53 49 6a 6b 36 4f 7a 77 39 50 6a 39 41 51 55 4a 44 52 4a 79 50 6c 59 79 59 6f 56 6c 39 6e 34 65 54 65 47 68 53 63 46 52 63 6c 62 43 4c 6d 4b 42 70 61 6f 75 48 64 62 6d 51 63 37 61 65 71 4c 47 67 73 70 56 2b 68 4d 57 73 79 4c 79 67 6e 62 75 6c 6d 72 69 74 6e 63 76 4c 71 4e 47 77 30 72 4c 50 71 59 36 54 6d 70 65 57 6e 35 6d 63 6f 71 43 66 6d 5a 36 63 6f 70 36 69 6f 4b 53 68 79 36 65 35 35 4d 50 4d 72 63 2f 56 35 76 65 33 37 4e 6a 61 2b 4f 6a 30 38 74 54 30 30 4f 4c 79 32 66 54 64 39 77 49 4a 31 2b 33 37 43 50 30 4c 2b 50 76 6a 45 2b 76 52 7a 77 58 Data Ascii: OzcoTBYi8fIKCwwNDg8QEWZlbRVxARgZGhscHR4fICEiI2dtcmp8gWUyY4Jzekc4bzNRNUZSIjk6Ozw9Pj9AQUJDRJyPlYyYoVl9n4eTeGhScFRclbCLmKBpaouHdbmQc7aeqLGgspV+hMWsyLygnbulmritncvLqNGw0rLPqY6TmpeWn5mcoqCfmZ6cop6ioKShy6e55MPMrc/V5ve37Nja+Oj08tT00OLy2fTd9wIJ1+37CP0L+PvjE+vRzwX
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 79 4d 52 57 56 46 6a 55 32 45 58 48 52 6c 56 57 56 74 6c 61 56 30 6d 59 32 6c 77 59 6e 42 67 59 33 56 72 65 57 6b 79 61 57 68 30 64 57 78 73 62 33 67 31 53 58 61 47 67 48 61 49 66 6f 57 46 51 45 4b 56 6b 6f 57 4c 67 6f 36 58 54 32 56 75 61 6e 74 31 57 46 61 41 6f 6f 42 37 5a 56 5a 59 72 56 31 5a 6c 4a 71 70 6d 36 6c 6c 6f 71 69 76 6f 61 2b 66 6f 72 53 71 75 4b 68 78 71 4b 65 7a 74 4b 75 72 72 72 64 30 69 4c 58 46 76 37 58 48 76 63 54 45 66 34 48 55 30 63 54 4b 77 63 33 57 6a 71 53 74 71 62 71 30 6c 35 58 56 34 4c 6a 44 33 36 57 57 6d 4f 32 64 6d 65 58 5a 32 2b 6a 63 36 2b 47 6e 37 2b 58 71 34 2b 37 31 39 61 6d 39 71 2f 50 72 2f 65 33 37 73 62 65 7a 38 4f 2f 37 2f 50 50 7a 39 67 43 38 30 50 30 4f 43 50 30 51 42 67 30 4e 78 77 6a 4b 48 68 73 4f 46 41 73 58 Data Ascii: yMRWVFjU2EXHRlVWVtlaV0mY2lwYnBgY3VreWkyaWh0dWxsb3g1SXaGgHaIfoWFQEKVkoWLgo6XT2Vuant1WFaAooB7ZVZYrV1ZlJqpm6lloqivoa+forSquKhxqKeztKurrrd0iLXFv7XHvcTEf4HU0cTKwc3WjqStqbq0l5XV4LjD36WWmO2dmeXZ2+jc6+Gn7+Xq4+719am9q/Pr/e37sbez8O/7/PPz9gC80P0OCP0QBg0NxwjKHhsOFAsX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.22	49174	104.21.81.97	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:04 UTC	435	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8e4733e18ee24790 HTTP/1.1 Host: redirect-120685500130121.zerobot.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:05 UTC	879	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 101112 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kHvYny5hh6FLdb%2Fm6Pk6jMbkuzA4OqEsFIj%2FXbvTDOfkb2ddAFT3wX7eMezw3DEWFStgXz2wz0q6ZcQEot95lP%2F1VD2yZ19jAk%2BQ15RV%2FhV9Vqu1Ii7mbYBVfzHkKcdtHfy1m%2Fls2cXVpsy3WhNCrmS2s7QuVfE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4733f75f3cddb0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1176&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1013&delivery_rate=2509532&cwnd=252&unsent_bytes=0&cid=8f9ef826f14b2e4b&ts=752&x=0"
2024-11-18 10:16:05 UTC	490	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 68 65 6c 70 65 72 5f 74 69 74 6c 65 22 3a 22 57 68 61 74 25 32 30 69 73 25 32 30 74 68 69 73 25 32 30 50 61 67 65 25 33 46 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 65 78 70 Data Ascii: Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","interstitial_helper_title":"What%20is%20this%20Page%3F","stuck_helper_exp
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 32 30 65 6e 61 62 6c 65 25 32 30 4a 61 76 61 53 63 72 69 70 74 25 32 30 61 6e 64 25 32 30 63 6f 6f 6b 69 65 73 25 32 43 25 32 30 74 68 65 6e 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 2e 22 2c 22 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 68 65 6c 70 65 72 5f 65 78 70 6c 61 69 6e 65 72 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 75 73 65 73 25 32 30 61 25 32 30 73 65 63 75 72 69 74 79 25 32 30 73 65 72 76 69 63 65 25 32 30 74 6f 25 32 30 70 72 6f 74 65 63 74 25 32 30 61 67 61 69 6e 73 74 25 32 30 6d 61 6c 69 63 69 6f 75 73 25 32 30 62 6f 74 73 2e 25 32 Data Ascii: 20enable%20JavaScript%20and%20cookies%2C%20then%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E.","interstitial_helper_explainer":"%25%7Bplaceholder.com%7D%20uses%20a%20security%20service%20to%20protect%20against%20malicious%20bots.%2
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 66 61 76 69 63 6f 6e 5f 61 6c 74 22 3a 22 49 63 6f 6e 25 32 30 66 6f 72 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 22 2c 22 62 72 6f 77 73 65 72 5f 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 5f 61 75 78 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 76 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 25 32 30 59 6f 75 72 25 32 30 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 Data Ascii: re%20for%20more%20information%3C%2Fa%3E","favicon_alt":"Icon%20for%20%25%7Bplaceholder.com%7D","browser_not_supported_aux":"%25%7Bplaceholder.com%7D%20needs%20to%20verify%20you%20are%20human%20before%20proceeding.%20Your%20%3Ca%20target%3D%22_blank%22%20r
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 4d 2c 65 Data Ascii: :"Stuck%20here%3F"},"polyfills":{"testing_only_always_pass":false,"turnstile_overrun_description":false,"turnstile_timeout":false,"turnstile_feedback_description":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gF,eM,e
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 7d 2c 27 64 4b 45 68 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 64 65 57 6c 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6b 79 47 65 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 43 48 78 45 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 44 6d 4e 68 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 52 71 74 64 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 66 51 71 76 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 3e 3e 69 7d 2c 27 53 6b 70 5a 74 27 3a Data Ascii: },'dKEhw':function(h,i){return h^i},'deWlG':function(h,i){return h>i},'kyGeg':function(h,i){return h+i},'CHxEO':function(h,i){return h-i},'DmNhX':function(h,i){return h^i},'Rqtdg':function(h,i,j){return h(i,j)},'fQqvN':function(h,i){return h>>>i},'SkpZt':
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 47 28 38 33 39 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 48 2c 69 29 7b 69 66 28 67 48 3d 67 47 2c 69 3d 7b 27 51 74 78 77 48 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 6c 29 7b 72 65 74 75 72 6e 20 6a 28 6b 2c 6c 29 7d 7d 2c 64 5b 67 48 28 31 33 32 38 29 5d 3d 3d 3d 67 48 28 31 32 39 38 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 6a 2c 67 4a 2c 6b 29 7b 72 65 74 75 72 6e 20 67 4a 3d 67 48 2c 6b 3d 7b 27 65 6b 65 4b 70 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 2c 6e 2c 67 49 29 7b 72 65 74 75 72 6e 20 67 49 3d 62 2c 64 5b 67 49 28 36 37 32 29 5d 28 6c 2c 6d 2c 6e 29 7d 2c 27 48 6b 6b 58 Data Ascii: i){return h+i}},e=String[gG(839)],f={'h':function(h,gH,i){if(gH=gG,i={'QtxwH':function(j,k,l){return j(k,l)}},d[gH(1328)]===gH(1298))return null==h?'':f.g(h,6,function(j,gJ,k){return gJ=gH,k={'ekeKp':function(l,m,n,gI){return gI=b,d[gI(672)](l,m,n)},'HkkX
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 5b 67 4c 28 31 30 38 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 67 4c 28 31 31 32 34 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 67 4c 28 31 35 30 33 29 5d 28 31 36 2c 78 29 3b 49 3d 64 5b 67 4c 28 38 31 35 29 5d 28 49 3c 3c 31 2c 31 2e 36 37 26 4e 29 2c 4a 3d 3d 64 5b 67 4c 28 37 38 30 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 67 4c 28 31 30 38 35 29 5d 28 64 5b 67 4c 28 31 32 36 39 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 67 4c 28 31 30 32 34 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 67 4c 28 37 34 33 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d Data Ascii: [gL(1085)](o(I)),I=0):J++,N=0,x++);for(N=D[gL(1124)](0),x=0;d[gL(1503)](16,x);I=d[gL(815)](I<<1,1.67&N),J==d[gL(780)](j,1)?(J=0,H[gL(1085)](d[gL(1269)](o,I)),I=0):J++,N>>=1,x++);}E--,d[gL(1024)](0,E)&&(E=Math[gL(743)](2,G),G++),delete C[D]}else for(N=B[D]
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 4a 3d 3d 64 5b 67 4c 28 36 36 38 29 5d 28 6a 2c 31 29 29 7b 69 66 28 67 4c 28 31 32 31 38 29 21 3d 3d 64 5b 67 4c 28 35 30 31 29 5d 29 7b 66 6f 72 28 53 3d 5b 31 31 31 36 33 35 32 34 30 38 2c 31 38 39 39 34 34 37 34 34 31 2c 33 30 34 39 33 32 33 34 37 31 2c 33 39 32 31 30 30 39 35 37 33 2c 39 36 31 39 38 37 31 36 33 2c 31 35 30 38 39 37 30 39 39 33 2c 32 34 35 33 36 33 35 37 34 38 2c 32 38 37 30 37 36 33 32 32 31 2c 33 36 32 34 33 38 31 30 38 30 2c 33 31 30 35 39 38 34 30 31 2c 36 30 37 32 32 35 32 37 38 2c 31 34 32 36 38 38 31 39 38 37 2c 31 39 32 35 30 37 38 33 38 38 2c 32 31 36 32 30 37 38 32 30 36 2c 32 36 31 34 38 38 38 31 30 33 2c 33 32 34 38 32 32 32 Data Ascii: ):J++,N>>=1,x++);for(;;)if(I<<=1,J==d[gL(668)](j,1)){if(gL(1218)!==d[gL(501)]){for(S=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 29 5d 28 62 7a 2c 61 33 2c 61 38 29 2c 61 30 26 61 31 5e 64 5b 67 4c 28 39 38 30 29 5d 28 7e 61 30 2c 61 32 29 29 2c 53 5b 57 5d 29 2c 55 5b 57 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 61 31 3d 61 30 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 62 4a 3d 64 5b 67 4c 28 36 39 36 29 5d 28 62 4b 2c 61 38 2c 61 36 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 61 36 3d 64 5b 67 4c 28 31 34 33 35 29 5d 28 62 45 2c 61 33 2c 64 5b 67 4c 28 35 34 35 29 5d 28 64 5b 67 4c 28 39 39 35 29 5d 28 64 5b 67 4c 28 31 34 33 32 29 5d 28 62 46 2c 58 29 2c 59 26 62 47 29 2c 59 26 58 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 61 33 3d 64 5b 67 4c 28 31 35 35 34 29 5d 28 64 5b 67 4c 28 39 39 35 29 5d 28 62 42 28 61 33 2c 32 Data Ascii: )](bz,a3,a8),a0&a1^d[gL(980)](~a0,a2)),S[W]),U[W]);continue;case'6':a1=a0;continue;case'7':bJ=d[gL(696)](bK,a8,a6);continue;case'8':a6=d[gL(1435)](bE,a3,d[gL(545)](d[gL(995)](d[gL(1432)](bF,X),Y&bG),Y&X));continue;case'9':a3=d[gL(1554)](d[gL(995)](bB(a3,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.22	49176	172.67.189.16	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:04 UTC	934	OUT	GET /favicon.ico HTTP/1.1 Host: redirect-120685500130121.zerobot.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "109.0.5414.120" sec-ch-ua-platform-version: "0.1.0" sec-ch-ua-full-version-list: "Not_A Brand";v="99.0.0.0", "Google Chrome";v="109.0.5414.120", "Chromium";v="109.0.5414.120" sec-ch-ua-bitness: "64" sec-ch-ua-model: sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://redirect-120685500130121.zerobot.org/redirect?upn=b3ZNekEzYkxvSy9KdGhQQw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:05 UTC	831	IN	HTTP/1.1 404 Not Found Date: Mon, 18 Nov 2024 10:16:05 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=df%2F8fu3RiyO1yB3gyllZEacMqTMukUckFkOmc6AVueDzVr1oUL0%2FAr6ZgFtpkx4Ue7Indyifd3z3LtXDxUZG3AmkpHJ6omOYBy0tTLbSNZH4Tv4AEt62urJo82MOTs7CUqOTXV3e21jSXu3rihYM9P8LVXtoYzc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4733f75dae4868-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1900&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1512&delivery_rate=1498189&cwnd=251&unsent_bytes=0&cid=750483a2346b3054&ts=782&x=0"
2024-11-18 10:16:05 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-11-18 10:16:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.22	49175	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:04 UTC	604	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js?onload=clJo2&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Origin: https://redirect-120685500130121.zerobot.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:05 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8e4733f7585a46cb-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:05 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-11-18 10:16:05 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.22	49178	104.21.81.97	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:05 UTC	610	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1213075623:1731923031:IM7zHx7btM8cpvqoTXGBRT2jhn4ACFmouUGLaATwKkw/8e4733e18ee24790/yYXUjRHcmsMssvX_1rGjOZKXdjHe494ZESvPC9d8YNY-1731924961-1.2.1.1-42QdKm5Y4Wx7cA21XRK_vJ76MYaRBnV.oEG6TpYZxD2VhJhP4GEKtkunEohPFP88 HTTP/1.1 Host: redirect-120685500130121.zerobot.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:06 UTC	929	IN	HTTP/1.1 404 Not Found Date: Mon, 18 Nov 2024 10:16:05 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: yVKpneHNDTry/ElAFVspVVk46LXVp+vcgGM=$2OSUUAG2qkoA5FOC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mUXmtGvKJOrYv9wz5YOqAubIlb9hhe2quXQaNSMYfh%2F5Qw6QQVSFBQBBNHzxD6t4FbHctZ5%2BsWBLPliZoCCGOrr6LlbsgaxXaP%2B0SCSAvtoTIiobD3vRa%2B%2Bmwp5R%2ByZOu%2B8eK2y1E8RrIcyy3NOnBBFNmVx7sb4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4733fd691c316e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1295&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1188&delivery_rate=2162808&cwnd=222&unsent_bytes=0&cid=bb0a5c6cab204c79&ts=147&x=0"
