Edit tour

Windows Analysis Report
http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space

Overview

General Information

Sample URL:	http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space
Analysis ID:	1566514
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11958565083669481681,14402194825252490213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space' does not match the legitimate domain for Microsoft., The URL contains a long string of random characters, which is a common tactic in phishing URLs to obfuscate the true nature of the site., The domain extension '.hf.space' is unusual for a Microsoft-related site, which typically uses '.com'., The presence of input fields for sensitive information like 'Username', 'Email', 'Password', and 'Confirm Password' on a suspicious URL increases the risk of phishing. DOM: 1.3.pages.csv

Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: Form action: https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public hf wufoo
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: Form action: https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public hf wufoo
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: Form action: https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public hf wufoo
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: Form action: https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public hf wufoo

Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html

HTTP Parser: Number of links: 0

Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html

HTTP Parser: Title: Sign in with your organizational account does not match URL

Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No favicon
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No favicon
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No favicon
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No favicon
Source: https://www.wufoo.com/endpage/#public	HTTP Parser: No favicon

Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="author".. found
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="author".. found
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="author".. found
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="author".. found

Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49729 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/structure.css HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/form.css HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/wufoo.js HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/wufoo.js HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HOBz34y5de7DD+B&MD=PCZ7zMOE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /endpage/ HTTP/1.1Host: www.wufoo.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.5 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/style.css?ver=1.3 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/tablepress/css/default.min.css?ver=1.14 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/wufoo-mixpanel.js HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /consent/86f42b6d-7a31-469c-804c-319643173d42/86f42b6d-7a31-469c-804c-319643173d42.json HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wufoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HOBz34y5de7DD+B&MD=PCZ7zMOE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/wufoo-mixpanel.js HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /consent/86f42b6d-7a31-469c-804c-319643173d42/86f42b6d-7a31-469c-804c-319643173d42.json HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.wufoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/img/bb-cert.png HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/modernizr.min.js?ver=3.3.1 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/slick.min.js?ver=1.6.0 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/waypoints.min.js?ver=4.0.1 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/waypoints.inview.min.js?ver=1.0.0 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/ls.bgset.min.js?ver=3.0.0 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/lazysizes.min.js?ver=3.0.0 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/img/bb-cert.png HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/modernizr.min.js?ver=3.3.1 HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/dist/scripts.min.js?ver=1.3 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/endpage/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/waypoints.min.js?ver=4.0.1 HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meter/wufoo.com/202.svg HTTP/1.1Host: cdn.ywxi.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/slick.min.js?ver=1.6.0 HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/waypoints.inview.min.js?ver=1.0.0 HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/font/National2Web-Regular.woff2 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.wufoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.wufoo.com/wp-content/themes/wufoo-site/style.css?ver=1.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/font/National2Web-Medium.woff2 HTTP/1.1Host: www.wufoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.wufoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.wufoo.com/wp-content/themes/wufoo-site/style.css?ver=1.3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/ls.bgset.min.js?ver=3.0.0 HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/vendor/lazysizes.min.js?ver=3.0.0 HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/wufoo-site/js/dist/scripts.min.js?ver=1.3 HTTP/1.1Host: www.wufoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/86f42b6d-7a31-469c-804c-319643173d42/018dfc06-450f-70ae-81ef-536da56b2895/en.json HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wufoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meter/wufoo.com/202.svg HTTP/1.1Host: cdn.ywxi.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otFloatingRounded.json HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wufoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/86f42b6d-7a31-469c-804c-319643173d42/018dfc06-450f-70ae-81ef-536da56b2895/en.json HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wufoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn-ukwest.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wufoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/5549426.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wufoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_93.1.dr	String found in binary or memory: <ul class="nav__list"><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Community:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://twitter.com/Wufoo" class="nav__link" rel="noopener noreferrer">Twitter</a></li><li class="nav__item "><a href="https://www.facebook.com/formbuilder" class="nav__link" rel="noopener noreferrer">Facebook</a></li><li class="nav__item "><a href="https://www.linkedin.com/company-beta/3364692/" class="nav__link" rel="noopener noreferrer">LinkedIn</a></li><li class="nav__item "><a href="https://www.instagram.com/wufoo/?hl=en" class="nav__link" rel="noopener noreferrer">Instagram</a></li><li class="nav__item "><a href="https://www.youtube.com/user/wufooforms" class="nav__link" rel="noopener noreferrer">YouTube</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">About Us:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://status.wufoo.com/" class="nav__link">Status</a></li><li class="nav__item "><a href="/sitemap/" class="nav__link">Sitemap</a></li><li class="nav__item "><a href="/docs/" class="nav__link">Help & Docs</a></li><li class="nav__item "><a href="https://www.wufoo.com/release-notes/" class="nav__link">Release Notes</a></li><li class="nav__item "><a href="/privacy/" class="nav__link">Privacy</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/region-specific-privacy-statement/" class="nav__link" target="_blank" rel="nofollow">userfornia Privacy Notice</a></li><li class="nav__item "><a href="/terms-of-service/" class="nav__link">Terms of Service</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/cookies/" class="nav__link">Cookie Policy</a></li><li class="nav__item ot-sdk-show-settings nav__link"><a href="#" class="nav__link">cookie settings</a></li><li class="nav__item "><a href="https://master.wufoo.com/forms/m7p0x3/" class="nav__link">Report Abuse</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/" class="nav__link">SurveyMonkey</a></li><li class="nav__item "><a href="/careers/" class="nav__link">Careers</a></li><li class="nav__item "><a href="https://www.wufoo.com/affiliate-program/" class="nav__link">Affiliate Program</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Language:</a><ul class="nav nav--sub"><li class="nav__item "><a href="http://www.wufoo.com/?lChange=.com" class="nav__link">English</a></li></ul></li></ul> </nav> equals www.facebook.com (Facebook)
Source: chromecache_93.1.dr	String found in binary or memory: <ul class="nav__list"><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Community:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://twitter.com/Wufoo" class="nav__link" rel="noopener noreferrer">Twitter</a></li><li class="nav__item "><a href="https://www.facebook.com/formbuilder" class="nav__link" rel="noopener noreferrer">Facebook</a></li><li class="nav__item "><a href="https://www.linkedin.com/company-beta/3364692/" class="nav__link" rel="noopener noreferrer">LinkedIn</a></li><li class="nav__item "><a href="https://www.instagram.com/wufoo/?hl=en" class="nav__link" rel="noopener noreferrer">Instagram</a></li><li class="nav__item "><a href="https://www.youtube.com/user/wufooforms" class="nav__link" rel="noopener noreferrer">YouTube</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">About Us:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://status.wufoo.com/" class="nav__link">Status</a></li><li class="nav__item "><a href="/sitemap/" class="nav__link">Sitemap</a></li><li class="nav__item "><a href="/docs/" class="nav__link">Help & Docs</a></li><li class="nav__item "><a href="https://www.wufoo.com/release-notes/" class="nav__link">Release Notes</a></li><li class="nav__item "><a href="/privacy/" class="nav__link">Privacy</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/region-specific-privacy-statement/" class="nav__link" target="_blank" rel="nofollow">userfornia Privacy Notice</a></li><li class="nav__item "><a href="/terms-of-service/" class="nav__link">Terms of Service</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/cookies/" class="nav__link">Cookie Policy</a></li><li class="nav__item ot-sdk-show-settings nav__link"><a href="#" class="nav__link">cookie settings</a></li><li class="nav__item "><a href="https://master.wufoo.com/forms/m7p0x3/" class="nav__link">Report Abuse</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/" class="nav__link">SurveyMonkey</a></li><li class="nav__item "><a href="/careers/" class="nav__link">Careers</a></li><li class="nav__item "><a href="https://www.wufoo.com/affiliate-program/" class="nav__link">Affiliate Program</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Language:</a><ul class="nav nav--sub"><li class="nav__item "><a href="http://www.wufoo.com/?lChange=.com" class="nav__link">English</a></li></ul></li></ul> </nav> equals www.linkedin.com (Linkedin)
Source: chromecache_93.1.dr	String found in binary or memory: <ul class="nav__list"><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Community:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://twitter.com/Wufoo" class="nav__link" rel="noopener noreferrer">Twitter</a></li><li class="nav__item "><a href="https://www.facebook.com/formbuilder" class="nav__link" rel="noopener noreferrer">Facebook</a></li><li class="nav__item "><a href="https://www.linkedin.com/company-beta/3364692/" class="nav__link" rel="noopener noreferrer">LinkedIn</a></li><li class="nav__item "><a href="https://www.instagram.com/wufoo/?hl=en" class="nav__link" rel="noopener noreferrer">Instagram</a></li><li class="nav__item "><a href="https://www.youtube.com/user/wufooforms" class="nav__link" rel="noopener noreferrer">YouTube</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">About Us:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://status.wufoo.com/" class="nav__link">Status</a></li><li class="nav__item "><a href="/sitemap/" class="nav__link">Sitemap</a></li><li class="nav__item "><a href="/docs/" class="nav__link">Help & Docs</a></li><li class="nav__item "><a href="https://www.wufoo.com/release-notes/" class="nav__link">Release Notes</a></li><li class="nav__item "><a href="/privacy/" class="nav__link">Privacy</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/region-specific-privacy-statement/" class="nav__link" target="_blank" rel="nofollow">userfornia Privacy Notice</a></li><li class="nav__item "><a href="/terms-of-service/" class="nav__link">Terms of Service</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/cookies/" class="nav__link">Cookie Policy</a></li><li class="nav__item ot-sdk-show-settings nav__link"><a href="#" class="nav__link">cookie settings</a></li><li class="nav__item "><a href="https://master.wufoo.com/forms/m7p0x3/" class="nav__link">Report Abuse</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/" class="nav__link">SurveyMonkey</a></li><li class="nav__item "><a href="/careers/" class="nav__link">Careers</a></li><li class="nav__item "><a href="https://www.wufoo.com/affiliate-program/" class="nav__link">Affiliate Program</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Language:</a><ul class="nav nav--sub"><li class="nav__item "><a href="http://www.wufoo.com/?lChange=.com" class="nav__link">English</a></li></ul></li></ul> </nav> equals www.twitter.com (Twitter)
Source: chromecache_93.1.dr	String found in binary or memory: <ul class="nav__list"><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Community:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://twitter.com/Wufoo" class="nav__link" rel="noopener noreferrer">Twitter</a></li><li class="nav__item "><a href="https://www.facebook.com/formbuilder" class="nav__link" rel="noopener noreferrer">Facebook</a></li><li class="nav__item "><a href="https://www.linkedin.com/company-beta/3364692/" class="nav__link" rel="noopener noreferrer">LinkedIn</a></li><li class="nav__item "><a href="https://www.instagram.com/wufoo/?hl=en" class="nav__link" rel="noopener noreferrer">Instagram</a></li><li class="nav__item "><a href="https://www.youtube.com/user/wufooforms" class="nav__link" rel="noopener noreferrer">YouTube</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">About Us:</a><ul class="nav nav--sub"><li class="nav__item "><a href="https://status.wufoo.com/" class="nav__link">Status</a></li><li class="nav__item "><a href="/sitemap/" class="nav__link">Sitemap</a></li><li class="nav__item "><a href="/docs/" class="nav__link">Help & Docs</a></li><li class="nav__item "><a href="https://www.wufoo.com/release-notes/" class="nav__link">Release Notes</a></li><li class="nav__item "><a href="/privacy/" class="nav__link">Privacy</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/region-specific-privacy-statement/" class="nav__link" target="_blank" rel="nofollow">userfornia Privacy Notice</a></li><li class="nav__item "><a href="/terms-of-service/" class="nav__link">Terms of Service</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/mp/legal/cookies/" class="nav__link">Cookie Policy</a></li><li class="nav__item ot-sdk-show-settings nav__link"><a href="#" class="nav__link">cookie settings</a></li><li class="nav__item "><a href="https://master.wufoo.com/forms/m7p0x3/" class="nav__link">Report Abuse</a></li><li class="nav__item "><a href="https://www.surveymonkey.com/" class="nav__link">SurveyMonkey</a></li><li class="nav__item "><a href="/careers/" class="nav__link">Careers</a></li><li class="nav__item "><a href="https://www.wufoo.com/affiliate-program/" class="nav__link">Affiliate Program</a></li></ul></li><li class="nav__item nav__item--has-subnav"><a href="#" class="nav__link">Language:</a><ul class="nav nav--sub"><li class="nav__item "><a href="http://www.wufoo.com/?lChange=.com" class="nav__link">English</a></li></ul></li></ul> </nav> equals www.youtube.com (Youtube)
Source: chromecache_93.1.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/formbuilder/" /> equals www.facebook.com (Facebook)
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: return b}GD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: authbset.wufoo.com
Source: global traffic	DNS traffic detected: DNS query: www.wufoo.com
Source: global traffic	DNS traffic detected: DNS query: cdn-ukwest.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ywxi.net
Source: global traffic	DNS traffic detected: DNS query: tracker.marinsm.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cdn.krxd.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com

Source: unknown

HTTP traffic detected: POST /forms/ztefh951y2ux4k/ HTTP/1.1Host: authbset.wufoo.comConnection: keep-aliveContent-Length: 805Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.spaceContent-Type: multipart/form-data; boundary=----WebKitFormBoundarywUhyM3wsn04z2YRrUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_107.1.dr, chromecache_120.1.dr	String found in binary or memory: http://ejohn.org/projects/flexible-javascript-events/
Source: chromecache_102.1.dr, chromecache_84.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_102.1.dr, chromecache_84.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_112.1.dr, chromecache_97.1.dr	String found in binary or memory: http://imakewebthings.com/waypoints/shortcuts/inview
Source: chromecache_102.1.dr, chromecache_84.1.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_102.1.dr, chromecache_84.1.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_107.1.dr, chromecache_120.1.dr	String found in binary or memory: http://www.bigbold.com/snippets/posts/show/2630
Source: chromecache_107.1.dr, chromecache_120.1.dr	String found in binary or memory: http://www.robertnyman.com/2005/11/07/the-ultimate-getelementsbyclassname/
Source: chromecache_99.1.dr, chromecache_96.1.dr	String found in binary or memory: http://www.soshal.ca
Source: chromecache_123.1.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_123.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_93.1.dr	String found in binary or memory: https://ajax.googleapis.com
Source: chromecache_93.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: chromecache_93.1.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_105.1.dr	String found in binary or memory: https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_93.1.dr	String found in binary or memory: https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.js
Source: chromecache_93.1.dr	String found in binary or memory: https://cdn.ywxi.net/meter/wufoo.com/202.svg
Source: chromecache_117.1.dr, chromecache_85.1.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_123.1.dr	String found in binary or memory: https://google.com
Source: chromecache_123.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_105.1.dr	String found in binary or memory: https://html5shiv.googlecode.com/svn/trunk/html5.js
Source: chromecache_105.1.dr	String found in binary or memory: https://master.wufoo.com/forms/m7p0x3/def/field1=authbset.wufoo.com/forms/sign-in-with-your-organiza
Source: chromecache_111.1.dr, chromecache_129.1.dr	String found in binary or memory: https://modernizr.com/download/?-backgroundsize-bgsizecover-boxsizing-csscalc-cssgradients-csspointe
Source: chromecache_123.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_93.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://script.crazyegg.com/pages/scripts/
Source: chromecache_93.1.dr	String found in binary or memory: https://secure.wufoo.com/login/
Source: chromecache_93.1.dr	String found in binary or memory: https://secure.wufoo.com/signup/17/register/?wfcmpid=cta-endpage&utm_source=endpage
Source: chromecache_93.1.dr	String found in binary or memory: https://secure.wufoo.com/signup/free/
Source: chromecache_122.1.dr, chromecache_95.1.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_114.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.beta.min.js
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_114.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.old.min.js
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://tracker.marinsm.com/tracker/async/
Source: chromecache_93.1.dr	String found in binary or memory: https://twitter.com/Wufoo
Source: chromecache_93.1.dr	String found in binary or memory: https://www.bbb.org/greater-san-francisco/business-reviews/market-survey/surveymonkey-in-san-mateo-c
Source: chromecache_93.1.dr	String found in binary or memory: https://www.boldgrid.com/w3-total-cache/
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_123.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_123.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_123.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_93.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_101.1.dr, chromecache_123.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.surveymonkey.com/
Source: chromecache_131.1.dr	String found in binary or memory: https://www.surveymonkey.com/mp/legal/cookies/
Source: chromecache_131.1.dr	String found in binary or memory: https://www.surveymonkey.com/mp/legal/privacy/
Source: chromecache_131.1.dr	String found in binary or memory: https://www.transparentadvertising.com
Source: chromecache_93.1.dr	String found in binary or memory: https://www.trustedsite.com/verify?host=wufoo.com
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/#website
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/?s=
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/education-forms/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/endpage/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/endpage/#breadcrumb
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/endpage/#webpage
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/examples/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/features/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/form-builder/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/3-things-to-avoid-on-online-forms/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/create-single-and-double-opt-in-forms/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/custom-radio-buttons-and-checkboxes/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/customize-your-form-closed-message/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/customize-your-form-with-css-examples/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/event-management-software/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/how-to-create-an-online-form-in-2-minutes/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/how-to-send-a-file-after-a-form-is-submitted/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/guides/quick-tip-how-to-export-all-your-data-from-a-form/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/integrations/asana/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/integrations/docusign/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/integrations/mailchimp/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/integrations/salesforce/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/integrations/wordpress/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/mobile-forms/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/nonprofit/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/partners/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/authorizenet/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/braintree/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/chargify/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/freshbooks/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/paypal/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/square/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/stripe/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/payments/usaepay/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/pricing/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/web-forms/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/why-wufoo/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/plugins/tablepress/css/default.min.css?ver=1.14
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/img/bb-cert.png
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/apple-touch-icon.png
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/favicon-16x16.png
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/favicon-32x32.png
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/manifest.json
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/safari-pinned-tab.svg
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/js/dist/scripts.min.js?ver=1.3
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/lazysizes.min.js?ver=3.0.0
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/ls.bgset.min.js?ver=3.0.0
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/modernizr.min.js?ver=3.3.1
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/slick.min.js?ver=1.6.0
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/waypoints.inview.min.js?ver=1.0.0
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/waypoints.min.js?ver=4.0.1
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-content/themes/wufoo-site/style.css?ver=1.3
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.5
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-json/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wufoo.com%2Fendpage%2F
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wufoo.com%2Fendpage%2F&for
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wp-json/wp/v2/pages/15014
Source: chromecache_93.1.dr	String found in binary or memory: https://www.wufoo.com/wufoo-google-forms/
Source: chromecache_93.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49729 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@19/88@51/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11958565083669481681,14402194825252490213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11958565083669481681,14402194825252490213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://imakewebthings.com/waypoints/shortcuts/inview	0%	Avira URL Cloud	safe
https://modernizr.com/download/?-backgroundsize-bgsizecover-boxsizing-csscalc-cssgradients-csspointe	0%	Avira URL Cloud	safe
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/css/form.css	0%	Avira URL Cloud	safe
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/favicon.ico	0%	Avira URL Cloud	safe
http://ejohn.org/projects/flexible-javascript-events/	0%	Avira URL Cloud	safe
https://authbset.wufoo.com/forms/ztefh951y2ux4k/	0%	Avira URL Cloud	safe
https://www.transparentadvertising.com	0%	Avira URL Cloud	safe
https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public	0%	Avira URL Cloud	safe
http://www.robertnyman.com/2005/11/07/the-ultimate-getelementsbyclassname/	0%	Avira URL Cloud	safe
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/	0%	Avira URL Cloud	safe