2024-11-18 10:16:06 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.22	49179	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:06 UTC	765	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:06 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26427 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-11-18 10:16:06 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 34 37 33 33 66 65 39 65 33 66 36 62 34 63 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8e4733fe9e3f6b4c-DFWalt-svc: h3=":443"; ma=86400
2024-11-18 10:16:06 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d Data Ascii: enge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 Data Ascii: k .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-li
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 Data Ascii: ffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 Data Ascii: flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{he
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 Data Ascii: .rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justi
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c Data Ascii: text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.22	49180	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:06 UTC	412	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js?onload=clJo2&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:06 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8e4733feffbd46e6-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:06 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-11-18 10:16:06 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.22	49182	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:07 UTC	732	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e4733fe9e3f6b4c&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:07 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 123635 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8e473404fd38e7f7-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:07 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 65 73 74 Data Ascii: rnstile_overrun_description":"Stuck%20here%3F","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_verifying":"Verifying...","turnstile_feedback_description":"Send%20Feedback","turnstile_refresh":"Refresh","test
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 28 35 35 32 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 30 32 35 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 30 36 33 29 29 2f 38 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 35 32 38 29 29 2f 39 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 33 37 34 29 29 2f 31 30 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 36 34 38 37 31 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 33 34 38 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 67 4d 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 4d 3d 67 4c 2c 64 3d 7b 27 57 4d 58 65 55 27 3a 67 4d 28 31 34 35 32 29 Data Ascii: (552))/6+parseInt(gK(1025))/7*(parseInt(gK(1063))/8)+parseInt(gK(528))/9+-parseInt(gK(1374))/10,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,264871),eM=this\|\|self,eN=eM[gL(348)],eO=function(gM,d,e,f,g){return gM=gL,d={'WMXeU':gM(1452)
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 79 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 44 76 6b 77 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6e 53 5a 4d 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 78 61 44 6e 6c 27 3a 67 4d 28 37 31 39 29 2c 27 48 41 7a 6f 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 62 68 7a 48 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 57 49 59 52 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4f 4d 71 55 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 Data Ascii: yY':function(h,i){return h==i},'DvkwP':function(h,i){return h(i)},'nSZMG':function(h,i){return i===h},'xaDnl':gM(719),'HAzoh':function(h,i){return h<i},'bhzHr':function(h,i){return hi},'WIYRQ':function(h,i){return h-i},'OMqUw':function(h,i){return ih},'
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 35 37 35 29 5d 28 4c 2c 64 5b 67 51 28 39 34 36 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 67 51 28 31 31 32 31 29 5d 28 64 5b 67 51 28 31 32 33 37 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 67 51 28 31 34 37 31 29 5d 28 30 29 2c 43 3d 30 3b 64 5b 67 51 28 38 30 36 29 5d 28 38 2c 43 29 3b 4b 3d 64 5b 67 51 28 31 30 38 37 29 5d 28 4b 3c 3c 31 2c 31 2e 34 37 26 50 29 2c 64 5b 67 51 28 31 33 31 38 29 5d 28 4c 2c 64 5b 67 51 28 39 34 36 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 67 51 28 31 31 32 31 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 64 5b 67 51 28 31 31 34 33 29 5d 28 67 51 28 31 33 32 37 29 2c 67 51 28 31 33 39 32 29 29 Data Ascii: 575)](L,d[gQ(946)](o,1))?(L=0,J[gQ(1121)](d[gQ(1237)](s,K)),K=0):L++,C++);for(P=F[gQ(1471)](0),C=0;d[gQ(806)](8,C);K=d[gQ(1087)](K<<1,1.47&P),d[gQ(1318)](L,d[gQ(946)](o,1))?(L=0,J[gQ(1121)](s(K)),K=0):L++,P>>=1,C++);}else if(d[gQ(1143)](gQ(1327),gQ(1392))
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 47 3d 4d 61 74 68 5b 67 51 28 31 31 38 35 29 5d 28 32 2c 49 29 2c 49 2b 2b 29 2c 64 65 6c 65 74 65 20 45 5b 46 5d 7d 65 6c 73 65 20 66 6f 72 28 50 3d 44 5b 46 5d 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 67 51 28 31 36 38 34 29 5d 28 4b 3c 3c 31 2c 50 26 31 2e 33 36 29 2c 4c 3d 3d 6f 2d 31 3f 28 4c 3d 30 2c 4a 5b 67 51 28 31 31 32 31 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 47 2d 2d 2c 30 3d 3d 47 26 26 49 2b 2b 7d 66 6f 72 28 50 3d 32 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 67 51 28 35 34 38 29 5d 28 64 5b 67 51 28 39 32 33 29 5d 28 4b 2c 31 29 2c 64 5b 67 51 28 39 34 38 29 5d 28 50 2c 31 29 29 2c 64 5b 67 51 28 35 38 32 29 5d 28 4c 2c 6f 2d 31 29 3f 28 4c 3d 30 2c 4a 5b 67 51 28 31 31 32 31 29 5d 28 73 28 4b 29 Data Ascii: G=Math[gQ(1185)](2,I),I++),delete E[F]}else for(P=D[F],C=0;C<I;K=d[gQ(1684)](K<<1,P&1.36),L==o-1?(L=0,J[gQ(1121)](s(K)),K=0):L++,P>>=1,C++);G--,0==G&&I++}for(P=2,C=0;C<I;K=d[gQ(548)](d[gQ(923)](K,1),d[gQ(948)](P,1)),d[gQ(582)](L,o-1)?(L=0,J[gQ(1121)](s(K)
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 28 31 31 38 35 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 55 28 31 32 33 37 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 55 28 39 37 37 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 64 5b 67 55 28 31 34 38 33 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 55 28 31 31 38 35 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 67 55 28 34 39 32 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 55 28 31 35 39 32 29 5d 28 64 5b 67 55 28 31 36 39 36 Data Ascii: (1185)](2,8),F=1;K!=F;L=H&G,H>>=1,0==H&&(H=j,G=d[gU(1237)](o,I++)),J\|=d[gU(977)](0<L?1:0,F),F<<=1);s[B++]=e(J),M=d[gU(1483)](B,1),x--;break;case 1:for(J=0,K=Math[gU(1185)](2,16),F=1;d[gU(492)](F,K);L=G&H,H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[gU(1592)](d[gU(1696
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 31 29 5d 28 53 74 72 69 6e 67 5b 69 37 28 31 33 31 37 29 5d 28 68 5b 69 37 28 35 30 34 29 5d 28 28 32 35 35 2e 34 39 26 6d 29 2d 6a 2d 68 5b 69 37 28 39 34 33 29 5d 28 69 2c 36 35 35 33 35 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 69 37 28 34 34 31 29 5d 28 27 27 29 7d 2c 65 4d 5b 67 4c 28 35 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 39 2c 64 2c 65 2c 66 2c 67 29 7b 69 39 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 69 39 28 38 35 35 29 5d 3d 69 39 28 31 34 35 32 29 2c 64 5b 69 39 28 31 36 37 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 64 5b 69 39 28 31 36 37 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b Data Ascii: 1)](String[i7(1317)](h[i7(504)]((255.49&m)-j-h[i7(943)](i,65535),65535)%255)));return k[i7(441)]('')},eM[gL(523)]=function(i9,d,e,f,g){i9=gL,d={},d[i9(855)]=i9(1452),d[i9(1674)]=function(h,i){return h*i},d[i9(1678)]=function(h,i){return h<<i},e=d,f=1,g=e[
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 28 31 34 37 31 29 5d 28 2b 2b 46 29 29 3b 48 5b 69 62 28 31 31 32 31 29 5d 28 73 5b 69 62 28 31 33 31 37 29 5d 28 69 5b 69 62 28 31 34 33 35 29 5d 28 69 5b 69 62 28 31 31 32 32 29 5d 28 69 5b 69 62 28 35 34 34 29 5d 28 4a 2c 32 35 35 29 2c 47 29 2d 46 25 36 35 35 33 35 2b 36 35 35 33 35 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 48 5b 69 62 28 34 34 31 29 5d 28 27 27 29 7d 65 6c 73 65 20 66 5b 69 62 28 33 35 33 29 5d 3d 4a 53 4f 4e 5b 69 62 28 31 32 39 36 29 5d 28 66 5b 69 62 28 33 35 33 29 5d 2c 4f 62 6a 65 63 74 5b 69 62 28 35 33 37 29 5d 28 66 5b 69 62 28 33 35 33 29 5d 29 29 7d 65 6c 73 65 20 66 5b 69 62 28 33 35 33 29 5d 3d 4a 53 4f 4e 5b 69 62 28 31 32 39 36 29 5d 28 66 5b 69 62 28 33 35 33 29 5d 29 3b 69 66 28 6b 3d 68 7c 7c 69 62 28 35 31 33 Data Ascii: (1471)](++F));H[ib(1121)](s[ib(1317)](i[ib(1435)](i[ib(1122)](i[ib(544)](J,255),G)-F%65535+65535,255))));return H[ib(441)]('')}else f[ib(353)]=JSON[ib(1296)](f[ib(353)],Object[ib(537)](f[ib(353)]))}else f[ib(353)]=JSON[ib(1296)](f[ib(353)]);if(k=h\|\|ib(513
2024-11-18 10:16:07 UTC	1369	IN	Data Raw: 38 29 29 29 26 26 28 65 5b 69 64 28 31 33 30 33 29 5d 28 69 64 28 34 36 39 29 2c 65 5b 69 64 28 31 34 38 34 29 5d 29 3f 65 5b 69 64 28 35 36 38 29 5d 3d 65 5b 69 64 28 31 36 33 30 29 5d 28 66 2c 69 64 28 31 34 34 35 29 29 3a 28 6a 3d 64 5b 69 64 28 37 30 35 29 5d 5b 69 64 28 36 35 38 29 5d 28 27 5c 6e 27 29 2c 65 5b 69 64 28 31 32 33 30 29 5d 28 6a 5b 69 64 28 36 31 30 29 5d 2c 31 29 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 69 64 28 31 35 39 34 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 69 64 28 31 32 30 35 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 69 3d 65 5b 69 64 28 33 38 38 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 Data Ascii: 8)))&&(e[id(1303)](id(469),e[id(1484)])?e[id(568)]=e[id(1630)](f,id(1445)):(j=d[id(705)][id(658)]('\n'),e[id(1230)](j[id(610)],1))&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][id(1594)](k),l&&(g=l[1],h=e[id(1205)](parseInt,l[2],10),i=e[id(388)](parseInt,l[3],10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.22	49183	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:07 UTC	744	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:07 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8e473404faa8e916-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.22	49186	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:08 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:08 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:08 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8e47340bffb6e6fe-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.22	49187	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:08 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e4733fe9e3f6b4c&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:08 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119532 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8e47340f5a3d3476-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:08 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 Data Ascii: escription":"Send%20Feedback","turnstile_footer_privacy":"Privacy","turnstile_feedback_report":"Having%20trouble%3F","turnstile_footer_terms":"Terms","human_button_text":"Verify%20you%20are%20human","invalid_domain":"Invalid%20domain.%20Contact%20the%20Si
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 28 35 38 38 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 37 35 31 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 38 32 35 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 39 33 30 29 29 2f 39 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 37 36 33 29 29 2f 31 30 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 31 35 33 32 31 35 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 38 38 37 29 5d 2c 65 4d 5b 67 4c 28 31 33 39 36 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4c 28 31 38 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 32 29 7b 69 66 28 68 32 3d 67 4c 2c 65 4d 5b 68 Data Ascii: (588))/6+-parseInt(gK(751))/7+-parseInt(gK(1825))/8*(parseInt(gK(930))/9)+parseInt(gK(1763))/10,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,153215),eM=this\|\|self,eN=eM[gL(887)],eM[gL(1396)]=![],eM[gL(1823)]=function(h2){if(h2=gL,eM[h