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/css/structure.css	0%	Avira URL Cloud	safe
http://www.bigbold.com/snippets/posts/show/2630	0%	Avira URL Cloud	safe
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/scripts/wufoo.js	0%	Avira URL Cloud	safe
http://www.soshal.ca	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d19zzur8741aig.cloudfront.net	18.66.161.101	true	false	unknown
scontent.xx.fbcdn.net	157.240.196.15	true	false	high
cdn-ukwest.onetrust.com	172.64.155.119	true	false	high
dtx9pzf7ji0d9.cloudfront.net	18.165.220.112	true	false	unknown
www.google.com	142.250.181.68	true	false	high
dnyuxtqeop0tn.cloudfront.net	18.165.220.71	true	false	unknown
d12rqiuxgezxz2.cloudfront.net	18.165.220.67	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	13.227.2.22	true	false	high
geolocation.onetrust.com	104.18.32.137	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
cdn.ywxi.net	unknown	unknown	false	high
cdn.krxd.net	unknown	unknown	false	high
www.wufoo.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
tracker.marinsm.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
authbset.wufoo.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.wufoo.com/wp-content/themes/wufoo-site/font/National2Web-Medium.woff2	false		high
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/	false	Avira URL Cloud: safe	unknown
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/css/form.css	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/style.css?ver=1.3	false		high
https://authbset.wufoo.com/forms/ztefh951y2ux4k/	false	Avira URL Cloud: safe	unknown
https://cdn-ukwest.onetrust.com/scripttemplates/202407.2.0/assets/otCommonStyles.css	false		high
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html	true		unknown
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/slick.min.js?ver=1.6.0	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/lazysizes.min.js?ver=3.0.0	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/waypoints.min.js?ver=4.0.1	false		high
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/scripts/wufoo.js	false	Avira URL Cloud: safe	unknown
https://www.wufoo.com/wp-content/themes/wufoo-site/img/bb-cert.png	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/modernizr.min.js?ver=3.3.1	false		high
https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/css/structure.css	false	Avira URL Cloud: safe	unknown
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	false		high
https://cdn-ukwest.onetrust.com/scripttemplates/202407.2.0/otBannerSdk.js	false		high
https://www.wufoo.com/endpage/#public	false		high
https://www.wufoo.com/wp-content/plugins/tablepress/css/default.min.css?ver=1.14	false		high
https://www.wufoo.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.5	false		high
https://cdn.ywxi.net/meter/wufoo.com/202.svg	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/waypoints.inview.min.js?ver=1.0.0	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/js/dist/scripts.min.js?ver=1.3	false		high
https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.js	false		high
https://cdn-ukwest.onetrust.com/consent/86f42b6d-7a31-469c-804c-319643173d42/86f42b6d-7a31-469c-804c-319643173d42.json	false		high
https://cdn-ukwest.onetrust.com/scripttemplates/202407.2.0/assets/v2/otPcCenter.json	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://ejohn.org/projects/flexible-javascript-events/	chromecache_107.1.dr, chromecache_120.1.dr	false	Avira URL Cloud: safe	unknown
https://www.wufoo.com/payments/paypal/	chromecache_93.1.dr	false		high
https://www.wufoo.com/examples/	chromecache_93.1.dr	false		high
https://www.wufoo.com/form-builder/	chromecache_93.1.dr	false		high
https://www.wufoo.com/guides/3-things-to-avoid-on-online-forms/	chromecache_93.1.dr	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/favicon-32x32.png	chromecache_93.1.dr	false		high
https://www.wufoo.com/payments/	chromecache_93.1.dr	false		high
https://www.wufoo.com/integrations/asana/	chromecache_93.1.dr	false		high
http://github.com/kenwheeler/slick	chromecache_102.1.dr, chromecache_84.1.dr	false		high
https://www.google.com	chromecache_123.1.dr	false		high
https://www.bbb.org/greater-san-francisco/business-reviews/market-survey/surveymonkey-in-san-mateo-c	chromecache_93.1.dr	false		high
https://www.wufoo.com/payments/braintree/	chromecache_93.1.dr	false		high
https://www.wufoo.com/endpage/#webpage	chromecache_93.1.dr	false		high
https://www.wufoo.com/payments/stripe/	chromecache_93.1.dr	false		high
https://secure.wufoo.com/login/	chromecache_93.1.dr	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/manifest.json	chromecache_93.1.dr	false		high
https://www.boldgrid.com/w3-total-cache/	chromecache_93.1.dr	false		high
https://www.wufoo.com/guides/how-to-create-an-online-form-in-2-minutes/	chromecache_93.1.dr	false		high
https://www.wufoo.com/guides/customize-your-form-closed-message/	chromecache_93.1.dr	false		high
https://www.transparentadvertising.com	chromecache_131.1.dr	false	Avira URL Cloud: safe	unknown
https://www.wufoo.com/	chromecache_93.1.dr	false		high
https://www.wufoo.com/why-wufoo/	chromecache_93.1.dr	false		high
http://imakewebthings.com/waypoints/shortcuts/inview	chromecache_112.1.dr, chromecache_97.1.dr	false	Avira URL Cloud: safe	unknown
https://www.wufoo.com/integrations/mailchimp/	chromecache_93.1.dr	false		high
https://www.wufoo.com/#website	chromecache_93.1.dr	false		high
http://kenwheeler.github.io	chromecache_102.1.dr, chromecache_84.1.dr	false		high
https://www.wufoo.com/features/	chromecache_93.1.dr	false		high
https://html5shiv.googlecode.com/svn/trunk/html5.js	chromecache_105.1.dr	false		high
https://modernizr.com/download/?-backgroundsize-bgsizecover-boxsizing-csscalc-cssgradients-csspointe	chromecache_111.1.dr, chromecache_129.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_93.1.dr	false		high
https://www.wufoo.com/?s=	chromecache_93.1.dr	false		high
https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public	chromecache_105.1.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_101.1.dr, chromecache_123.1.dr	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/safari-pinned-tab.svg	chromecache_93.1.dr	false		high
https://www.wufoo.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wufoo.com%2Fendpage%2F	chromecache_93.1.dr	false		high
https://www.wufoo.com	chromecache_93.1.dr	false		high
https://www.wufoo.com/wp-json/wp/v2/pages/15014	chromecache_93.1.dr	false		high
https://www.wufoo.com/wufoo-google-forms/	chromecache_93.1.dr	false		high
https://www.wufoo.com/guides/customize-your-form-with-css-examples/	chromecache_93.1.dr	false		high
https://www.wufoo.com/mobile-forms/	chromecache_93.1.dr	false		high
https://secure.wufoo.com/signup/17/register/?wfcmpid=cta-endpage&utm_source=endpage	chromecache_93.1.dr	false		high
https://www.surveymonkey.com/mp/legal/privacy/	chromecache_131.1.dr	false		high
https://www.wufoo.com/payments/square/	chromecache_93.1.dr	false		high
http://www.robertnyman.com/2005/11/07/the-ultimate-getelementsbyclassname/	chromecache_107.1.dr, chromecache_120.1.dr	false	Avira URL Cloud: safe	unknown
https://www.wufoo.com/guides/create-single-and-double-opt-in-forms/	chromecache_93.1.dr	false		high
https://www.wufoo.com/guides/custom-radio-buttons-and-checkboxes/	chromecache_93.1.dr	false		high
https://twitter.com/Wufoo	chromecache_93.1.dr	false		high
https://yoast.com/wordpress/plugins/seo/	chromecache_93.1.dr	false		high
https://www.wufoo.com/endpage/#breadcrumb	chromecache_93.1.dr	false		high
https://www.wufoo.com/nonprofit/	chromecache_93.1.dr	false		high
https://www.wufoo.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wufoo.com%2Fendpage%2F&for	chromecache_93.1.dr	false		high
https://www.wufoo.com/wp-json/	chromecache_93.1.dr	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/favicon-16x16.png	chromecache_93.1.dr	false		high
https://sketchapp.com	chromecache_122.1.dr, chromecache_95.1.dr	false		high
https://www.wufoo.com/wp-content/themes/wufoo-site/img/favicons/apple-touch-icon.png	chromecache_93.1.dr	false		high
http://www.bigbold.com/snippets/posts/show/2630	chromecache_107.1.dr, chromecache_120.1.dr	false	Avira URL Cloud: safe	unknown
https://www.surveymonkey.com/mp/legal/cookies/	chromecache_131.1.dr	false		high
https://www.wufoo.com/integrations/docusign/	chromecache_93.1.dr	false		high
https://snap.licdn.com/li.lms-analytics/insight.beta.min.js	chromecache_114.1.dr	false		high
https://www.surveymonkey.com/	chromecache_93.1.dr	false		high
http://github.com/kenwheeler/slick/issues	chromecache_102.1.dr, chromecache_84.1.dr	false		high
http://www.soshal.ca	chromecache_99.1.dr, chromecache_96.1.dr	false	Avira URL Cloud: safe	unknown
https://www.wufoo.com/integrations/salesforce/	chromecache_93.1.dr	false		high
https://www.trustedsite.com/verify?host=wufoo.com	chromecache_93.1.dr	false		high
https://www.wufoo.com/education-forms/	chromecache_93.1.dr	false		high
https://www.wufoo.com/web-forms/	chromecache_93.1.dr	false		high
https://www.wufoo.com/integrations/wordpress/	chromecache_93.1.dr	false		high
http://kenwheeler.github.io/slick	chromecache_102.1.dr, chromecache_84.1.dr	false		high
https://github.com/imakewebthings/waypoints/blob/master/licenses.txt	chromecache_117.1.dr, chromecache_85.1.dr	false		high
https://script.crazyegg.com/pages/scripts/	chromecache_101.1.dr, chromecache_123.1.dr	false		high
https://api.w.org/	chromecache_93.1.dr	false		high
https://www.wufoo.com/guides/event-management-software/	chromecache_93.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.161.101	d19zzur8741aig.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.165.220.115	unknown	United States	3	MIT-GATEWAYSUS	false
18.165.220.67	d12rqiuxgezxz2.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.64.155.119	cdn-ukwest.onetrust.com	United States	13335	CLOUDFLARENETUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.165.220.71	dnyuxtqeop0tn.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.165.220.93	unknown	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
157.240.196.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.217.21.36	unknown	United States	15169	GOOGLEUS	false
18.165.220.112	dtx9pzf7ji0d9.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
13.227.2.22	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1566514
Start date and time:	2024-12-02 11:04:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@19/88@51/15

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, SgrmBroker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.19.238, 74.125.205.84, 34.104.35.123, 199.232.214.172, 216.58.208.234, 172.217.17.42, 172.217.19.170, 142.250.181.74, 142.250.181.10, 172.217.19.202, 172.217.21.42, 172.217.19.234, 172.217.17.74, 142.250.181.138, 142.250.181.106, 172.217.17.78, 142.250.181.136, 23.32.238.90, 23.32.238.112, 172.217.17.35, 13.107.42.14, 142.250.181.42
Excluded domains from analysis (whitelisted): www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, l-0005.l-msedge.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, bat.bing.com, update.googleapis.com, clients.l.google.com, a1916.dscg2.akamai.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space

Input	Output
URL: http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This appears to be legitimate form handling JavaScript code with standard DOM manipulation and form validation functionality. It uses common event listeners, form field highlighting, and basic utility functions. No suspicious behaviors like data exfiltration, eval usage, or external connections are present. The code follows standard web development practices for form handling." }
addEvent(window, 'load', initForm); var highlight_array = new Array(); function initForm(){ initializeFocus(); var activeForm = document.getElementsByTagName('form')[0]; addEvent(activeForm, 'submit', disableSubmitButton); ifInstructs(); showRangeCounters(); } function disableSubmitButton() { document.getElementById('saveForm').disabled = true; } // for radio and checkboxes, they have to be cleared manually, so they are added to the // global array highlight_array so we dont have to loop through the dom every time. function initializeFocus(){ var fields = getElementsByClassName(document, "", "field"); for(i = 0; i < fields.length; i++) { if(fields[i].type == 'radio' \|\| fields[i].type == 'checkbox') { fields[i].onclick = function() {highlight(this, 4);}; fields[i].onfocus = function() {highlight(this, 4);}; } else if ( fields[i].className.match('card-details-field') ) { fields[i].addEventListener("focusin", function(){highlight(this, 4);}); } else if(fields[i].className.match('addr') \|\| fields[i].className.match('other')) { fields[i].onfocus = function(){highlight(this, 3);}; } else { fields[i].onfocus = function(){highlight(this, 2); }; } } } function highlight(el, depth){ if(depth == 2){var fieldContainer = el.parentNode.parentNode;} if(depth == 3){var fieldContainer = el.parentNode.parentNode.parentNode;} if(depth == 4){var fieldContainer = el.parentNode.parentNode.parentNode.parentNode;} addClassName(fieldContainer, 'focused', true); var focusedFields = getElementsByClassName(document, "", "focused"); for(i = 0; i < focusedFields.length; i++) { if(focusedFields[i] != fieldContainer){ removeClassName(focusedFields[i], 'focused'); } } } function ifInstructs(){ var container = document.getElementById('public'); if(container){ removeClassName(container,'noI'); var instructs = getElementsByClassName(document,"","instruct"); if(instructs == ''){ addClassName(container,'noI',true); } if(container.offsetWidth <= 450){ addClassName(container,'altInstruct',true); } } } function showRangeCounters(){ counters = getElementsByClassName(document, "em", "currently"); for(i = 0; i < counters.length; i++) { counters[i].style.display = 'inline'; } } function validateRange(ColumnId, RangeType) { if(document.getElementById('rangeUsedMsg'+ColumnId)) { var field; if (document.getElementById('Field'+ColumnId)) { field = document.getElementById('Field'+ColumnId); } else if (document.getElementById('Field'+ColumnId+'_other')) { field = document.getElementById('Field'+ColumnId+'_other'); } var msg = document.getElementById('rangeUsedMsg'+ColumnId); switch(RangeType) { case 'character': msg.innerHTML = field.value.length; break; case 'word': var val = field.value; val = val.replace(/\n/g, " "); var words = val.split(" "); var used = 0; for(i =0; i < words.length; i++) { if(words[i].replace(/\s+$/,"") != "") used++; } msg.innerHTML = used; break; case 'digit': msg.innerHTML = field.value.length; break; } } } function handleRadioOther(id, last) { var label = document.getElementById(id+'_otherlabel'); if (label) { if (last) { label.style.display = 'block'; } else { label.style.display = 'none'; } } } /--------------------------------------------------------------------------/ //http://www.robertnyman.com/2005/11/07/the-ultimate-getelementsbyclassname/ function getElementsByClassName(oElm, strTagName, strClassName){ var arrElements = (strTagName == "" && oElm.all)? oElm.all : oElm.getElementsByTagName(strTagName); var arrReturnElements = new Array(); strClassName = strClassName.replace(/\-/g, "\\-"); var oRegExp = new RegExp("(^\|\\s)" + strClassName + "(\\s\|$)"); var oElement; for(v
URL: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in with your organizational account", "prominent_button_name": "Submit", "text_input_field_labels": [ "Username", "Email", "Password", "Confirm Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in with your organizational account", "prominent_button_name": "Submit", "text_input_field_labels": [ "Username", "Email", "Password", "Confirm Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://www.wufoo.com/endpage/#public Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Thanks for filling out my form!", "prominent_button_name": "GET STARTED", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in with your organizational account", "prominent_button_name": "Submit", "text_input_field_labels": [ "Username", "Email", "Password", "Confirm Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.wufoo.com/endpage/#public Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Thanks for filling out my form!", "prominent_button_name": "GET STARTED", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.wufoo.com/endpage/#public Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Thanks for filling out my form!", "prominent_button_name": "GET STARTED", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.wufoo.com/endpage/#public Model: Joe Sandbox AI	{ "brands": [ "Wufoo" ] }
	{ "brands": [ "Wufoo" ] }
URL: https://www.wufoo.com/endpage/#public Model: Joe Sandbox AI	{ "brands": [ "Wufoo" ] }
	{ "brands": [ "Wufoo" ] }
URL: https://www.wufoo.com/endpage/#public Model: Joe Sandbox AI	{ "brands": [ "Wufoo" ] }
	{ "brands": [ "Wufoo" ] }
URL: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space' does not match the legitimate domain for Microsoft.", "The URL contains a long string of random characters, which is a common tactic in phishing URLs to obfuscate the true nature of the site.", "The domain extension '.hf.space' is unusual for a Microsoft-related site, which typically uses '.com'.", "The presence of input fields for sensitive information like 'Username', 'Email', 'Password', and 'Confirm Password' on a suspicious URL increases the risk of phishing." ], "riskscore": 9} Google indexed: False
URL: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Brands: Microsoft Input Fields: Username, Email, Password, Confirm Password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 2 09:04:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.986857332460168
Encrypted:	false
SSDEEP:	48:88d+T66WcHmcidAKZdA1FehwiZUklqehs5y+3:85PyCjy
MD5:	8DB66257B9868569AEB0CDAFBF448FD8
SHA1:	02D513B34FE7D374A6D738C24361279C5C4E37D5
SHA-256:	547428D07360D68A903B73770B78034BFCF3CF971ECEF834B3906EC5CB5F8521
SHA-512:	8C97339ED98F31338254379F461FCFCA8F5A27A87A84CD7308B2BA67A0C59F38D9C5180F6458182C99AF79AADD68585C0B09DDD2A7F7D20BB8C3DB7F89FBB311
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.P....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.P....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.P....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.P..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.P...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+>.K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 2 09:04:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.003592973745458
Encrypted:	false
SSDEEP:	48:8nd+T66WcHmcidAKZdA1seh/iZUkAQkqehh5y+2:84Pyc9Qey
MD5:	73379EBFB907D375A98713A11399354E
SHA1:	E73C1C5498BA038C2E027C116C7141CA5EC545B7
SHA-256:	8CF0BB33585E3FC4082F353BC105C8F83958CD23BDA389ABD56C937A1AF9604D
SHA-512:	7DB145BD75631745D76062183BF3B3D01344D0532ABA371EA714DFADD617CAE4A243C9FA82340073948209043383856C96E0AF36E789972F034AFE4C043D1DDE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.P....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.P....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.P....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.P..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.P...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+>.K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.009577546284897
Encrypted:	false
SSDEEP:	48:87d+T66AHmcidAKZdA14meh7sFiZUkmgqeh7sf5y+BX:8kPxAn3y
MD5:	09E60C826F845FA3DA4B6C96621FE275
SHA1:	095C04DB32424D85263FB5789374CCD38DABEB16
SHA-256:	548311ACE1079D6DECDE13716B9E1D5F06D3CA3326139B4ED27DC75C06CB3D92
SHA-512:	6D95889A5C01A2D3D7DAABE6C9ABC2BC8461456F9DB719A71D44FABBB94BA1E0B30A8A662AA18228E033C67A0C2DD459F0A0CA838AFBD98723AC45C9D83D4719
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.P....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.P....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.P....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.P..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+>.K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 2 09:04:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.000953885756613
Encrypted:	false
SSDEEP:	48:8ld+T66WcHmcidAKZdA1TehDiZUkwqehl5y+R:8WPy35y
MD5:	508927BF4A4EA369A27639B90A07E62D
SHA1:	692D15C4D0D14391E1B304E7FB449BA5CCDF1CD7
SHA-256:	299E2313304EA5523A267ABEBD85895D489CC49A98F836BDBB6834C08051B36C
SHA-512:	204B539C03EE8ABB929BD8FE0BB1BB02421F7C1E899BFD31FD4E97F14831C63C6CB20F8958CC0327FF940C30C4D7DAFDA9CE07B870A32AF2825F950E3AC145AE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....O....D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.P....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.P....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.P....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.P..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.P...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+>.K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 2 09:04:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9892497279596286
Encrypted:	false
SSDEEP:	48:8Nd+T66WcHmcidAKZdA1dehBiZUk1W1qehb5y+C:8+Pyn9ly
MD5:	48671FD80034DCAA289D8F508EDEF323
SHA1:	5017400E25DB3D840685DC409D40C6C945E5B44C
SHA-256:	31354EAD983199CE902974DB2EFB44EFBA6813903E7EE40B25931BA7D041A0C2
SHA-512:	E28BACFFDAF1C85EB4B3DAB413296D760757A090507C1A3322B96FFC1591FDF186B4804738942A1CF58244496E8974A31C3D22851DDEDC70D92BA3C8C5E03CB6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.P....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.P....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.P....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.P..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.P...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+>.K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 2 09:04:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000749472296875
Encrypted:	false
SSDEEP:	48:8kd+T66WcHmcidAKZdA1duTeehOuTbbiZUk5OjqehOuTbd5y+yT+:8BPyLTfTbxWOvTb3y7T
MD5:	49C86846309AA30B70DA500ACCDD60C4
SHA1:	6439C3C6CD3C75796B41C9A47001A1AD02036E80
SHA-256:	10CA2D9A430181710AB7FD9383CD35CED20F0107601BE2CD8C48D1FC6BF03CFD
SHA-512:	05CB51448F16F33DA7601ACB9346E892E830D3F38873054B55B0696B243F0F268956A267B3D6FC24C0C4EEDA5BB34EE982377EE68C23E5DC131C2AAE115E48A8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........D..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.P....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.P....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.P....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.P..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.P...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+>.K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	147644
Entropy (8bit):	5.03600313899467
Encrypted:	false
SSDEEP:	1536:no3W/l6JiU0LcgfLeUEPlJOUNMIpvCBUUW:no34UXOUNMO
MD5:	5FD1139AF452D0B520AF19A2672279E1
SHA1:	3746A51E3DA7E33D5BAA299852BFD2F6BAF9AF9B
SHA-256:	9AB25B03E63ED22FA3363137714454FC773659BF9A87B642BE7C4C88291E8614
SHA-512:	E1BFEB31C7D7E0C36E0A910E376A2839D60312DA05DA5F88E539FA80A94B69726AD0567F9C2209D25155992C89F46EB8C142E5ABE065F5E82B2132EEEEB0C5B8
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/style.css?ver=1.3
Preview:	.html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:rgba(0,0,0,0)}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:vis