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 5d 5b 68 65 28 31 33 33 34 29 5d 2c 27 63 6f 64 65 27 3a 68 65 28 31 30 32 32 29 2c 27 72 63 56 27 3a 65 4d 5b 68 65 28 36 32 37 29 5d 5b 68 65 28 39 33 32 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4c 28 35 30 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 68 68 2c 69 2c 6a 2c 46 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 69 3d 28 68 68 3d 67 4c 2c 7b 27 79 46 6b 43 5a 27 3a 68 68 28 34 34 38 29 2c 27 75 6b 74 72 46 27 3a 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 45 28 29 7d 2c 27 75 4a 48 55 67 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 46 21 3d 3d 45 7d 2c 27 42 56 6b 77 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 7c 7c 46 7d 2c 27 6e Data Ascii: ][he(1334)],'code':he(1022),'rcV':eM[he(627)][he(932)]},'*'))},g)},eM[gL(503)]=function(f,g,h,hh,i,j,F,k,l,m,n,o,s,x,B,C,D){i=(hh=gL,{'yFkCZ':hh(448),'uktrF':function(E){return E()},'uJHUg':function(E,F){return F!==E},'BVkwM':function(E,F){return E\|\|F},'n
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 31 35 38 29 5d 3d 6a 2c 42 2e 63 63 3d 67 2c 42 5b 68 68 28 38 31 33 29 5d 3d 6b 2c 42 5b 68 68 28 31 34 31 31 29 5d 3d 6f 2c 43 3d 4a 53 4f 4e 5b 68 68 28 31 35 35 37 29 5d 28 42 29 2c 44 3d 67 49 5b 68 68 28 31 31 36 31 29 5d 28 43 29 5b 68 68 28 31 35 35 39 29 5d 28 27 2b 27 2c 69 5b 68 68 28 31 33 31 37 29 5d 29 2c 73 5b 68 68 28 33 37 35 29 5d 28 69 5b 68 68 28 35 37 31 29 5d 28 69 5b 68 68 28 35 30 37 29 5d 28 27 76 5f 27 2c 65 4d 5b 68 68 28 36 32 37 29 5d 5b 68 68 28 31 37 38 37 29 5d 29 2b 27 3d 27 2c 44 29 29 7d 63 61 74 63 68 28 46 29 7b 7d 7d 2c 65 4d 5b 67 4c 28 31 36 38 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 69 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 68 69 3d 67 4c 2c 65 3d 7b 27 72 47 79 6c 69 27 3a 68 Data Ascii: 158)]=j,B.cc=g,B[hh(813)]=k,B[hh(1411)]=o,C=JSON[hh(1557)](B),D=gI[hh(1161)](C)[hh(1559)]('+',i[hh(1317)]),s[hh(375)](i[hh(571)](i[hh(507)]('v_',eM[hh(627)][hh(1787)])+'=',D))}catch(F){}},eM[gL(1686)]=function(d,hi,e,f,g,h,i,j,k,l,m){if(hi=gL,e={'rGyli':h
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 63 2c 69 6c 2c 64 2c 65 29 7b 69 6c 3d 67 4c 2c 64 3d 7b 27 61 75 6b 70 59 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 21 3d 3d 67 7d 2c 27 6d 53 73 47 48 27 3a 69 6c 28 31 36 35 32 29 2c 27 4e 65 76 78 70 27 3a 69 6c 28 31 36 30 30 29 2c 27 49 78 6d 74 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 47 6d 61 59 53 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 4a 4a 58 75 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 66 7d 2c 27 54 61 46 62 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 69 6c 28 36 32 36 29 5d Data Ascii: nction(c,il,d,e){il=gL,d={'aukpY':function(f,g){return f!==g},'mSsGH':il(1652),'Nevxp':il(1600),'IxmtL':function(f,g,h){return f(g,h)},'GmaYS':function(f,g){return f===g},'JJXuk':function(f,g){return g===f},'TaFbk':function(f,g){return f(g)}},e=c[il(626)]
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 28 31 36 34 34 29 5d 3d 27 6f 27 2c 67 79 5b 67 4c 28 35 31 39 29 5d 3d 27 73 27 2c 67 79 5b 67 4c 28 35 34 33 29 5d 3d 27 75 27 2c 67 79 5b 67 4c 28 31 32 39 33 29 5d 3d 27 7a 27 2c 67 79 5b 67 4c 28 39 32 30 29 5d 3d 27 6e 27 2c 67 79 5b 67 4c 28 31 36 34 36 29 5d 3d 27 49 27 2c 67 79 5b 67 4c 28 36 33 37 29 5d 3d 27 62 27 2c 67 7a 3d 67 79 2c 65 4d 5b 67 4c 28 31 37 33 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 6a 44 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 6a 44 3d 67 4c 2c 6f 3d 7b 27 55 53 6a 57 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 72 4d 77 4d 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 43 56 61 50 57 27 Data Ascii: (1644)]='o',gy[gL(519)]='s',gy[gL(543)]='u',gy[gL(1293)]='z',gy[gL(920)]='n',gy[gL(1646)]='I',gy[gL(637)]='b',gz=gy,eM[gL(1738)]=function(g,h,i,j,jD,o,x,B,C,D,E,F){if(jD=gL,o={'USjWn':function(G,H){return G===H},'rMwMl':function(G,H){return H===G},'CVaPW'
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 5b 6b 5d 3d 68 5b 69 5b 6a 5d 5d 5b 6a 47 28 38 32 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 6d 7d 29 7d 2c 65 4d 5b 67 4c 28 31 31 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 67 48 28 63 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 67 46 28 67 47 28 63 29 29 7d 7d 2c 67 49 3d 66 75 6e 63 74 69 6f 6e 28 6a 53 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 6a 53 3d 67 4c 2c 64 3d 7b 27 79 4a 54 41 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 69 42 45 78 5a 27 3a 6a 53 28 31 37 33 34 29 2c 27 67 74 79 69 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4f 55 70 6c 51 27 3a 66 75 6e Data Ascii: [k]=h[i[j]][jG(825)](function(m){return'o.'+m})},eM[gL(1159)]=function(c){try{return gH(c)}catch(e){return gF(gG(c))}},gI=function(jS,d,e,f,g){return jS=gL,d={'yJTAN':function(h,i){return h<i},'iBExZ':jS(1734),'gtyiC':function(h,i){return h-i},'OUplQ':fun
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4c 55 65 56 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 48 70 4c 44 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 66 42 4d 51 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 57 50 46 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 77 47 43 69 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 44 4b 56 70 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 6a 79 56 56 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: ':function(h,i){return h(i)},'LUeVy':function(h,i){return h<i},'HpLDS':function(h,i){return h!=i},'fBMQh':function(h,i){return h(i)},'oWPFM':function(h,i){return h-i},'wGCiD':function(h,i){return i===h},'DKVph':function(h,i){return h+i},'jyVVe':function(h
2024-11-18 10:16:08 UTC	1369	IN	Data Raw: 48 3d 64 5b 6a 56 28 31 36 32 33 29 5d 28 48 2c 31 29 7c 4d 26 31 2e 35 32 2c 49 3d 3d 64 5b 6a 56 28 31 38 33 31 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 56 28 39 38 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 6a 56 28 31 36 32 35 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 43 21 3d 3d 27 27 29 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 56 28 36 32 33 29 5d 5b 6a 56 28 31 35 39 31 29 5d 5b 6a 56 28 37 33 35 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 6a 56 28 31 36 34 35 29 5d 28 30 29 29 7b 69 66 28 64 5b 6a 56 28 31 33 34 39 29 5d 28 64 5b 6a 56 28 37 31 31 29 5d 2c 6a 56 Data Ascii: H=d[jV(1623)](H,1)\|M&1.52,I==d[jV(1831)](j,1)?(I=0,G[jV(980)](o(H)),H=0):I++,M>>=1,s++);C=(D--,0==D&&(D=Math[jV(1625)](2,F),F++),x[L]=E++,String(K))}if(C!==''){if(Object[jV(623)][jV(1591)][jV(735)](B,C)){if(256>C[jV(1645)](0)){if(d[jV(1349)](d[jV(711)],jV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.22	49188	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:08 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/796757696:1731923123:q3MLDS30_WAumj0Jg-MuaUKDLVNQf7CvdHGorhcb5i8/8e4733fe9e3f6b4c/u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3908 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 CF-Challenge: u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:08 UTC	3908	OUT	Data Raw: 76 5f 38 65 34 37 33 33 66 65 39 65 33 66 36 62 34 63 3d 47 44 4b 68 63 68 59 68 58 68 4e 68 31 68 72 4c 67 41 4c 67 63 50 75 63 75 70 54 52 75 54 67 75 50 66 70 71 44 35 67 56 66 67 4d 50 4d 71 5a 4b 75 61 4d 66 65 69 59 67 71 30 33 68 67 63 77 48 53 67 5a 46 35 75 37 67 4e 50 54 70 7a 69 6c 67 54 53 67 6f 35 75 56 59 4d 67 50 35 67 52 71 35 54 63 67 74 47 4a 43 36 37 38 68 65 4a 4f 53 4e 67 53 63 75 65 67 55 44 4d 31 53 71 62 6e 75 4e 39 68 6a 44 63 47 47 67 4d 4f 56 62 67 66 25 32 62 67 67 53 46 4f 4b 54 65 35 66 75 67 67 73 73 4d 36 4e 54 55 4b 4b 54 66 72 55 6d 46 56 56 2b 4c 35 68 24 68 58 73 6a 35 75 38 77 41 30 6e 55 75 68 67 79 68 66 4e 67 66 4b 67 50 6c 68 67 4f 38 65 57 67 51 77 38 67 4d 63 30 61 4d 35 35 67 47 72 45 67 34 63 6b 67 75 4a 59 67 Data Ascii: v_8e4733fe9e3f6b4c=GDKhchYhXhNh1hrLgALgcPucupTRuTguPfpqD5gVfgMPMqZKuaMfeiYgq03hgcwHSgZF5u7gNPTpzilgTSgo5uVYMgP5gRq5TcgtGJC678heJOSNgScuegUDM1SqbnuN9hjDcGGgMOVbgf%2bggSFOKTe5fuggssM6NTUKKTfrUmFVV+L5h$hXsj5u8wA0nUuhgyhfNgfKgPlhgO8eWgQw8gMc0aM55gGrEg4ckguJYg
2024-11-18 10:16:09 UTC	714	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:09 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 80472 Connection: close cf-chl-gen: 8uyIHwtmZSgwxpGcR4wB0pgX2s4S5R7yGL4hIzCb0MrbB85us7jioyZ969t5fxDVRgH+OkC75f1SZzpfnT8NZEh2LXDfPM26BqLL/Y6HCwCm05hqSLT+Sz5aGoMkqUnVXLGaxZrwOE408023UwPlI35T2hCnrzj8XmN2RPg3RsoIdoxsbyUSHp8p9IU2oMdFKOfDiA88lFyymRIY9oJH1IMA5Dne9zYEjUCHrkTVO0zHGePn7G7QD8qwVNXCAfjt/qQ2P6t9cE4OPkLaFKeLCzbMXc/ZB2s7NimzzzcMlRi3qPxnjnpH0BPD0j/2xCS7iPBDqnUM3lDe9o7X0mHlMwDTSFUcn5KbRR62OsdbcmovRPqmoefvAjVjYXFDf72vxyXPx8id+4RCeWM11FfmXmn4BLOfIlfwqKtHUCKHb3chPmFkhqCa8ZAv8RgU+fTYRadAgnhtO4VP4mbd$dbzVabBlLrJLLqSQ Server: cloudflare CF-RAY: 8e4734101cf9485f-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:09 UTC	655	IN	Data Raw: 6a 34 4b 49 66 34 75 55 54 48 35 64 68 35 65 52 68 35 6d 50 6c 70 5a 52 55 36 61 70 61 45 36 6d 6d 5a 2b 57 6f 71 74 6a 6c 5a 4a 6f 6c 6e 64 69 6e 57 52 35 58 37 65 71 73 4b 65 7a 76 48 53 6d 6f 33 71 6e 69 48 4f 76 64 59 70 77 63 58 4a 7a 79 72 62 49 64 37 65 38 77 4c 71 2f 78 63 71 2b 77 39 58 61 67 36 47 46 78 39 6e 50 33 74 66 51 32 75 48 68 79 71 44 4f 72 58 32 55 6c 5a 61 58 37 74 72 73 6d 2b 2f 69 37 4f 50 53 35 76 50 34 36 66 6a 36 70 38 57 70 36 2f 33 7a 41 2f 76 30 2f 67 59 47 37 73 58 79 30 61 47 69 75 62 71 37 76 41 63 46 76 38 67 42 42 67 6f 45 43 51 38 55 43 41 30 66 4a 4e 72 2b 46 69 54 38 34 64 4c 77 38 66 4c 57 35 2b 48 5a 4e 73 58 47 33 64 37 66 34 4f 48 69 34 2b 51 6c 4b 69 34 6f 4c 54 4d 34 4c 44 46 44 53 50 41 50 38 6b 2f 65 39 66 62 Data Ascii: j4KIf4uUTH5dh5eRh5mPlpZRU6apaE6mmZ+WoqtjlZJolndinWR5X7eqsKezvHSmo3qniHOvdYpwcXJzyrbId7e8wLq/xcq+w9Xag6GFx9nP3tfQ2uHhyqDOrX2UlZaX7trsm+/i7OPS5vP46fj6p8Wp6/3zA/v0/gYG7sXy0aGiubq7vAcFv8gBBgoECQ8UCA0fJNr+FiT84dLw8fLW5+HZNsXG3d7f4OHi4+QlKi4oLTM4LDFDSPAP8k/e9fb
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 7a 61 6e 5a 2f 4e 32 6c 75 63 6d 78 78 64 33 78 77 67 59 4f 49 51 32 2b 44 63 49 74 50 52 79 59 39 50 6a 39 41 51 55 4a 44 52 45 56 47 52 30 69 5a 6d 71 4f 4e 59 57 68 50 70 35 71 67 6c 36 4f 73 5a 4a 61 62 6e 35 6d 65 70 4b 6d 64 72 72 43 31 63 4b 61 4e 6d 61 2b 30 72 5a 78 32 56 57 78 74 62 6d 39 77 63 58 4a 7a 64 48 56 32 64 38 2f 53 30 37 48 51 6a 5a 68 2f 31 38 72 51 78 39 50 63 6c 4d 62 4c 7a 38 6e 4f 31 4e 6e 4e 33 75 44 6c 6f 4f 44 59 6f 59 43 58 6d 4a 6d 61 6d 35 79 64 6e 70 2b 67 6f 61 4c 6e 37 74 66 63 38 37 37 44 71 67 50 31 2b 2f 4c 2b 43 4c 2f 32 2f 65 62 72 41 38 33 45 6f 36 53 37 76 4c 32 2b 76 38 44 42 77 73 50 45 78 63 62 34 38 66 48 77 41 4e 2f 6e 7a 67 38 55 47 42 49 58 48 53 49 57 47 79 30 79 36 41 30 47 42 67 55 55 38 2b 33 4d 34 2b Data Ascii: zanZ/N2lucmxxd3xwgYOIQ2+DcItPRyY9Pj9AQUJDREVGR0iZmqONYWhPp5qgl6OsZJabn5mepKmdrrC1cKaNma+0rZx2VWxtbm9wcXJzdHV2d8/S07HQjZh/18rQx9PclMbLz8nO1NnN3uDloODYoYCXmJmam5ydnp+goaLn7tfc877DqgP1+/L+CL/2/ebrA83Eo6S7vL2+v8DBwsPExcb48fHwAN/nzg8UGBIXHSIWGy0y6A0GBgUU8+3M4+
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 65 6e 46 39 68 6a 35 77 64 58 6c 7a 65 48 36 44 64 34 69 4b 6a 30 71 41 6b 70 68 36 5a 31 56 50 4c 6b 56 47 52 30 68 4a 53 6b 74 4d 54 55 35 50 55 48 53 45 6f 49 69 6f 62 58 46 59 73 4b 4f 70 6f 4b 79 31 62 5a 2b 6b 71 4b 4b 6e 72 62 4b 6d 74 37 6d 2b 65 59 2b 66 75 36 50 44 69 48 35 64 64 48 56 32 64 33 68 35 65 6e 74 38 66 58 35 2f 71 4d 6d 70 73 4a 69 66 68 74 37 52 31 38 37 61 34 35 76 4e 30 74 62 51 31 64 76 67 31 4f 58 6e 37 4b 66 43 34 38 50 4b 73 71 75 4b 6f 61 4b 6a 70 4b 57 6d 70 36 69 70 71 71 75 73 35 76 77 41 32 63 4c 4d 73 77 7a 2b 42 66 73 49 45 63 6a 36 41 41 54 39 41 77 6b 4f 41 68 4d 56 47 74 51 42 46 78 72 7a 33 4e 69 33 7a 73 2f 51 30 64 4c 54 31 4e 58 57 31 39 6a 5a 49 53 73 41 4d 69 4c 77 2b 75 45 36 4c 54 4d 71 4e 6a 2f 32 4b 53 34 Data Ascii: enF9hj5wdXlzeH6Dd4iKj0qAkph6Z1VPLkVGR0hJSktMTU5PUHSEoIiobXFYsKOpoKy1bZ+kqKKnrbKmt7m+eY+fu6PDiH5ddHV2d3h5ent8fX5/qMmpsJifht7R187a45vN0tbQ1dvg1OXn7KfC48PKsquKoaKjpKWmp6ipqqus5vwA2cLMswz+BfsIEcj6AAT9AwkOAhMVGtQBFxrz3Ni3zs/Q0dLT1NXW19jZISsAMiLw+uE6LTMqNj/2KS4
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 58 64 35 57 48 64 36 67 48 35 31 51 33 32 50 6b 48 71 4a 68 5a 71 41 52 49 4e 47 6b 6f 32 69 57 49 36 55 6a 71 42 79 6e 35 57 58 64 4b 68 64 6e 35 75 77 57 56 39 62 70 36 4b 33 69 36 57 76 61 32 78 6b 61 6d 5a 35 66 58 2b 6e 68 6c 5a 74 62 6d 39 77 63 58 4a 7a 64 48 56 32 64 33 6a 57 5a 47 56 38 66 58 35 2f 67 49 47 43 67 34 53 46 68 6f 66 61 7a 74 37 67 33 74 75 4f 30 65 54 67 30 35 76 6d 32 75 71 67 73 34 4f 61 6d 35 79 64 6e 70 2b 67 6f 51 43 4e 6a 71 57 6d 70 36 69 70 71 71 75 73 37 50 48 31 37 2f 54 36 41 50 50 34 43 78 44 47 32 67 34 51 36 76 66 53 76 39 33 42 79 71 33 45 78 63 62 48 79 4d 6e 4b 79 38 7a 4e 7a 73 38 56 49 52 59 70 49 68 73 6c 4c 4f 59 63 4b 69 41 32 78 39 37 66 34 4f 48 69 34 2b 54 6c 35 75 66 6f 36 66 44 78 37 44 49 2b 4d 30 59 2f Data Ascii: Xd5WHd6gH51Q32PkHqJhZqARINGko2iWI6UjqByn5WXdKhdn5uwWV9bp6K3i6Wva2xkamZ5fX+nhlZtbm9wcXJzdHV2d3jWZGV8fX5/gIGCg4SFhofazt7g3tuO0eTg05vm2uqgs4Oam5ydnp+goQCNjqWmp6ipqqus7PH17/T6APP4CxDG2g4Q6vfSv93Byq3ExcbHyMnKy8zNzs8VIRYpIhslLOYcKiA2x97f4OHi4+Tl5ufo6fDx7DI+M0Y/