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32859)
Category:	dropped
Size (bytes):	373230
Entropy (8bit):	5.587742212006632
Encrypted:	false
SSDEEP:	6144:4q27MXMiO94NPmPL27iDmoMfgQJEhzKcU:4q2pmNPmK7EzU
MD5:	7F3695D8A0A2D9A85E99AEF005E17F9C
SHA1:	35929D6B7C3EF04BE8E415A98EC643D007D8D1A8
SHA-256:	17F0DB971327B6678459EDA4AA5A4CECA6FD54E691F03AC0708917ED90871F1D
SHA-512:	FA4F6E71A552F568A29E06FD42D5FB98DCC0C808770EC742C5A8537425B87911B776EDEDBF341027907BA3654E237E019F637F3FB73F3A227E31F5868D2C9431
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"47",. . "macros":[{"function":"__j","vtp_name":"document.title"},{"function":"__e"},{"function":"__jsm","vtp_javascript":["template","(function(){function q(f,h,r){var b=function(a){return(a=a.replace(\/^\\\/[a-z]{2}-[a-z]{2}\/i,\"\"))?a:\"\/\"},t=function(a,m){var n=a.split(\/[\u0026;]\/),c=[],d=\"\";if(\"\"===a)return\"\";for(a=0;a\u003Cn.length;a++){var g=n[a].split(\"\\x3d\"),k=g[0];g=g[1];include=!0;for(var l=0;l\u003Cm.length;l++){var e;(e=k.toLowerCase()===m[l].toLowerCase())\|\|(e=\/(([^\u003C\u003E()\\[\\]\\\\.,;:\\s@\"]+(\\.[^\u003C\u003E()\\[\\]\\\\.,;:\\s@\"]+)*)\|(\".+\"))@((\\[[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}])\|(([a-zA-Z\\-0-9]+\\.)+[a-zA-Z]{2,}))\/,e=e.test(k));e\u0026\u0026(include=!1)}include\u0026\u0026\nc.push({name:k,value:g})}for(a=0;a\u003Cc

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32076)
Category:	downloaded
Size (bytes):	41953
Entropy (8bit):	5.1745761144675955
Encrypted:	false
SSDEEP:	768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsJ:X0tVUkkK1GPz6QrG1AJ
MD5:	B53BDFC29E18F4D493D775A8023FBDC8
SHA1:	E9FCBCC4FA70CBA093B81D982A1B78509414CEF7
SHA-256:	E02AF7DF9A190D88380E2DCEC2050ECAA493AE2D23526DBEEC67F6907DF3A752
SHA-512:	027E1ADC510CC91E416CEF4245042A82C06C7318CCEEE34D99C71448448D56D5A7E77116C7907DA0EED15673EF3C6E847187183E9D06BF78BF410E0A53307958
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/slick.min.js?ver=1.6.0
Preview:	/. _ _ _ _. ___\| (_) ___\| \| __ (_)___./ __\| \| \|/ __\| \|/ / \| / __\|.\__ \ \| \| (__\| < _ \| \__ \.\|___/_\|_\|\___\|_\|\_(_)/ \|___/. \|__/.. Version: 1.6.0. Author: Ken Wheeler. Website: http://kenwheeler.github.io. Docs: http://kenwheeler.github.io/slick. Repo: http://github.com/kenwheeler/slick. Issues: http://github.com/kenwheeler/slick/issues.. /.!function(a){"use strict";"function"==typeof define&&define.amd?define(["jquery"],a):"undefined"!=typeof exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){"use strict";var b=window.Slick\|\|{};b=function(){function c(c,d){var f,e=this;e.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:a(c),appendDots:a(c),arrows:!0,asNavFor:null,prevArrow:'<button type="button" data-role="none" class="slick-prev" aria-label="Previous" tabindex="0" role="button">Previous</button>',nextArrow:'<button type="button" data-role="none" class="slick-next" aria-label="Next" tabindex="0" role="button">Next<