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 56 47 4a 54 77 39 50 6a 39 41 51 55 4a 44 52 45 56 47 52 34 79 59 6a 61 43 5a 6b 70 79 6a 58 70 6d 58 6c 4a 68 6a 6d 61 61 6c 71 5a 75 74 6f 59 47 74 6f 72 57 75 70 37 47 34 6c 62 57 36 73 62 32 7a 75 72 70 31 73 72 36 7a 78 72 2b 34 77 73 6d 45 75 63 65 39 30 34 53 49 5a 33 35 2f 67 49 47 43 67 34 53 46 68 6f 65 49 69 65 48 55 32 74 48 64 35 70 37 51 31 64 6e 54 32 4e 37 6a 31 2b 6a 71 37 36 71 2f 36 38 54 6c 78 4c 61 78 39 66 72 72 2b 51 4c 63 37 2f 66 78 38 41 50 2b 41 37 6d 35 42 77 6b 50 41 2f 79 2f 77 73 6a 2b 44 41 73 50 41 52 4d 48 35 68 4d 49 47 78 51 4e 46 78 37 36 47 79 41 58 49 78 6b 67 49 4e 6f 72 48 69 51 62 4a 7a 44 6e 47 68 38 6a 48 53 49 6f 4c 53 45 79 4e 44 6e 7a 43 54 55 4f 4c 77 34 41 2b 6a 39 45 4e 55 4e 4c 4a 6a 6c 42 4f 7a 70 4d 53 Data Ascii: VGJTw9Pj9AQUJDREVGR4yYjaCZkpyjXpmXlJhjmaalqZutoYGtorWup7G4lbW6sb2zurp1sr6zxr+4wsmEuce904SIZ35/gIGCg4SFhoeIieHU2tHd5p7Q1dnT2N7j1+jq76q/68TlxLax9frr+QLc7/fx8AP+A7m5BwkPA/y/wsj+DAsPARMH5hMIGxQNFx76GyAXIxkgINorHiQbJzDnGh8jHSIoLSEyNDnzCTUOLw4A+j9ENUNLJjlBOzpMS
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 41 51 55 4a 44 52 45 56 47 52 30 68 4a 53 6b 74 4d 54 55 36 6c 6b 61 4e 53 6d 4b 61 6e 70 61 6d 42 70 36 43 71 69 35 2b 6f 70 4b 4f 31 59 6f 42 6b 76 4b 2b 31 72 4c 6a 42 65 62 43 67 70 36 61 45 65 62 66 4a 75 63 50 4b 68 63 71 2b 75 38 37 4c 79 34 65 61 61 6f 47 43 67 34 53 46 68 6f 65 49 69 59 71 4c 6a 49 32 4f 6a 35 43 52 6b 70 4f 55 37 4e 2f 6c 33 4f 6a 78 71 63 54 6a 36 75 76 73 74 4b 72 6f 39 76 66 31 2b 64 48 33 38 50 72 62 37 2f 6a 30 38 77 61 2b 73 2f 66 39 2b 51 77 52 78 62 72 43 45 68 44 4c 43 41 49 51 42 78 41 4b 47 4d 33 51 34 37 50 4b 79 38 7a 4e 7a 73 2f 51 30 64 4c 54 31 4e 58 57 31 39 6a 5a 4f 4f 66 63 37 75 37 6f 2b 38 76 69 34 2b 54 6c 35 75 66 6f 36 65 72 72 37 4f 30 34 4e 76 68 4a 50 45 49 35 52 55 34 47 48 43 55 68 4d 69 77 50 44 56 Data Ascii: AQUJDREVGR0hJSktMTU6lkaNSmKanpamBp6Cqi5+opKO1YoBkvK+1rLjBebCgp6aEebfJucPKhcq+u87Ly4eaaoGCg4SFhoeIiYqLjI2Oj5CRkpOU7N/l3OjxqcTj6uvstKro9vf1+dH38Prb7/j08wa+s/f9+QwRxbrCEhDLCAIQBxAKGM3Q47PKy8zNzs/Q0dLT1NXW19jZOOfc7u7o+8vi4+Tl5ufo6err7O04NvhJPEI5RU4GHCUhMiwPDV
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 52 30 68 4a 53 6b 74 4d 54 5a 65 56 57 4b 69 62 6f 5a 69 6b 72 57 56 37 68 49 43 52 69 32 35 73 74 71 47 4a 72 6e 74 73 62 4c 57 33 75 4c 69 38 76 38 47 37 74 38 4c 45 75 72 57 41 74 38 54 45 79 38 48 48 7a 37 7a 51 78 73 33 4e 68 34 71 4c 67 39 39 76 68 6f 65 49 69 59 71 4c 6a 49 32 4f 6a 35 43 52 6b 70 4f 55 6c 65 33 67 35 74 33 70 38 71 72 77 34 2f 50 55 36 75 2f 6f 38 2f 72 36 72 2b 37 2b 2b 4f 34 42 39 76 33 39 75 4c 71 79 44 35 36 31 74 72 65 34 75 62 71 37 76 4c 32 2b 76 38 44 42 77 73 50 45 78 63 62 48 79 43 45 55 47 68 45 64 4a 74 33 38 2b 66 51 61 4a 4f 6e 65 34 50 50 44 32 74 76 63 33 64 37 66 34 4f 48 69 34 2b 54 6c 35 75 66 6f 36 55 6a 33 37 50 37 2b 41 41 48 36 44 74 33 30 39 66 62 33 2b 50 6e 36 2b 2f 7a 39 2f 67 42 65 52 30 39 58 53 6d 48 Data Ascii: R0hJSktMTZeVWKiboZikrWV7hICRi25stqGJrntsbLW3uLi8v8G7t8LEurWAt8TEy8HHz7zQxs3Nh4qLg99vhoeIiYqLjI2Oj5CRkpOUle3g5t3p8qrw4/PU6u/o8/r6r+7++O4B9v39uLqyD561tre4ubq7vL2+v8DBwsPExcbHyCEUGhEdJt38+fQaJOne4PPD2tvc3d7f4OHi4+Tl5ufo6Uj37P7+AAH6Dt309fb3+Pn6+/z9/gBeR09XSmH
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 4a 71 59 6c 70 5a 53 6d 71 4f 61 71 56 65 6e 70 32 46 6b 52 6c 31 65 58 32 42 68 59 6d 4e 6b 5a 57 5a 6e 61 4c 7a 42 74 4d 43 77 74 6e 65 76 72 4c 47 75 68 62 4b 7a 67 48 6a 55 5a 48 74 38 66 58 35 2f 67 49 47 43 67 34 53 46 68 6f 65 49 69 59 72 4f 7a 65 44 54 6c 73 66 6d 77 63 66 48 36 71 79 65 73 6f 4f 61 6d 35 79 64 33 65 4c 6d 34 4f 58 72 38 4f 54 70 2b 77 47 33 32 2f 49 42 32 62 36 36 75 38 79 79 6e 62 53 31 74 72 66 33 2f 41 48 36 41 41 59 4c 2f 67 51 57 47 2f 34 45 43 51 30 48 44 42 49 58 43 78 41 69 4a 39 30 43 47 53 63 41 35 42 50 57 39 4e 67 31 78 4e 76 63 33 64 37 66 34 4f 48 69 46 78 6f 61 49 54 4c 38 42 4f 72 79 49 42 46 4a 45 7a 6b 31 48 6a 35 4d 52 6b 6b 63 52 51 73 4f 49 45 73 76 48 42 30 49 44 75 77 45 42 51 59 48 43 41 6b 4b 43 31 67 2b Data Ascii: JqYlpZSmqOaqVenp2FkRl1eX2BhYmNkZWZnaLzBtMCwtnevrLGuhbKzgHjUZHt8fX5/gIGCg4SFhoeIiYrOzeDTlsfmwcfH6qyesoOam5yd3eLm4OXr8OTp+wG32/IB2b66u8yynbS1trf3/AH6AAYL/gQWG/4ECQ0HDBIXCxAiJ90CGScA5BPW9Ng1xNvc3d7f4OHiFxoaITL8BOryIBFJEzk1Hj5MRkkcRQsOIEsvHB0IDuwEBQYHCAkKC1g+
2024-11-18 10:16:09 UTC	1369	IN	Data Raw: 4b 55 6d 5a 32 58 6e 4b 4b 6e 6d 36 79 75 73 32 36 6b 71 71 2b 46 74 61 2b 62 73 62 61 76 75 73 48 42 6b 37 32 7a 77 4d 66 42 79 4c 72 49 76 4c 78 35 6d 58 76 54 78 73 7a 44 7a 39 69 51 77 73 66 4c 78 63 72 51 31 63 6e 61 33 4f 47 63 30 74 6a 64 73 2b 50 64 79 64 2f 6b 33 65 6a 76 37 38 48 72 34 65 37 31 37 2f 62 6f 39 75 72 71 70 38 4b 70 75 73 61 57 72 61 36 76 73 50 44 31 2b 66 50 34 2f 67 54 33 2f 41 38 55 79 76 48 6c 44 65 6b 46 30 73 50 68 78 52 34 52 46 77 34 61 49 39 6f 4e 45 68 59 51 46 52 73 67 46 43 55 6e 4c 4f 59 4f 41 69 6b 47 49 65 37 66 41 4f 45 36 4c 54 4d 71 4e 6a 2f 32 4b 53 34 79 4c 44 45 33 50 44 42 42 51 30 67 44 4b 68 35 46 49 6a 30 4c 2b 78 66 39 44 78 76 71 41 67 4d 45 42 55 56 4b 54 6b 68 4e 55 31 68 4d 55 57 4e 6f 48 31 38 39 5a Data Ascii: KUmZ2XnKKnm6yus26kqq+Fta+bsbavusHBk72zwMfByLrIvLx5mXvTxszDz9iQwsfLxcrQ1cna3OGc0tjds+Pdyd/k3ejv78Hr4e717/bo9urqp8KpusaWra6vsPD1+fP4/gT3/A8UyvHlDekF0sPhxR4RFw4aI9oNEhYQFRsgFCUnLOYOAikGIe7fAOE6LTMqNj/2KS4yLDE3PDBBQ0gDKh5FIj0L+xf9DxvqAgMEBUVKTkhNU1hMUWNoH189Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.22	49189	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:10 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/796757696:1731923123:q3MLDS30_WAumj0Jg-MuaUKDLVNQf7CvdHGorhcb5i8/8e4733fe9e3f6b4c/u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:10 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 18 Nov 2024 10:16:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: Yb4/ev2UflFgQovTekvq5QpM78GsBm6ZVUs=$gB6c75JdDvTkVh6r cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8e4734196ac5315a-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.22	49190	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:10 UTC	787	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8e4733fe9e3f6b4c/1731924968994/DaI4FYDoYFg-IhO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:10 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:10 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8e47341bcbe7e792-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 12 08 02 00 00 00 36 6e 72 3e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR6nr>IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.22	49192	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:11 UTC	816	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8e4733fe9e3f6b4c/1731924968995/04ef6a44f7d4e83bcbe7a77d2e7ba1336b6ef580de7b7d96d2b45cf36395934f/Q89i320ItIIdw8- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:11 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 18 Nov 2024 10:16:11 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-11-18 10:16:11 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 42 4f 39 71 52 50 66 55 36 44 76 4c 35 36 64 39 4c 6e 75 68 4d 32 74 75 39 59 44 65 65 33 32 57 30 72 52 63 38 32 4f 56 6b 30 38 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gBO9qRPfU6DvL56d9LnuhM2tu9YDee32W0rRc82OVk08AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-11-18 10:16:11 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.22	49191	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:11 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8e4733fe9e3f6b4c/1731924968994/DaI4FYDoYFg-IhO HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:11 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8e4734208d472cd4-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 12 08 02 00 00 00 36 6e 72 3e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR6nr>IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.22	49193	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:12 UTC	1152	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/796757696:1731923123:q3MLDS30_WAumj0Jg-MuaUKDLVNQf7CvdHGorhcb5i8/8e4733fe9e3f6b4c/u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 26104 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 CF-Challenge: u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8nrep/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:12 UTC	16384	OUT	Data Raw: 76 5f 38 65 34 37 33 33 66 65 39 65 33 66 36 62 34 63 3d 47 44 4b 68 4f 58 75 71 6e 4e 6e 53 6e 75 79 75 56 67 74 67 41 4d 66 75 49 67 4a 67 4b 50 61 66 67 41 67 63 50 34 46 75 78 67 6f 50 67 71 75 6a 67 66 35 61 70 50 67 48 67 68 69 30 6e 4d 45 37 35 67 56 66 67 75 70 67 59 68 54 70 66 67 69 35 67 4e 25 32 62 58 68 4d 4e 67 4a 68 65 67 75 24 67 47 4b 67 24 53 4c 66 68 68 77 67 62 35 58 61 67 75 64 69 52 71 67 47 68 58 70 68 24 35 4d 6f 45 39 55 6c 75 30 58 54 75 39 35 34 31 74 79 79 41 4e 68 67 32 62 4d 45 4e 35 75 4a 67 75 71 59 4d 35 44 49 4e 6d 46 67 65 24 79 55 67 75 4e 6e 2b 41 4f 66 68 67 6c 45 54 4f 58 59 58 65 77 4d 66 68 69 48 4b 69 66 67 54 64 79 56 4b 4a 54 45 58 74 4b 67 4e 6b 32 4d 73 79 41 75 63 31 41 30 68 66 24 38 6a 48 6c 37 33 33 56 6a Data Ascii: v_8e4733fe9e3f6b4c=GDKhOXuqnNnSnuyuVgtgAMfuIgJgKPafgAgcP4FuxgoPgqujgf5apPgHghi0nME75gVfgupgYhTpfgi5gN%2bXhMNgJhegu$gGKg$SLfhhwgb5XagudiRqgGhXph$5MoE9Ulu0XTu9541tyyANhg2bMEN5uJguqYM5DINmFge$yUguNn+AOfhglETOXYXewMfhiHKifgTdyVKJTEXtKgNk2MsyAuc1A0hf$8jHl733Vj
2024-11-18 10:16:12 UTC	9720	OUT	Data Raw: 35 75 79 58 63 54 69 67 2b 67 4b 53 34 51 30 4b 75 6d 54 6f 75 77 67 62 67 75 44 34 53 49 36 67 53 67 75 6d 67 77 50 37 48 33 4a 49 63 67 62 7a 4c 53 63 44 5a 34 67 4b 76 52 44 35 4c 53 4b 52 67 61 67 44 77 61 30 58 70 67 41 6f 58 37 67 44 67 24 68 47 6b 67 77 67 63 67 66 68 75 49 68 38 68 41 78 44 6a 71 51 78 54 58 38 53 67 75 68 61 4f 44 74 68 62 67 4d 68 75 4c 67 53 35 47 51 45 51 46 50 78 31 52 58 68 57 44 78 33 54 36 35 57 70 78 48 54 52 54 50 69 78 59 4f 52 39 59 52 78 33 4f 36 63 57 37 78 48 4f 52 66 57 49 78 38 39 36 46 57 6c 78 31 39 52 6b 57 42 78 6e 4a 36 4e 57 58 67 53 4a 36 70 57 51 78 46 50 54 71 57 48 78 48 4a 52 58 57 48 78 68 68 67 59 57 63 48 4c 41 45 69 57 4e 48 51 41 44 53 57 69 48 59 74 45 38 57 65 54 4e 71 58 56 57 49 50 47 74 52 38 Data Ascii: 5uyXcTig+gKS4Q0KumTouwgbguD4SI6gSgumgwP7H3JIcgbzLScDZ4gKvRD5LSKRgagDwa0XpgAoX7gDg$hGkgwgcgfhuIh8hAxDjqQxTX8SguhaODthbgMhuLgS5GQEQFPx1RXhWDx3T65WpxHTRTPixYOR9YRx3O6cW7xHORfWIx896FWlx19RkWBxnJ6NWXgSJ6pWQxFPTqWHxHJRXWHxhhgYWcHLAEiWNHQADSWiHYtE8WeTNqXVWIPGtR8
2024-11-18 10:16:12 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 10:16:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 22940 Connection: close cf-chl-gen: ihqzLRsnX7/LZPsksIM5zZvlpz3uCecG5J0Vuvf4BRjitpmKFct7W3V0VdkuyaHv3go4aNd9knCB1rb1KQ==$Tabo1uQNSWvgT6ec Server: cloudflare CF-RAY: 8e47342618f0e5fa-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:12 UTC	1035	IN	Data Raw: 6a 34 4b 49 66 34 75 55 54 48 35 64 68 35 65 52 68 35 6d 50 6c 70 5a 52 55 36 61 70 61 45 36 6d 6d 5a 2b 57 6f 71 74 6a 6c 5a 4a 6f 6c 6e 64 69 6e 57 52 35 58 37 65 71 73 4b 65 7a 76 48 53 6d 6f 33 71 6e 69 48 4f 76 64 59 70 77 63 58 4a 7a 79 72 62 49 64 37 65 38 77 4c 71 2f 78 63 71 2b 77 39 58 61 67 36 47 46 78 39 6e 50 33 74 66 51 32 75 48 68 79 71 44 4f 72 58 32 55 6c 5a 61 58 37 74 72 73 6d 2b 2f 69 37 4f 50 53 35 76 50 34 36 66 6a 36 70 38 57 70 36 2f 33 7a 41 2f 76 30 2f 67 59 47 37 73 58 79 30 61 47 69 75 62 71 37 76 41 63 46 76 38 67 42 42 67 6f 45 43 51 38 55 43 41 30 66 4a 4e 72 2b 46 69 54 38 34 64 4c 77 38 66 4c 57 35 2b 48 5a 4e 73 58 47 33 64 37 66 34 4f 48 69 34 2b 51 6c 4b 69 34 6f 4c 54 4d 34 4c 44 46 44 53 50 41 50 38 6b 2f 65 39 66 62 Data Ascii: j4KIf4uUTH5dh5eRh5mPlpZRU6apaE6mmZ+WoqtjlZJolndinWR5X7eqsKezvHSmo3qniHOvdYpwcXJzyrbId7e8wLq/xcq+w9Xag6GFx9nP3tfQ2uHhyqDOrX2UlZaX7trsm+/i7OPS5vP46fj6p8Wp6/3zA/v0/gYG7sXy0aGiubq7vAcFv8gBBgoECQ8UCA0fJNr+FiT84dLw8fLW5+HZNsXG3d7f4OHi4+QlKi4oLTM4LDFDSPAP8k/e9fb