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 45, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9888
Entropy (8bit):	7.959231106600909
Encrypted:	false
SSDEEP:	192:p4QUXtH6RRXUY1ELSYy6M3Xn1vhDoh70DOqY/DvMSHklSL8ufVFT0Ez:7UkRRXTE+Y7MHnLm0qqMvdE0L8EFTz
MD5:	AA4B1D78C43A327FBCF2F1A3DA531FB3
SHA1:	08FD6B25752068A697AABB6CF60F2CBB103A4BC6
SHA-256:	B71B51326B27EEF47D4EAEF3B6D186E74D994AF7F6E1959B707D2C2375955682
SHA-512:	C35F3A81795A21F50A7A7E87A3022078DE894B8FA89C1F8AB60BCFE7E9077AF767E56A6FC26FFEFA57E84EA525F4D29C1F78EE92A9925E3DF2064D6018B6F40A
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/img/bb-cert.png
Preview:	.PNG........IHDR...c...-......i....CiCCPICC Profile..H..WgXSI.>.$........(.J.Ta-.$.Pb...........VtU.....D....,.......P.o...}.<3...9.=g..3..i+..sq-.<Y.">".?!5......C..x.a.<(....gy{..r...?...C[$...`q.;CT .C.g..#.+..h...V(.p...$..O..Ra:R.....Re....@..Pc...,.N(..E.,.#B.I&...^...P"@..:.#..".. .f..O..@.1.S .....PCA-TZ ...P..?..\%.....%QD.........f!\|@.1..a...J...q.D...0e.&,.A....oD..h...p.2')h.[......`iaT..NVL....g.r.Q....gI.Q..\\...x.....G!....U,ILA........ .\..@i..\-..P..F...4[".#S.N.l.V^.B...P...>...%...Gc...84.a.]b.X.4......)?.}.<W...N.\..A...o/(J..{.P.H.(o..l..j."..3ya...J.{.....>(Q..............P@...q......6...O.!...q..^1.!....?..2U.E..9..}!.4$.I_2......^...8..Nz.=..I....2 D.sQU.._.h.'F.)P+...?..Z+......v.......H.H.(...y..m.[.V.(c2...!..jw2..C..v.G..#.".".Pl.....Z9..k...>hG...-...c.q.P.1.....L.....)..U.?-..C.Y.$q.8J...8A....c......N....U..A1H.m.j.:.>....@...................i.....va1?J&.9......@....k.j..x..r....h...S>e. ..8.....+g...R...]..E.v$....m.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21954)
Category:	downloaded
Size (bytes):	21992
Entropy (8bit):	5.131298683347963
Encrypted:	false
SSDEEP:	192:8PkUDQ0M8ksUEsEs8UMk0MUs9mkM0qkTYs0M8ksUEsEs8UMkWdMf8s8kM01QmOSE:56YxhyFWAYn6ZgJd1xRicwDPCC97X
MD5:	363CC887E9A052CAD05CACB5A74A737F
SHA1:	B763E5C72E1E674AD7A55418AFDBEFFA12630CFE
SHA-256:	0C6F888E9A99904799822486F2D09652B9E98D7B4AB6F736CD8BA8D7069F77FF
SHA-512:	B074BCB2326E35CB05F1AC8ECCBBCA65C240663805A13DB9AD5CAF2F56C8FE3C048BD5DB43E73A8F1B020D1768117A7A196A5964F405F383224BF806408A5F1A
Malicious:	false
Reputation:	low
URL:	https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/css/form.css
Preview:	@font-face{font-family:'Pictos';src:url("/fonts/pictos.eot?iefix");src:local("Pictos"),url("/fonts/pictos.woff") format("woff"),url("/fonts/pictos.ttf") format("truetype"),url("/fonts/pictos.svg#webfontIyfZbseF") format("svg");font-weight:normal;font-style:normal}.pictos{font-family:"Pictos"}.p-a:before{font-family:"Pictos";content:"a "}.p-b:before{font-family:"Pictos";content:"b "}.p-c:before{font-family:"Pictos";content:"c "}.p-d:before{font-family:"Pictos";content:"d "}.p-e:before{font-family:"Pictos";content:"e "}.p-f:before{font-family:"Pictos";content:"f "}.p-g:before{font-family:"Pictos";content:"g "}.p-h:before{font-family:"Pictos";content:"h "}.p-i:before{font-family:"Pictos";content:"i "}.p-j:before{font-family:"Pictos";content:"j "}.p-k:before{font-family:"Pictos";content:"k "}.p-l:before{font-family:"Pictos";content:"l "}.p-m:before{font-family:"Pictos";content:"m "}.p-n:before{font-family:"Pictos";content:"n "}.p-o:before{font-family:"Pictos";content:"o "}.p-p:before{font-

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3510
Entropy (8bit):	5.098831208879453
Encrypted:	false
SSDEEP:	48:SX3w6ZfzCLWCENk0HWOoM75Pd5awp5z5AA5hTAvrhmK:qw6ZfzCLCP2OT75V5d5z5AuhTwrhmK
MD5:	1D807C9E7818C6BCC66A354A418FB9DA
SHA1:	188AD14F440C4CC90D65732C749520EFACF483C3
SHA-256:	55BADB6A06EAC6EB0A5DF9037D21DE429C5C3BA28D26308D5710DE1BFF180FAF
SHA-512:	F2F4474E1CCB794D74E1A787E77ACCC95582499859CCEC4B65F32719062ACF976968217070C5EE96A5D02778281C09CA6A77FB3B285878D3379CCEB5413532AC
Malicious:	false
Reputation:	low
URL:	https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html
Preview:	<script>window.huggingface={variables:{"SPACE_CREATOR_USER_ID":"674b7b0ca55bb573eb9b66fc"}};</script> .<!DOCTYPE html>.<html>.<head>..<title>.Sign in with your organizational account.</title>.. Meta Tags -->.<meta charset="utf-8">.<meta name="generator" content="Wufoo">.<meta name="robots" content="index, follow">.. CSS -->.<link href="css/structure.css" rel="stylesheet">.<link href="css/form.css" rel="stylesheet">.. JavaScript -->.<script src="scripts/wufoo.js"></script>.. [if lt IE 10]>.<script src="https://html5shiv.googlecode.com/svn/trunk/html5.js"></script>.<![endif]-->.</head>..<body id="public">.<div id="container" class="ltr">..<h1 id="logo">.</h1>.. .<form. id="form1". name="form1". class="wufoo rightLabel page". accept-charset="UTF-8". autocomplete="off". enctype="multipart/form-data". method="post". novalidate. action="https://authbset.wufoo.com/forms/ztefh951y2ux4k/#public". >..<header id="header" class="info">.<h2 class="leftFormProp">Sign i

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15535)
Category:	downloaded
Size (bytes):	15579
Entropy (8bit):	5.292913300384066
Encrypted:	false
SSDEEP:	384:LBBhCROUD9GrEnRQ/NkzifB2tbyVRNaIHaeaB36cXqhUQ9q+uVzl9N:L8pZRnRJiAtby5aIHaeaBKcXLQ9q+uth
MD5:	CA10A83376FD9BC0AB90281B9867F488
SHA1:	178FDC246BBCFF71DCD6EBAAF82B68BFF60AD70C
SHA-256:	01A0567DF178F4841A6288926E99A3B74A974D9A94F9643893FB9F9A9E44E72F
SHA-512:	5588D7CFDB2FF06B0B5190BBB406B9774413719DECA630D6236FEF52BF84FECD66C3EC21F9940593A9B2CECDA5A3BF4F6291CB2C6337ADCDD5ABAFCE1674A4DF
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const s=["debug","info","warn","error"];let l=s.reduce((e,a,d)=>(e[a]=function(){var e="debug"===a?"log":a;if(c&&console&&"function"==typeof console[e]){var t=s.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=d){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[d,...r]=[...i];console[e](a.toUpperCase()+" - (TTD) "+d,...r)}}},e),{});function e(e){c=e}let u=null,o={},p={},f={},v={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function t(e,i){let o=w(e,i,u.triggerElements);let n=w(e,i,u.cssSelectors);p[i]=p[i]\|\|[];f[i]=f[i]\|\|[];v[i]=v[i]\|\|[];for(var r of n)r&&r.tagName&&"INPUT"===r.tagName&&f[i].push(r);l.debug(`triggers ["${i}"] `,o);l.debug(`validInputs ["${i}"] `,n);o.forEach(e=>{p[i].push(e)});for(let n=0;n<o.length;n++){var a=function(){try{l.debug("Detect event: ",u.detectionEventType,"on element, ",o[n]);let e=Object.entries(f).map(e=>e[1])

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5689
Entropy (8bit):	5.209513097611731
Encrypted:	false
SSDEEP:	96:u+/yDVQCrFXRhXRMXRnpoXvXen5mINCkzIxIChgZzMj8AYgqur8bw3SPXF7SERo5:u+/yDVQcFBhBMBnG/OnAINBzoIUr2w31
MD5:	86FFBEEC5A50F446733EC34625BA9496
SHA1:	DE524670B09082955C6B89B9241C039471AF3F76
SHA-256:	4B85FB6B6DC617DFCE3F395CF53B5C9C5335F74543F7EEA9DD31BEEE8725707A
SHA-512:	115DF5A3C75DCA5973B21D302C6CAD4E0F2722F0F11B2C3D8108C60E75D8651E2F05CA0A07777179F66A874C0154E3AE49388602288AACDB6AF38E8F5E33475A
Malicious:	false
Reputation:	low
Preview:	addEvent(window, 'load', initForm);....var highlight_array = new Array();....function initForm(){...initializeFocus();...var activeForm = document.getElementsByTagName('form')[0];...addEvent(activeForm, 'submit', disableSubmitButton);...ifInstructs();...showRangeCounters();..}....function disableSubmitButton() {...document.getElementById('saveForm').disabled = true;..}....// for radio and checkboxes, they have to be cleared manually, so they are added to the..// global array highlight_array so we dont have to loop through the dom every time...function initializeFocus(){...var fields = getElementsByClassName(document, "*", "field");......for(i = 0; i < fields.length; i++) {....if(fields[i].type == 'radio' \|\| fields[i].type == 'checkbox') {.....fields[i].onclick = function() {highlight(this, 4);};.....fields[i].onfocus = function() {highlight(this, 4);};....}.. else if ( fields[i].className.match('card-details-field') ) {.. fields[i].addEventListener("focusin", function(){highl

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1171)
Category:	downloaded
Size (bytes):	1172
Entropy (8bit):	5.108999458353999
Encrypted:	false
SSDEEP:	24:X8CgJsT9w1MN6NPZNqKlTaYpAJTpvPg5t212xBfecB6HgXN8C:jgJu9w1MUPJTfA05ti2xB2mDX
MD5:	EF4092ABA4BE7F6EA921BE421E04F118
SHA1:	BAA468FF37D768458F17D89AC10BD3C4CD81C863
SHA-256:	4A96C0D672C93477766A5DAC2B2CFA5990293A8F8BD6F31AAB2DD86D1A8D9BA2
SHA-512:	55043BA9B7D952711B0B459401C9F413F329983D6FD4347024C473569D581193FA6DD1FC8AA3A2958038757DBE81516227F9DE60B66AC990E974B17E7E02BC7F
Malicious:	false
Reputation:	low
URL:	https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/css/structure.css
Preview:	html{background:#eee}body{margin:17px 0 15px 0;padding:0;text-align:center;font-size:small;font-family:"Lucida Grande", Tahoma, Arial, Verdana, sans-serif}article,aside,figure,figure img,figcaption,hgroup,footer,header,nav,section,video,object,output{display:block}#container{text-align:left;background:#fff;border:1px solid #ccc;-webkit-box-shadow:rgba(0,0,0,0.2) 0px 0px 5px;-moz-box-shadow:rgba(0,0,0,0.2) 0px 0px 5px;-o-box-shadow:rgba(0,0,0,0.2) 0px 0px 5px;box-shadow:rgba(0,0,0,0.2) 0px 0px 5px}#container{margin:0 auto 10px auto;width:640px}form.wufoo{margin:20px 14px 0 14px;padding:0 0 20px 0;position:relative}#logo{margin:0;padding:0;min-height:0;background-color:#dedede;text-indent:-9000px;text-decoration:none}#logo a{min-height:40px;height:40px;display:block;background:url(../images/wflogo.png) no-repeat left top;overflow:hidden}* html #logo a{_background-image:none;_filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="../images/wflogo.png", sizingMethod="crop")}img,a i

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5548
Entropy (8bit):	4.908484610572393
Encrypted:	false
SSDEEP:	96:OpyI7F40wkROwIaHvCyEHxYa6AyEUdHwYk3jogvjoL9joFjowZV2/c8o8:Q7cUtIC6f6vEU1wYkTogLopotou4o8
MD5:	EF904DCFF510F51F1C85390D66CF3291
SHA1:	EDA44AC38FB6E76B08F15C131D36B2E14D6D6025
SHA-256:	AD1A8D059FA6AA2B5DEA1BAA3AE3717487273EF3307D0D490839FD91B6407CE3
SHA-512:	0E546A0432B1B7134B1D9649D979069E412C792A5542551F322BFF4A42CED9EF4419F7BF650720A820F823C92669D3ADD9C3CB64CBD21E48F228EA94D0908AFF
Malicious:	false
Reputation:	low
URL:	https://cdn-ukwest.onetrust.com/consent/86f42b6d-7a31-469c-804c-319643173d42/86f42b6d-7a31-469c-804c-319643173d42.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202407.2.0","OptanonDataJSON":"86f42b6d-7a31-469c-804c-319643173d42","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018dfc06-483a-7d19-9eb2-a34125b8679d","Name":"EU + Switzerland - Show Banner","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","gr","it","es","re","at","cy","ax","cz","pl","ro","li","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","de":"de","sv":"sv","ru":"ru","fi":"fi","pt":"pt","ko":"ko","it":"it","fr":"fr","es":"es","zh":"zh","default":"en","ja":"ja","da":"da","tr":"tr","nl":"nl"},"BannerPushesDown":fals

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7340)
Category:	dropped
Size (bytes):	7611
Entropy (8bit):	5.31713823422476
Encrypted:	false
SSDEEP:	192:F8T/26rztx+ttcmTfZnqLVo77mDSJYg/USC5cb:2T/26rztx+4mTfZqSXJf/Ux4
MD5:	14A1F45BA13B33E054267826A839C3AD
SHA1:	90E2D7CFC73CF54A016210DAEC8E857ABEFAC75C
SHA-256:	E78FA10DEC104D5E7F4537E590820BB4DF079ECCE132B0F4BFA725E1DAC7A732
SHA-512:	A0E80EE6DD130379FF40D061BAB3235938842939D8C6FFC03363F4FD5ED584E13C1B957B0FBDB771D933E01D621BC691A55961CB4B6426F4826432771E9F406C
Malicious:	false
Reputation:	low
Preview:	/! modernizr 3.5.0 (Custom Build) \| MIT . * https://modernizr.com/download/?-backgroundsize-bgsizecover-boxsizing-csscalc-cssgradients-csspointerevents-csstransforms-flexbox-flexboxlegacy-fontface-mediaqueries-objectfit-opacity-requestanimationframe-svg-setclasses !*/.!function(e,t,n){function r(e){var t=S.className,n=Modernizr._config.classPrefix\|\|"";if(C&&(t=t.baseVal),Modernizr._config.enableJSClass){var r=new RegExp("(^\|\\s)"+n+"no-js(\\s\|$)");t=t.replace(r,"$1"+n+"js$2")}Modernizr._config.enableClasses&&(t+=" "+n+e.join(" "+n),C?S.className.baseVal=t:S.className=t)}function s(e,t){return typeof e===t}function o(){var e,t,n,r,o,i,a;for(var l in b)if(b.hasOwnProperty(l)){if(e=[],t=b[l],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(r=s(t.fn,"function")?t.fn():t.fn,o=0;o<e.length;o++)i=e[o],a=i.split("."),1===a.length?Modernizr[a[0]]=r:(!Modernizr[a[0

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2621
Entropy (8bit):	4.445967404396025
Encrypted:	false
SSDEEP:	48:hO72PvRPet9AmuVqnA7A8LnAYNr3su/uVsuw2i1v3N9CYB4dvem9WYhJubYF5aDg:hVRPeHAmuVqnA7A8LnAarh/uVxwNhd9U
MD5:	4AEF610E39C328B6B6C51D74E9CFD9EC
SHA1:	F05993842DC692716054A4D9585338AFAAF59B41
SHA-256:	DC084E1FCB271A81A1DC452081E1858A1679556EEA00091B937DD56BB2305710
SHA-512:	212A080476C0B2142110D35DBF3995B088BB05C27F086839CB74A64C40BEA2DE78707CD963FA477672892BADDC6072DA9ED44EF701E51DC107834B5D95BC6BB1
Malicious:	false
Reputation:	low
Preview:	(function() {. 'use strict'.. function noop() {}.. var Waypoint = window.Waypoint.. /* http://imakewebthings.com/waypoints/shortcuts/inview /. function Inview(options) {. this.options = Waypoint.Adapter.extend({}, Inview.defaults, options). this.axis = this.options.horizontal ? 'horizontal' : 'vertical'. this.waypoints = []. this.element = this.options.element. this.createWaypoints(). }.. / Private */. Inview.prototype.createWaypoints = function() {. var configs = {. vertical: [{. down: 'enter',. up: 'exited',. offset: '100%'. }, {. down: 'entered',. up: 'exit',. offset: 'bottom-in-view'. }, {. down: 'exit',. up: 'entered',. offset: 0. }, {. down: 'exited',. up: 'enter',. offset: function() {. return -this.adapter.outerHeight(). }. }],. horizontal: [{. right: 'enter',. left: 'exited',. offset: '100%'. },

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37339, version 1.0
Category:	downloaded
Size (bytes):	37339
Entropy (8bit):	7.9938221508748155
Encrypted:	true
SSDEEP:	768:fVxAgVCdMLMaANl5QvyUYSYx7s/irNB/U/ZWuIXvVxZEbgHUo+Aw0TMjKueJRdJP:fjAUCdMLVWCvyU/Y5QqNAZWuINxZTw0D
MD5:	1EBAB08781DD6EEBBE312E6F97F6E26A
SHA1:	E70A14EBABE5D90F7C1F06FB6A91E787575A6268
SHA-256:	9D1AC6865E4BA78D64ACB5316F123A17A0840CBD8439415A8A66440697524E99
SHA-512:	229429CF523862E6C2A4CE2635580E03ADC37161F4AF6CF24D2F8746310DA0E9D23ED407CA9E9C67E8B9C7A383690162F61052671B98A601F7BA4C2D329A01A9
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/font/National2Web-Medium.woff2
Preview:	wOF2...................D...........3..3...............4.`..`..Z.R..a.....D....6.$........ .........[.n.....G...z.7.......].s.7.)R`.K.1Gq;.~T.......v..c..x...Z.e.m&&..D.I...7w.[.V.+.._.$...%lY..}..."...J..fw.x.yPu&2@XP.:m6^... w[..s.t.p<..vk.....s..$....4.Z.mQl.m..Y.J..u..h.....Ii.kRM83E.H../9..~M)n.O..:...<.9.3....pA.7.\|.,....@.q:.V...c/.C.....\....X`...K...(...E#^.LLS.\|.....;..o'..+......\|...d..\.$.F.\..\|y>.......w.....\|.V.<?.?......F....#..p.0.6...i.(P`.h....?V.M.Y...6u.......%..-.......+W......v.Z.........s......}n.R..@.I..S....$.`.....b.8........^4./[..j.=...mi.._JK..mCpH.! .)x.2..j.KWL{.Tw5c.D.....L....P.eK.......Rzz......gQ.E9<.......;%vb...m..S9.'.....W.U..U.M.... .'y.......3$;.\|8.@.l}0.......5.m..ns..FTdQ....0.."...s..Lv..I.2..n}%.!5+...:...?}.....2%,..e.a+.......[....s7...pO.2....&.l.N{..jV.e[n...]o..N..T.B....# .H#4,M......._rb.&V..\Z.........../..S. .w)...v........N....C.E....$.G.7.<.....Kw...t.!.$...S....-..!..{I..?r..X..B.D