2024-11-18 10:16:12 UTC	1369	IN	Data Raw: 44 52 45 56 47 52 30 68 4a 53 6b 74 4d 54 61 47 6a 6c 59 6d 70 5a 57 35 56 72 61 43 6d 6e 61 6d 79 61 70 79 68 70 5a 2b 6b 71 71 2b 6a 74 4c 61 37 64 71 79 79 74 34 32 39 74 38 57 5a 74 58 35 64 64 48 56 32 64 33 68 35 65 6e 74 38 66 58 35 2f 7a 72 75 38 32 4a 57 66 68 74 37 52 31 38 37 61 34 35 76 4e 30 74 62 51 31 64 76 67 31 4f 58 6e 37 4b 66 64 34 2b 69 2b 37 75 6a 54 36 76 62 6f 37 2b 6f 41 73 35 4b 70 71 71 75 73 72 61 36 76 73 4c 47 79 73 37 54 71 44 50 44 72 41 4e 4c 56 76 42 55 49 44 67 55 52 47 74 45 45 43 51 30 48 44 42 49 58 43 78 77 65 49 39 30 55 47 68 2f 30 4a 52 2f 33 47 79 30 6a 4b 69 72 6f 78 39 37 66 34 4f 48 69 34 2b 54 6c 35 75 66 6f 36 52 77 59 47 7a 45 47 43 76 42 4a 50 45 49 35 52 55 34 47 4f 44 31 42 4f 30 42 47 53 7a 39 51 55 6c Data Ascii: DREVGR0hJSktMTaGjlYmpZW5VraCmnamyapyhpZ+kqq+jtLa7dqyyt429t8WZtX5ddHV2d3h5ent8fX5/zru82JWfht7R187a45vN0tbQ1dvg1OXn7Kfd4+i+7ujT6vbo7+oAs5Kpqqusra6vsLGys7TqDPDrANLVvBUIDgURGtEECQ0HDBIXCxweI90UGh/0JR/3Gy0jKirox97f4OHi4+Tl5ufo6RwYGzEGCvBJPEI5RU4GOD1BO0BGSz9QUl
2024-11-18 10:16:12 UTC	1369	IN	Data Raw: 53 6b 74 4d 54 55 35 50 55 46 46 53 55 31 53 42 68 59 4b 4d 63 48 52 62 73 36 61 73 6f 36 2b 34 63 4b 4b 6e 71 36 57 71 73 4c 57 70 75 72 7a 42 66 4c 65 70 77 38 57 48 64 49 4a 32 7a 73 48 48 76 73 72 54 69 37 33 43 78 73 44 46 79 39 44 45 31 64 66 63 6c 36 76 6b 33 74 47 34 6f 5a 78 37 6b 70 4f 55 6c 5a 61 58 6d 4a 6d 61 6d 35 79 64 7a 4e 62 33 2b 4e 57 36 76 71 58 39 38 50 62 74 2b 51 4f 36 37 50 48 31 37 2f 54 36 41 50 4d 46 42 77 7a 47 35 2f 45 54 46 50 44 56 79 36 72 42 77 73 50 45 78 63 62 48 79 4d 6e 4b 79 38 7a 77 2b 51 4c 35 34 65 7a 54 4c 42 38 6c 48 43 67 78 36 42 73 67 4a 42 34 6a 4b 53 34 69 4d 7a 55 36 39 41 73 55 48 42 54 37 2b 4e 66 75 37 2f 44 78 38 76 50 30 39 56 51 54 34 75 50 36 2b 2f 7a 39 2f 67 41 42 41 6c 6c 46 56 77 5a 4e 57 6c 68 Data Ascii: SktMTU5PUFFSU1SBhYKMcHRbs6aso6+4cKKnq6WqsLWpurzBfLepw8WHdIJ2zsHHvsrTi73CxsDFy9DE1dfcl6vk3tG4oZx7kpOUlZaXmJmam5ydzNb3+NW6vqX98Pbt+QO67PH17/T6APMFBwzG5/ETFPDVy6rBwsPExcbHyMnKy8zw+QL54ezTLB8lHCgx6BsgJB4jKS4iMzU69AsUHBT7+Nfu7/Dx8vP09VQT4uP6+/z9/gABAllFVwZNWlh
2024-11-18 10:16:12 UTC	1369	IN	Data Raw: 46 46 53 55 31 52 56 56 6c 31 65 57 5a 36 71 6e 37 4b 72 70 4b 36 31 63 4b 57 7a 71 62 39 31 73 62 65 34 73 4c 36 56 6f 70 79 63 63 59 2b 51 6b 58 56 39 73 38 61 41 5a 48 74 38 66 58 35 2f 67 49 47 43 67 34 53 46 68 6f 32 4f 69 63 37 61 7a 2b 4c 62 31 4e 37 6c 6f 4e 76 5a 31 74 71 6c 32 2b 6a 6e 36 39 33 76 34 38 50 76 35 50 66 77 36 66 50 36 31 2f 66 38 38 77 44 31 2f 50 79 33 39 41 48 31 43 51 4c 36 42 51 7a 47 2b 77 6f 41 46 73 61 6f 76 38 44 42 77 73 50 45 78 63 62 48 79 4d 6e 4b 30 64 4c 4e 4a 68 6b 66 46 69 49 72 34 68 55 61 48 68 67 64 49 79 67 63 4c 53 38 30 37 67 51 77 43 53 6f 4a 2b 76 55 36 50 7a 41 2b 52 69 45 30 50 44 59 31 52 30 4e 48 2f 66 31 4c 54 56 4e 48 51 51 51 48 44 55 4e 51 54 31 4e 46 56 30 73 72 56 30 78 66 57 46 46 62 59 6a 39 66 Data Ascii: FFSU1RVVl1eWZ6qn7KrpK61cKWzqb91sbe4sL6VopyccY+QkXV9s8aAZHt8fX5/gIGCg4SFho2Oic7az+Lb1N7loNvZ1tql2+jn693v48Pv5Pfw6fP61/f88wD1/Py39AH1CQL6BQzG+woAFsaov8DBwsPExcbHyMnK0dLNJhkfFiIr4hUaHhgdIygcLS807gQwCSoJ+vU6PzA+RiE0PDY1R0NH/f1LTVNHQQQHDUNQT1NFV0srV0xfWFFbYj9f
2024-11-18 10:16:12 UTC	1369	IN	Data Raw: 61 6d 59 62 47 6b 71 71 47 74 74 6d 36 67 70 61 6d 6a 71 4b 36 7a 70 37 69 36 76 33 71 50 75 35 53 31 6c 49 61 42 78 63 71 37 79 64 47 73 76 38 66 42 77 4e 4c 4f 30 6f 6d 4a 78 38 33 62 6a 5a 43 52 69 5a 43 4c 6c 4c 76 64 30 39 57 66 74 73 4b 33 79 73 4f 38 78 73 33 5a 79 38 76 51 78 39 50 4a 30 4e 44 69 79 4d 37 5a 79 74 66 58 32 4e 44 50 34 64 50 54 73 41 36 79 34 51 54 35 2b 38 58 63 36 4e 33 77 36 65 4c 73 38 77 44 78 38 66 62 74 2b 65 2f 32 39 67 6e 77 2b 76 6a 35 2f 51 66 35 41 50 6e 54 4d 64 55 46 4a 78 30 66 36 41 41 4d 41 52 51 4e 42 68 41 58 49 78 55 56 47 68 45 64 45 78 6f 61 4c 42 63 63 49 42 30 58 49 42 6b 6a 4b 68 67 73 49 69 6b 70 4f 7a 41 75 4a 43 4d 71 4b 43 77 6e 44 75 38 48 43 41 6b 4b 43 77 77 4e 44 6b 77 5a 4c 50 73 54 46 42 55 57 64 Data Ascii: amYbGkqqGttm6gpamjqK6zp7i6v3qPu5S1lIaBxcq7ydGsv8fBwNLO0omJx83bjZCRiZCLlLvd09WftsK3ysO8xs3Zy8vQx9PJ0NDiyM7ZytfX2NDP4dPTsA6y4QT5+8Xc6N3w6eLs8wDx8fbt+e/29gnw+vj5/Qf5APnTMdUFJx0f6AAMARQNBhAXIxUVGhEdExoaLBccIB0XIBkjKhgsIikpOzAuJCMqKCwnDu8HCAkKCwwNDkwZLPsTFBUWd
2024-11-18 10:16:12 UTC	1369	IN	Data Raw: 65 58 32 42 68 59 6d 4e 6b 5a 57 5a 6e 61 47 6e 42 74 4c 71 78 76 63 5a 2b 6e 5a 71 56 75 73 53 4b 66 34 47 55 5a 48 74 38 66 58 35 2f 67 49 47 43 67 34 53 46 68 6f 65 49 69 59 72 6f 6d 49 32 66 6e 36 43 68 6d 36 35 2b 6c 5a 61 58 6d 4a 6d 61 6d 35 79 64 6e 70 2b 67 2f 75 66 76 39 2b 6f 43 6b 61 69 70 71 71 75 73 72 61 36 76 73 4c 47 79 73 37 53 31 74 72 66 37 41 76 30 51 46 66 6a 46 39 68 59 48 44 74 72 4c 41 38 62 6b 79 4e 33 6c 74 63 7a 4e 7a 73 2f 51 30 64 4c 54 31 4e 58 57 31 39 6a 5a 32 74 73 67 4a 69 49 30 4f 52 33 70 50 53 73 51 4e 53 2f 36 38 43 6a 7a 39 64 66 75 37 2f 44 78 38 76 50 30 39 66 62 33 2b 50 6c 59 35 66 7a 39 2f 67 41 42 41 67 4d 45 42 51 59 48 43 45 35 67 55 46 70 68 48 46 39 69 56 6d 68 59 59 6d 6b 36 58 46 35 61 62 32 64 77 4a 53 Data Ascii: eX2BhYmNkZWZnaGnBtLqxvcZ+nZqVusSKf4GUZHt8fX5/gIGCg4SFhoeIiYromI2fn6Chm65+lZaXmJmam5ydnp+g/ufv9+oCkaipqqusra6vsLGys7S1trf7Av0QFfjF9hYHDtrLA8bkyN3ltczNzs/Q0dLT1NXW19jZ2tsgJiI0OR3pPSsQNS/68Cjz9dfu7/Dx8vP09fb3+PlY5fz9/gABAgMEBQYHCE5gUFphHF9iVmhYYmk6XF5ab2dwJS
2024-11-18 10:16:12 UTC	1369	IN	Data Raw: 5a 61 75 7a 75 36 35 71 78 6c 5a 74 62 6d 39 77 63 58 4a 7a 64 48 56 32 64 33 6a 50 75 38 31 38 77 74 44 52 7a 39 4f 72 30 63 72 55 74 63 6e 53 7a 73 33 66 6a 4b 71 4f 36 6e 71 52 6b 70 4f 55 6c 5a 61 58 6d 4a 6d 61 6d 35 79 64 6e 70 2b 67 37 76 58 71 76 71 58 7a 2b 75 2b 31 6c 4b 75 73 72 61 36 76 73 4c 47 79 73 37 53 31 74 72 65 34 75 62 6f 52 44 77 72 59 76 78 59 55 44 38 2b 75 78 63 62 48 79 4d 6e 4b 79 38 7a 4e 7a 73 2f 51 30 64 4c 54 31 43 49 67 4a 68 34 49 4b 76 58 63 4b 69 67 75 4a 68 41 79 37 38 37 6c 35 75 66 6f 36 65 72 72 37 4f 33 75 37 2f 44 78 38 76 50 30 4f 55 5a 45 54 6b 64 4a 4b 6b 77 59 2f 6b 4e 51 54 6c 68 52 55 7a 52 57 46 50 49 4b 43 77 77 4e 44 67 38 51 45 52 49 54 46 42 55 57 46 78 67 5a 58 32 31 75 62 48 41 35 49 47 5a 30 64 58 4e Data Ascii: Zauzu65qxlZtbm9wcXJzdHV2d3jPu818wtDRz9Or0crUtcnSzs3fjKqO6nqRkpOUlZaXmJmam5ydnp+g7vXqvqXz+u+1lKusra6vsLGys7S1tre4uboRDwrYvxYUD8+uxcbHyMnKy8zNzs/Q0dLT1CIgJh4IKvXcKiguJhAy787l5ufo6err7O3u7/Dx8vP0OUZETkdJKkwY/kNQTlhRUzRWFPIKCwwNDg8QERITFBUWFxgZX21ubHA5IGZ0dXN
2024-11-18 10:16:12 UTC	1369	IN	Data Raw: 46 5a 74 62 6d 39 77 63 58 4a 7a 64 48 56 32 64 33 69 38 77 73 65 2f 30 64 61 36 68 39 72 49 72 64 4c 4d 6d 49 37 46 69 61 65 4c 34 64 76 53 31 4e 62 61 34 4e 6a 59 73 49 43 58 6d 4a 6d 61 6d 35 79 64 6e 70 2b 67 6f 61 4c 73 36 71 57 75 36 76 44 31 37 51 41 46 36 4c 58 6d 42 76 62 39 79 72 76 79 74 72 6a 56 31 72 72 4d 76 4d 50 45 76 77 51 4b 44 77 63 5a 48 67 4c 4f 41 42 38 51 46 2b 50 55 44 4d 2f 52 37 75 2f 54 36 4e 37 57 4d 38 4c 5a 32 74 76 63 33 64 37 66 34 4f 48 69 34 2b 54 6c 35 75 66 6f 4c 54 4d 34 4d 45 4a 48 4b 2f 63 70 53 44 6c 41 44 66 30 31 2b 42 66 36 44 78 6a 6e 2f 67 41 42 41 67 4d 45 42 51 59 48 43 41 6b 4b 61 50 55 4e 44 67 38 51 45 52 49 54 46 42 55 57 46 78 68 76 57 32 30 63 62 47 70 6a 53 57 39 31 64 33 5a 36 61 58 74 78 65 48 68 62 Data Ascii: FZtbm9wcXJzdHV2d3i8wse/0da6h9rIrdLMmI7FiaeL4dvS1Nba4NjYsICXmJmam5ydnp+goaLs6qWu6vD17QAF6LXmBvb9yrvytrjV1rrMvMPEvwQKDwcZHgLOAB8QF+PUDM/R7u/T6N7WM8LZ2tvc3d7f4OHi4+Tl5ufoLTM4MEJHK/cpSDlADf01+Bf6Dxjn/gABAgMEBQYHCAkKaPUNDg8QERITFBUWFxhvW20cbGpjSW91d3Z6aXtxeHhb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.22	49194	104.18.94.41	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:16:13 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/796757696:1731923123:q3MLDS30_WAumj0Jg-MuaUKDLVNQf7CvdHGorhcb5i8/8e4733fe9e3f6b4c/u2he5JeoESiqOZuF0EVNtnin9eQn_7u9y_Ikbwb7qUg-1731924966-1.1.1.1-3C04BFMP6kK.7L6C0xNuSL4GdwJ3DNuXQICTHoY59vn3vm3d8i_WhuosMOnjSYGn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:16:13 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 18 Nov 2024 10:16:13 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: CyfMt5NSC4s95VgzVIeDiEZL0YiYZmlgYf4=$6l+mbpIC6HT+diaV Server: cloudflare CF-RAY: 8e47342c9c7be9ce-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 10:16:13 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.22	49200	35.190.80.1	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:01 UTC	583	OUT	OPTIONS /report/v4?s=df%2F8fu3RiyO1yB3gyllZEacMqTMukUckFkOmc6AVueDzVr1oUL0%2FAr6ZgFtpkx4Ue7Indyifd3z3LtXDxUZG3AmkpHJ6omOYBy0tTLbSNZH4Tv4AEt62urJo82MOTs7CUqOTXV3e21jSXu3rihYM9P8LVXtoYzc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://redirect-120685500130121.zerobot.org Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:01 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 18 Nov 2024 10:17:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.22	49201	35.190.80.1	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:01 UTC	593	OUT	OPTIONS /report/v4?s=mUXmtGvKJOrYv9wz5YOqAubIlb9hhe2quXQaNSMYfh%2F5Qw6QQVSFBQBBNHzxD6t4FbHctZ5%2BsWBLPliZoCCGOrr6LlbsgaxXaP%2B0SCSAvtoTIiobD3vRa%2B%2Bmwp5R%2ByZOu%2B8eK2y1E8RrIcyy3NOnBBFNmVx7sb4%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://redirect-120685500130121.zerobot.org Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:01 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 18 Nov 2024 10:17:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.22	49202	35.190.80.1	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:01 UTC	504	OUT	POST /report/v4?s=df%2F8fu3RiyO1yB3gyllZEacMqTMukUckFkOmc6AVueDzVr1oUL0%2FAr6ZgFtpkx4Ue7Indyifd3z3LtXDxUZG3AmkpHJ6omOYBy0tTLbSNZH4Tv4AEt62urJo82MOTs7CUqOTXV3e21jSXu3rihYM9P8LVXtoYzc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 946 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:01 UTC	946	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 37 36 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 35 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 39 2e 31 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 64 69 72 65 63 74 2d 31 32 30 Data Ascii: [{"age":58769,"body":{"elapsed_time":959,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.189.16","status_code":403,"type":"http.error"},"type":"network-error","url":"https://redirect-120
2024-11-18 10:17:02 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 18 Nov 2024 10:17:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.22	49203	35.190.80.1	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:02 UTC	514	OUT	POST /report/v4?s=mUXmtGvKJOrYv9wz5YOqAubIlb9hhe2quXQaNSMYfh%2F5Qw6QQVSFBQBBNHzxD6t4FbHctZ5%2BsWBLPliZoCCGOrr6LlbsgaxXaP%2B0SCSAvtoTIiobD3vRa%2B%2Bmwp5R%2ByZOu%2B8eK2y1E8RrIcyy3NOnBBFNmVx7sb4%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 659 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:02 UTC	659	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 34 34 38 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 39 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 31 2e 39 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 64 69 72 65 63 74 2d 31 32 30 36 Data Ascii: [{"age":54489,"body":{"elapsed_time":794,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.81.97","status_code":404,"type":"http.error"},"type":"network-error","url":"https://redirect-1206
2024-11-18 10:17:02 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 18 Nov 2024 10:17:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.22	49205	172.217.16.206	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:16 UTC	793	OUT	GET /chrome/?p=unsupported_windows HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962
2024-11-18 10:17:17 UTC	565	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1#chrome_update_sse3 X-Robots-Tag: follow,index Date: Mon, 18 Nov 2024 10:17:17 GMT Expires: Mon, 18 Nov 2024 10:17:17 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 336 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:17 UTC	336	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 39 35 33 34 36 3f 76 69 73 69 74 5f 69 64 3d 36 33 38 36 37 35 32 31 38 33 37 30 38 37 31 38 30 37 2d 31 38 37 33 32 30 33 35 32 37 26 61 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.22	49206	172.217.16.206	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:17 UTC	849	OUT	GET /chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1 HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962
2024-11-18 10:17:17 UTC	1479	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:17 GMT Expires: Mon, 18 Nov 2024 10:17:17 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-pcBjkgVRWTkaw7dPVqhG' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f; expires=Tue, 20-May-2025 10:17:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f; expires=Tue, 20-May-2025 10:17:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 41 4e 53 57 45 52 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 20 26 61 6d 70 3b 20 69 6e 73 74 61 6c 6c 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 2d 20 43 6f 6d 70 75 74 65 72 20 2d 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Download & install Google Chrome - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots">
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 Data Ascii: OzY.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+038
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d Data Ascii: 80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 Data Ascii: gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 Data Ascii: ont-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1D
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 47 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 33 41 77 70 35 4d 4b 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 Data Ascii: 09,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Awp5MKg.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 62 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 55 39 34 59 Data Ascii: ,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94Y
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 29 3b 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 7b 77 69 6e 64 6f 77 5b 27 77 73 72 74 27 5d 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 29 3b 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 20 6e 6f 6e 63 65 3d 22 70 63 42 6a 6b 67 56 52 57 54 6b 61 77 37 64 50 56 71 68 47 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: ); if (window.performance && window.performance.now){window['wsrt'] = Math.floor(window.performance.now());} </script> <script src="https://www.google-analytics.com/analytics.js" async="" nonce="pcBjkgVRWTkaw7dPVqhG"></script><script src="https://ww
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 66 2c 20 27 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 27 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 7d 2e 68 63 66 65 3a 6e 6f 74 28 68 74 6d 6c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 7d 2e 68 63 66 65 20 70 7b 6d 61 72 67 69 6e 3a 2e 33 31 32 35 72 65 6d 20 30 7d 2e 68 63 66 65 20 61 7b 63 6f 6c 6f 72 3a 23 30 62 35 37 64 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 68 63 66 65 20 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 2e 68 63 66 65 20 61 72 74 69 63 6c 65 20 73 65 63 74 69 6f 6e 20 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 6b 69 70 2d 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b Data Ascii: f, 'Noto Color Emoji';letter-spacing:0rem;line-height:1.25rem}.hcfe:not(html){font-size:.875rem}.hcfe p{margin:.3125rem 0}.hcfe a{color:#0b57d0;text-decoration:none}.hcfe a img{border:0}.hcfe article section section{padding:0}.skip-link{position:absolute;
2024-11-18 10:17:17 UTC	1479	IN	Data Raw: 35 65 6d 7d 2e 68 63 66 65 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 2e 31 38 37 35 72 65 6d 29 7b 2e 68 63 66 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 63 66 65 3a 6e 6f 74 28 68 74 6d 6c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 7d 2e 68 63 66 65 2e 72 65 6e 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 7d 2e 68 63 66 65 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 30 20 2e 35 72 65 6d 7d 2e 68 63 66 Data Ascii: 5em}.hcfe a:hover{text-decoration:underline}@media (min-width:48.1875rem){.hcfe{background:#ffffff;position:absolute;width:100%}.hcfe:not(html){font-size:.875rem}.hcfe.render{position:static}.hcfe h1{font-size:2rem;line-height:2.5rem;margin:0 0 .5rem}.hcf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.22	49215	142.250.186.129	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:20 UTC	737	OUT	GET /gv4UzxwBWVHxxyY26lRgv7WIeFfZZSSCGe5vUBZdm7ePRpUvmf_5Cs23ZTgETaA2kyU4=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:20 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 151 X-XSS-Protection: 0 Date: Mon, 18 Nov 2024 09:27:40 GMT Expires: Tue, 19 Nov 2024 09:27:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 2980 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:20 UTC	151	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 04 00 00 00 4a 7e f5 73 00 00 00 5e 49 44 41 54 38 cb 63 60 18 05 30 50 1a 5a 1a 4a 8a 72 d1 d2 57 40 28 42 bc 86 d5 a5 ff 81 70 25 b1 ca c3 c0 ca 41 30 84 38 e7 bc 86 6b 78 49 84 b3 a0 ce 81 c1 95 c4 3b 07 06 83 f1 29 17 43 72 0e 31 ce 2a 5d 83 a1 1c 04 57 e0 52 1e 8e 55 39 08 06 0d 54 fa f9 8f 1b 52 47 c3 c8 01 00 30 ec 8f a5 de b7 8a 5f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRJ~s^IDAT8c`0PZJrW@(Bp%A08kxI;)Cr1*]WRU9TRG0_IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.22	49228	142.250.186.33	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	490	OUT	GET /gv4UzxwBWVHxxyY26lRgv7WIeFfZZSSCGe5vUBZdm7ePRpUvmf_5Cs23ZTgETaA2kyU4=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:22 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 151 X-XSS-Protection: 0 Date: Mon, 18 Nov 2024 09:27:40 GMT Expires: Tue, 19 Nov 2024 09:27:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 2982 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:22 UTC	151	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 04 00 00 00 4a 7e f5 73 00 00 00 5e 49 44 41 54 38 cb 63 60 18 05 30 50 1a 5a 1a 4a 8a 72 d1 d2 57 40 28 42 bc 86 d5 a5 ff 81 70 25 b1 ca c3 c0 ca 41 30 84 38 e7 bc 86 6b 78 49 84 b3 a0 ce 81 c1 95 c4 3b 07 06 83 f1 29 17 43 72 0e 31 ce 2a 5d 83 a1 1c 04 57 e0 52 1e 8e 55 39 08 06 0d 54 fa f9 8f 1b 52 47 c3 c8 01 00 30 ec 8f a5 de b7 8a 5f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRJ~s^IDAT8c`0PZJrW@(Bp%A08kxI;)Cr1*]WRU9TRG0_IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.22	49234	172.217.16.196	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	884	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f
2024-11-18 10:17:22 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Nov 2024 10:17:22 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.22	49236	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:22 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.22	49235	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:22 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.22	49237	172.217.16.206	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	1697	OUT	POST /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f; SUPPORT_CONTENT=638675218374529834-3259751861
2024-11-18 10:17:22 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-11-18 10:17:22 UTC	1667	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Mon, 18 Nov 2024 10:17:22 GMT Expires: Mon, 18 Nov 2024 10:17:22 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=519=a2dANAsOciDzyACRGriwiB_mYmzXSEL7ObExjj4nRp5hNwiAPn-02YgIj19CurhsFfY4eqc5uUsKdjetN0Iaoo0p9x0PDGGjrHl08nG4adf_phzKHr7FXiEVwk05pnOSdiBeTOMGrMWUvKoebW_UzSBnOfeLC34jNtTXAQhpqpsOhTtuchOv5ES4vWgdRcn3; expires=Tue, 20-May-2025 10:17:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: NID=519=a2dANAsOciDzyACRGriwiB_mYmzXSEL7ObExjj4nRp5hNwiAPn-02YgIj19CurhsFfY4eqc5uUsKdjetN0Iaoo0p9x0PDGGjrHl08nG4adf_phzKHr7FXiEVwk05pnOSdiBeTOMGrMWUvKoebW_UzSBnOfeLC34jNtTXAQhpqpsOhTtuchOv5ES4vWgdRcn3; expires=Tue, 20-May-2025 10:17:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:22 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-11-18 10:17:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.22	49238	172.217.16.206	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	1625	OUT	POST /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714256,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,10803957,10803964,10803965,97601634 HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 569 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f; SUPPORT_CONTENT=638675218374529834-3259751861
2024-11-18 10:17:22 UTC	569	OUT	Data Raw: 7b 22 63 6f 6d 6d 6f 6e 5f 70 61 72 61 6d 73 22 3a 7b 22 63 6f 6e 74 65 78 74 5f 70 61 72 61 6d 73 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 31 30 38 30 30 31 31 32 2c 31 37 30 36 35 33 38 2c 31 37 31 34 32 35 36 2c 31 30 38 30 30 35 36 31 2c 31 30 38 30 30 36 32 31 2c 31 30 38 30 30 36 37 32 2c 31 30 38 30 30 36 39 35 2c 31 30 38 30 30 37 30 30 2c 31 30 38 30 30 37 30 37 2c 31 30 38 30 30 37 33 38 2c 31 30 38 30 30 37 36 31 2c 31 30 38 30 30 38 34 38 2c 31 30 38 30 30 38 38 30 2c 31 30 38 30 30 39 32 32 2c 31 30 38 30 30 39 35 30 2c 31 30 38 30 30 39 35 37 2c 31 30 38 30 31 30 33 32 2c 31 30 38 30 31 30 34 32 2c 31 30 38 30 31 31 35 30 2c 31 30 38 30 31 32 38 38 2c 31 30 38 30 31 33 34 35 2c 31 30 38 30 31 35 33 39 2c 31 30 38 30 31 36 Data Ascii: {"common_params":{"context_params":{"experiment_id":[10800112,1706538,1714256,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,108016
2024-11-18 10:17:23 UTC	1623	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Mon, 18 Nov 2024 10:17:22 GMT Expires: Mon, 18 Nov 2024 10:17:22 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-; expires=Tue, 20-May-2025 10:17:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-; expires=Tue, 20-May-2025 10:17:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:23 UTC	44	IN	Data Raw: 32 36 0d 0a 7b 22 68 65 6c 70 63 65 6e 74 65 72 22 3a 22 63 68 72 6f 6d 65 22 2c 22 75 73 65 72 5f 70 72 65 66 22 3a 5b 5d 7d 0d 0a Data Ascii: 26{"helpcenter":"chrome","user_pref":[]}
2024-11-18 10:17:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.22	49240	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:23 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.22	49241	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:23 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.22	49239	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:22 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 10:17:23 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.22	49246	216.58.206.78	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:23 UTC	978	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f
2024-11-18 10:17:23 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 15 Nov 2024 00:30:46 GMT Expires: Sat, 15 Nov 2025 00:30:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 294397 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:23 UTC	462	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 Data Ascii: ototype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)ret
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 Data Ascii: var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.a
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 Data Ascii: =function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),rejec
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e Data Ascii: .promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=fun
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 Data Ascii: ror("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));f
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 Data Ascii: ar h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 Data Ascii: te=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();thi
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 Data Ascii: ype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)
2024-11-18 10:17:23 UTC	1378	IN	Data Raw: 62 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 Data Ascii: b+9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.22	49254	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:23 UTC	967	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1607 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f
2024-11-18 10:17:23 UTC	1607	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 30 37 35 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],860,[["1731925040750",null,null,null,
2024-11-18 10:17:24 UTC	945	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; expires=Tue, 20-May-2025 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:23 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 18 Nov 2024 10:17:23 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.22	49253	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:23 UTC	967	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1119 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=ryanV7bGH_vpaJ37LCkoyzWro5h_wkquw6fKvFPZ_2wnY4FxCk8jHDz-sHBwv-PE1lBPFOK6NHwF5Ywn3As6-tER_tfpBVSLh4CnQa3QqQ7BXThUcaZ9sn0UoAAkR_OxPpjNtcSTy0g7NBj7VFX1k7kOgNrahg3A6j9ktQSbpGDo1tmPbAix8c3f
2024-11-18 10:17:23 UTC	1119	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 30 37 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],1323,[["1731925040764",null,null,null
2024-11-18 10:17:24 UTC	945	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=1t0FqzxjLbEUug6HbeXB8-yoJD3yot8gxLmmkW5Te9RraaYtwFeWZlFvNDGbttTxpOwgsdBDqlDObzozNt8KpQ0zQGI8nYftnO61pwoSF13LgSYDaEbp-Y2Ip6bSvhNoKsZZ98QVifu5WDOR5bLHORI1EizMVlibShKMIQnDRqO3Zn7uf2AWv3Lg0q4P7nIv; expires=Tue, 20-May-2025 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:23 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 18 Nov 2024 10:17:23 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.22	49259	142.250.186.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:24 UTC	1352	OUT	GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; _ga=GA1.1.775560641.1731925041; NID=519=a2dANAsOciDzyACRGriwiB_mYmzXSEL7ObExjj4nRp5hNwiAPn-02YgIj19CurhsFfY4eqc5uUsKdjetN0Iaoo0p9x0PDGGjrHl08nG4adf_phzKHr7FXiEVwk05pnOSdiBeTOMGrMWUvKoebW_UzSBnOfeLC34jNtTXAQhpqpsOhTtuchOv5ES4vWgdRcn3
2024-11-18 10:17:24 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Mon, 18 Nov 2024 10:17:24 GMT Expires: Mon, 18 Nov 2024 10:17:24 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.22	49257	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:24 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1609 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
2024-11-18 10:17:24 UTC	1609	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 30 39 32 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],860,[["1731925040929",null,null,null,
2024-11-18 10:17:24 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:24 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.22	49258	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:24 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1862 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
2024-11-18 10:17:24 UTC	1862	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 30 39 31 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],860,[["1731925040918",null,null,null,
2024-11-18 10:17:24 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:24 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.22	49260	142.250.186.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:24 UTC	1279	OUT	GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714256,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803751,10803805,10803950,10803957,10803964,10803965,97601634 HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; _ga=GA1.1.775560641.1731925041; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
2024-11-18 10:17:24 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Mon, 18 Nov 2024 10:17:24 GMT Expires: Mon, 18 Nov 2024 10:17:24 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.22	49255	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:24 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1804 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
2024-11-18 10:17:24 UTC	1804	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 30 39 32 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],1323,[["1731925040927",null,null,null
2024-11-18 10:17:24 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:24 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.22	49256	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:24 UTC	966	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 885 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
2024-11-18 10:17:24 UTC	885	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 31 30 37 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[1,0,0,0,0]]],373,[["1731925041072",null,null,null,
2024-11-18 10:17:24 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:24 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.22	49263	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1638 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
2024-11-18 10:17:25 UTC	1638	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 32 36 36 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],860,[["1731925042661",null,null,null,
2024-11-18 10:17:25 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:25 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.22	49264	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1154 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=guGjf9lf7ShxNiaHmSHSkblk1wroepZ91qfCVWiDRgWN6rc4v5jSz075TbQO077qf83RycV-AA5UBT0_JIQYNtnfchMO0iOTsksyy1ymTVdyckaf7yKWlbqgev7yMy7mLLIJvWtn4aC8cbh2eMYvwIXYR7fbB16fh9pa4vYG4s9YT98YpiOynve1gDUNM9U-
2024-11-18 10:17:25 UTC	1154	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 32 36 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],1323,[["1731925042664",null,null,null
2024-11-18 10:17:25 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:25 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.22	49265	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:25 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:25 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.22	49266	172.217.18.14	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	800	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:25 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 15 Nov 2024 00:30:46 GMT Expires: Sat, 15 Nov 2025 00:30:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 294399 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:25 UTC	462	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 Data Ascii: ototype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)ret
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 Data Ascii: var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.a
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 Data Ascii: =function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),rejec
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e Data Ascii: .promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=fun
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 Data Ascii: ror("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));f
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 Data Ascii: ar h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 Data Ascii: te=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();thi
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 Data Ascii: ype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)
2024-11-18 10:17:25 UTC	1378	IN	Data Raw: 62 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 Data Ascii: b+9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.22	49267	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	663	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:26 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:26 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.22	49272	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1623 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:25 UTC	1623	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 34 30 35 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],860,[["1731925044050",null,null,null,
2024-11-18 10:17:26 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.22	49271	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1136 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:25 UTC	1136	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 34 30 36 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],1323,[["1731925044060",null,null,null
2024-11-18 10:17:26 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.22	49274	172.217.16.206	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	1856	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 268 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; _ga=GA1.3.775560641.1731925041; _gid=GA1.3.1723734831.1731925044; _gat_gtag_UA_175894890_5=1
2024-11-18 10:17:25 UTC	268	OUT	Data Raw: 5b 5b 22 31 37 31 33 34 34 31 35 36 31 38 35 33 37 30 32 35 36 32 38 2d 45 55 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 39 35 33 34 36 3f 76 69 73 69 74 5f 69 64 3d 36 33 38 36 37 35 32 31 38 33 37 30 38 37 31 38 30 37 2d 31 38 37 33 32 30 33 35 32 37 26 70 3d 75 6e 73 75 70 70 6f 72 74 65 64 5f 77 69 6e 64 6f 77 73 26 72 64 3d 31 23 63 68 72 6f 6d 65 5f 75 70 64 61 74 65 5f 73 73 65 33 26 7a 69 70 70 79 3d 25 32 43 77 69 6e 64 6f 77 73 22 2c 22 63 68 72 6f 6d 65 22 2c 31 2c 31 2c 22 65 6e 22 2c 22 31 34 39 33 39 30 32 33 33 38 22 5d 2c 5b 6e 75 6c 6c 2c 22 44 6f 77 6e 6c 6f 61 64 20 26 20 69 6e 73 74 61 6c 6c 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 39 35 Data Ascii: [["17134415618537025628-EU","https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1#chrome_update_sse3&zippy=%2Cwindows","chrome",1,1,"en","1493902338"],[null,"Download & install Google Chrome","95
2024-11-18 10:17:26 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Mon, 18 Nov 2024 10:17:26 GMT Expires: Mon, 18 Nov 2024 10:17:26 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:26 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-11-18 10:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.22	49275	172.217.16.206	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	1177	OUT	GET /favicon.ico HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/chrome/answer/95346?visit_id=638675218370871807-1873203527&p=unsupported_windows&rd=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; _ga=GA1.3.775560641.1731925041; _gid=GA1.3.1723734831.1731925044; _gat_gtag_UA_175894890_5=1
2024-11-18 10:17:26 UTC	464	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Nov 2024 10:17:26 GMT Expires: Mon, 18 Nov 2024 10:17:26 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:26 UTC	914	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d Data Ascii: 1536 h& ( 0.v]X:X:rY
2024-11-18 10:17:26 UTC	1378	IN	Data Raw: 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a eb ff 3a 47 ea ff 5a 66 ee ff a2 a9 f5 ff f9 f9 fe ff ff ff ff ff fd fd fd c1 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 32 fd fd fd 99 fd fd fd db fd fd fd fa fd fd fd fa fd fd fd da fd fd fd 98 ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0f 00 00 c0 03 00 00 80 01 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 01 00 00 80 01 00 00 c0 03 00 00 f0 Data Ascii: ]i<J:GZf20
2024-11-18 10:17:26 UTC	1378	IN	Data Raw: 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff fc d8 c3 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fa fe fe fe 23 00 00 00 00 00 00 00 00 fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ea f4 e6 ff 5b ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 67 b2 4c ff cc e5 c2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e0 ef da ff a8 b1 63 ff f1 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f5 90 54 ff fe f9 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 9a 00 00 00 00 fe fe fe 0e fd fd fd f6 ff ff ff ff ff ff ff ff ff ff ff ff 82 c7 8f ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 75 b9 5c ff f2 f9 f0 ff ff ff ff ff ff ff ff Data Ascii: {dT5S4w7ABB#[>S4S4S4S4gLcBBBBTS4S4S4S4u\
2024-11-18 10:17:26 UTC	1378	IN	Data Raw: fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 5a ff ff ff ff ff ff ff ff ff ff ff ff dd f6 fe ff 07 b9 fb ff 20 77 f1 ff 35 43 ea ff 35 43 ea ff 48 55 ec ff ee f0 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe 57 ff ff ff 0f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff 6d 90 f4 ff 35 Data Ascii: 4IZ w5C5CHUWm5
2024-11-18 10:17:26 UTC	390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f6 fd fd fd 9d fe fe fe 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0e fe fe fe 5a fd fd fd 9c fd fd fd cb fd fd fd ed fd fd fd fa fd fd fd fa fd fd fd ec fd fd fd cb fd fd fd 9c fe fe fe 59 fe fe fe 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '%ZY
2024-11-18 10:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.22	49273	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:25 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1136 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:25 UTC	1136	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 34 30 36 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],1323,[["1731925044067",null,null,null
2024-11-18 10:17:26 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.22	49276	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:26 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:27 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:27 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.22	49277	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:26 UTC	966	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 890 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:26 UTC	890	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 33 38 32 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[1,0,0,0,0]]],373,[["1731925043827",null,null,null,
2024-11-18 10:17:27 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:26 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.22	49280	142.250.186.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:27 UTC	1415	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714256%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803751%2C10803805%2C10803950%2C10803957%2C10803964%2C10803965%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; _ga=GA1.3.775560641.1731925041; _gid=GA1.3.1723734831.1731925044; _gat_gtag_UA_175894890_5=1
2024-11-18 10:17:27 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Mon, 18 Nov 2024 10:17:27 GMT Expires: Mon, 18 Nov 2024 10:17:27 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:27 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-11-18 10:17:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.22	49281	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:27 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1638 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:27 UTC	1638	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 35 36 37 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],860,[["1731925045679",null,null,null,
2024-11-18 10:17:27 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:27 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.22	49282	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:27 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1154 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:27 UTC	1154	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 34 35 36 38 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],1323,[["1731925045681",null,null,null
2024-11-18 10:17:27 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:27 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.22	49279	142.250.186.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:27 UTC	844	OUT	GET /favicon.ico HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SUPPORT_CONTENT=638675218374529834-3259751861; _ga_H30R9PNQFN=GS1.1.1731925041.1.0.1731925041.0.0.0; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG; _ga=GA1.3.775560641.1731925041; _gid=GA1.3.1723734831.1731925044; _gat_gtag_UA_175894890_5=1
2024-11-18 10:17:27 UTC	464	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Nov 2024 10:17:27 GMT Expires: Mon, 18 Nov 2024 10:17:27 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:27 UTC	914	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d Data Ascii: 1536 h& ( 0.v]X:X:rY
2024-11-18 10:17:27 UTC	1378	IN	Data Raw: 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a eb ff 3a 47 ea ff 5a 66 ee ff a2 a9 f5 ff f9 f9 fe ff ff ff ff ff fd fd fd c1 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 32 fd fd fd 99 fd fd fd db fd fd fd fa fd fd fd fa fd fd fd da fd fd fd 98 ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0f 00 00 c0 03 00 00 80 01 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 01 00 00 80 01 00 00 c0 03 00 00 f0 Data Ascii: ]i<J:GZf20
2024-11-18 10:17:27 UTC	1378	IN	Data Raw: 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff fc d8 c3 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fa fe fe fe 23 00 00 00 00 00 00 00 00 fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ea f4 e6 ff 5b ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 67 b2 4c ff cc e5 c2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e0 ef da ff a8 b1 63 ff f1 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f5 90 54 ff fe f9 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 9a 00 00 00 00 fe fe fe 0e fd fd fd f6 ff ff ff ff ff ff ff ff ff ff ff ff 82 c7 8f ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 75 b9 5c ff f2 f9 f0 ff ff ff ff ff ff ff ff Data Ascii: {dT5S4w7ABB#[>S4S4S4S4gLcBBBBTS4S4S4S4u\
2024-11-18 10:17:27 UTC	1378	IN	Data Raw: fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 5a ff ff ff ff ff ff ff ff ff ff ff ff dd f6 fe ff 07 b9 fb ff 20 77 f1 ff 35 43 ea ff 35 43 ea ff 48 55 ec ff ee f0 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe 57 ff ff ff 0f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff 6d 90 f4 ff 35 Data Ascii: 4IZ w5C5CHUWm5
2024-11-18 10:17:27 UTC	390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f6 fd fd fd 9d fe fe fe 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0e fe fe fe 5a fd fd fd 9c fd fd fd cb fd fd fd ed fd fd fd fa fd fd fd fa fd fd fd ec fd fd fd cb fd fd fd 9c fe fe fe 59 fe fe fe 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '%ZY
2024-11-18 10:17:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.22	49283	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:28 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:28 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:28 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:28 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:28 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.22	49284	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:28 UTC	663	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:28 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:28 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:28 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:28 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.22	49285	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:29 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:30 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:30 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:30 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:30 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.22	49286	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:31 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:31 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:31 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.22	49287	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:32 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:32 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:32 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:32 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.22	49288	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:32 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1639 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:32 UTC	1639	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 33 31 39 32 35 30 35 30 36 38 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],860,[["1731925050684",null,null,null,
2024-11-18 10:17:33 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:33 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:33 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.22	49289	172.217.23.110	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:32 UTC	975	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1155 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCNy9zQEIuMjNAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:32 UTC	1155	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 4e 6f 74 5f 41 20 42 72 61 6e 64 22 2c 22 39 39 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 30 39 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 30 39 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 30 2e 31 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 30 39 2e 30 2e 35 34 31 34 2e 31 32 30 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 33 31 39 32 35 30 35 30 36 38 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Not_A Brand","99"],["Google Chrome","109"],["Chromium","109"]],0,"Windows","0.1.0","x86","","109.0.5414.120"],[4,0,0,0,0]]],1323,[["1731925050688",null,null,null
2024-11-18 10:17:33 UTC	498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 18 Nov 2024 10:17:33 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-18 10:17:33 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-18 10:17:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.22	49290	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:33 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:34 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:33 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:34 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:34 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.22	49291	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:34 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:35 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:35 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:35 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:35 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.22	49292	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:36 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:36 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:36 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:36 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.22	49293	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:37 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:37 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:37 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:37 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.22	49294	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:38 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:38 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:38 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:38 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.22	49295	216.58.212.174	443	3284	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 10:17:39 UTC	674	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; NID=519=PJ25F-vy6gFImn8orVdlZa6tkrOqP9a2moJRw5CLI_vJ7QXC7DCvw4n3ZDrFTnrv4lkxYN63XPPcaW0iCtd82rTlhXuSqWB55SnhhcCALvZInTFiF6SZYk2mGykZkuI3TvW8wi5CpwsuR7Gwlu0uRr3QhL6rp-6GZk9wjEJyHSki5Lrz3kQNBIsyIAw3ciyG
2024-11-18 10:17:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Nov 2024 10:17:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-18 10:17:39 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-18 10:17:39 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Target ID:	0
Start time:	05:15:30
Start date:	18/11/2024
Path:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\Benefits_Update_2024.pdf"
Imagebase:	0x1250000
File size:	2'525'680 bytes
MD5 hash:	2F8D93826B8CBF9290BC57535C7A6817
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	05:15:34
Start date:	18/11/2024
Path:	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
Imagebase:	0x1e0000
File size:	9'805'808 bytes
MD5 hash:	326A645391A97C760B60C558A35BB068
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	05:15:55
Start date:	18/11/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "https://lnk.ie/7469O/e="
Imagebase:	0x13fd90000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	05:15:56
Start date:	18/11/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1416 --field-trial-handle=1240,i,15366321716962305651,11801733001931014569,131072 /prefetch:8
Imagebase:	0x13fd90000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Benefits_Update_2024.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\ChromiumTemp1472_1549436564\model-info.pb

C:\Program Files\ChromiumTemp1472_1549436564\model.tflite

C:\Program Files\ChromiumTemp1472_1585668192\model-info.pb

C:\Program Files\ChromiumTemp1472_1585668192\model.tflite

C:\Program Files\ChromiumTemp1472_1706484848\model-info.pb

C:\Program Files\ChromiumTemp1472_1706484848\model.tflite

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Cache\data_1

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old~RF65aec7.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241118101536Z-164.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt19.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt16.lst.3516

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt19.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt16.lst.3516

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\5ca44a43-3250-423d-bb81-ed897e7c59a8\model.tflite (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\c1e219fc-0222-48b4-b0fd-0ae637e74a79\model.tflite (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\f5bb7b8e-6972-4a43-af7f-1698ee5370d5\model.tflite (copy)

Windows Analysis Report
Benefits_Update_2024.pdf