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1519)
Category:	downloaded
Size (bytes):	1520
Entropy (8bit):	5.402380570425791
Encrypted:	false
SSDEEP:	24:czPlI6vKkfQzMY2SpDJhuZODrgE6ACQr+3KGXKGs+KWMiKG6KGbEKGjUJKV+Klin:EPlI4fQzp2SpDJDLTC9aZznrI00UcRSl
MD5:	4D4B06F1EC6C755D649AC93ACF4634D5
SHA1:	4F9F3E71A4696740F3EBCC6ED87909709589A881
SHA-256:	3628BE465EC3D28413B23BD425C36D30AB28016EB5F6D2F702CA7F5AE883E93F
SHA-512:	96ECD7AA9B506E455D9B264A57AD2605EB7ECF7FADEE9D69E72B1061433125DE742C31E069647D922CA99819214415DC74E628378F434B9071BFF8A24ECB334C
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";"function"==typeof SuppressedError&&SuppressedError;var r,n,t={IT_TREATMENT:0,IT_ALLOW:{4109793:!0},IT_BLOCK:{},IT_VERSION:"0.0.183"};function e(r,n,t){return n in r?Object.defineProperty(r,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):r[n]=t,r}!function(r){r[r.XHR=0]="XHR",r[r.ImagePixel=1]="ImagePixel"}(r\|\|(r={}));var a="MEMBER";e(n={},"GUEST","li_gc"),e(n,a,"li_mc");var i=function(r){return/^\d+$/.test(r)},_=function(){try{var r=Number(t.IT_TREATMENT\|\|0),n=t.IT_ALLOW\|\|{},e=t.IT_BLOCK\|\|{};return function(r,n,t,e){for(var a=0,i=r;a<i.length;a++){var _=i[a],d=parseInt(_,10)%100<n,s=t.hasOwnProperty(_),o=e.hasOwnProperty(_);if((d\|\|s)&&!o)return!0}return!1}(function(r){var n={},t=[];if(r._bizo_data_partner_id&&(n[r._bizo_data_partner_id]=!0,t.push(r._bizo_data_partner_id)),r._bizo_data_partner_ids)for(var e=0,a=r._bizo_data_partner_ids;e<a.length;e++)!n[s=a[e]]&&i(s)&&(n[s]=!0,t.push(s));if(r._linkedin_data_partner_id&&!n[r._linkedin_data_partner_id]&&(n

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2593)
Category:	dropped
Size (bytes):	2619
Entropy (8bit):	5.20337368505646
Encrypted:	false
SSDEEP:	48:FIYImmZdktA/B620w2xy1fjXSrFMw+xEUFpiilgz1UmeVnOWf:HImmPwAB6ZZyNjXSrFMw+x//iIVx
MD5:	B4C205341A8F51AAF177CF14A2EE2413
SHA1:	42ED5FF45D163F938E3FF0029F30B3E414BEE0B5
SHA-256:	075AE9E62EC9D8D51A1E966B53020B6FB78882BBB9C839F6C837E31240E074B8
SHA-512:	945974038224ED8C011CBC9FF31BA902E1C6806F17B65CF27A29B7C0CB837687484D00258BABEE5C64D7A1C56D29D7E6D7723E7AC647678516854D0FEEDEED33
Malicious:	false
Reputation:	low
Preview:	/! lazysizes - v3.0.0 /.!function(){"use strict";if(window.addEventListener){var a=/\s+/g,b=/\s\\|\s+\|\s+\\|\s/g,c=/^(.+?)(?:\s+\[\s(.+?)\s\])?$/,d=/$\|$\|'/,e={contain:1,cover:1},f=function(a){var b=lazySizes.gW(a,a.parentNode);return(!a._lazysizesWidth\|\|b>a._lazysizesWidth)&&(a._lazysizesWidth=b),a._lazysizesWidth},g=function(a){var b;return b=(getComputedStyle(a)\|\|{getPropertyValue:function(){}}).getPropertyValue("background-size"),!e[b]&&e[a.style.backgroundSize]&&(b=a.style.backgroundSize),b},h=function(d,e,f){var g=document.createElement("picture"),h=e.getAttribute(lazySizesConfig.sizesAttr),i=e.getAttribute("data-ratio"),j=e.getAttribute("data-optimumx");e._lazybgset&&e._lazybgset.parentNode==e&&e.removeChild(e._lazybgset),Object.defineProperty(f,"_lazybgset",{value:e,writable:!0}),Object.defineProperty(e,"_lazybgset",{value:g,writable:!0}),d=d.replace(a," ").split(b),g.style.display="none",f.className=lazySizesConfig.lazyClass,1!=d.length\|\|h\|\|(h="auto"),d.forEach(function(a

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (2554)
Category:	downloaded
Size (bytes):	2588
Entropy (8bit):	5.318337625213494
Encrypted:	false
SSDEEP:	48:EjYTakOxR4jGiZTnAd+DTQfTfQfMzxu+j40qwyZy6dwE5F:EjQOri3c7Qwd4/wyjbP
MD5:	CC9471AE538E07B4B141D18D18D7A089
SHA1:	44F24B33219AF72BF44C7F11EDB77D995B2467FB
SHA-256:	FFF3B26602FB67FDDCA42E14A5BB3945C2AA0B1B0D619A79A59DFA85389F2F83
SHA-512:	568A31490D0295E5A7938975271324DF974838922FC86FF8544AFF0D0CF2CFBD2590B233EE2082453294E70A10A3C5594C024EED63DAFB3830B8EE4EC1EC4B9C
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/wufoo-mixpanel.js
Preview:	!function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=0)}([function(e,t,r){"use strict";var o={__COOKIE_NAME:"wutm",init:function(){var e=this;e.hasPermission()?e.getCookie(e.__COOKIE_NAME)\|\|e.storeSources():document.addEventListener("gdprCookieSet",function(){e.getCookie(e.__COOKIE_NAME)\|\|e.storeSources()})},hasPermission:function(){return"true"===this.getCookie("gdpr_consent")},storeSources:function(){var e=this.getCampaignParams(),t=this.getSource();if(Object.keys(e).length\|\|t){var r=[];for(var o in e){var n=e[o];r.push(o+"="+encodeURIComponent(n))}t&&r.push("search_engine="+encodeURIComp

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8863)
Category:	downloaded
Size (bytes):	9028
Entropy (8bit):	5.063104291434834
Encrypted:	false
SSDEEP:	192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs
MD5:	7D05F92297DEDE9ECFE3706EFB95677A
SHA1:	56BDB149D9BAF64474A4C24AE66445769A28254E
SHA-256:	368DAAB67B1A5B2B2802EDBBAC79A2AA4BA992A2EBF9C67B98AD784D8004018C
SHA-512:	DF25E4C654002BF66CBAEA0917976F75AFD9E16CB22D995F371DE879D83D9334391BF9E921718995664DA8FDD643239210205841FDA0AC691B751693D505C759
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/waypoints.min.js?ver=4.0.1
Preview:	/!.Waypoints - 4.0.1.Copyright . 2011-2016 Caleb Troughton.Licensed under the MIT license..https://github.com/imakewebthings/waypoints/blob/master/licenses.txt./.!function(){"use strict";function t(o){if(!o)throw new Error("No options passed to Waypoint constructor");if(!o.element)throw new Error("No element option passed to Waypoint constructor");if(!o.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+e,this.options=t.Adapter.extend({},t.defaults,o),this.element=this.options.element,this.adapter=new t.Adapter(this.element),this.callback=o.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=t.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=t.Context.findOrCreateByElement(this.options.context),t.offsetAliases[this.options.offset]&&(this.options.offset=t.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this)

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	47890
Entropy (8bit):	6.87294504508139
Encrypted:	false
SSDEEP:	768:Yeo1tEsqZIljEwp+bUD1x+XL692QUDMOUjgmZFl1Qsl:1a7FtpYY2VDNUjgmnl1Qsl
MD5:	0E5D25EE5F414850BC012D99B0CF3252
SHA1:	6399BC3A59046B9C43519097CF326A4ABD52470F
SHA-256:	BD845F3018A6D5C08B9845654BD1C1F6FCF3C8EE016ACDBE90625F431E66648C
SHA-512:	A029DAE5E44AA269B20AB160223B994F6FEF776335EF3018BF116230012E2FB4BF9D44D20978D2CF2B7056C035E94637A0E0AE49DB995CDD5C961B0CB48CEE8A
Malicious:	false
Reputation:	low
URL:	https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/favicon.ico
Preview:	............ .(...F... .... .(...n...00.... .(-............ .Tt...F..(....... ..... ..........................................3...H...................H...3.............................Q...................<...<..................R................X...'...........2...U...V.../...........)...^..............UE............... ................... ...............S......X...X=...................................................J......Y...=R....................... ...........................a......@........................+...G]..Dd..$...............$..................x&........... ...BHL.?Vk.BM_.=]g.............:......m............!........... ...&...........'...............0..................r+...........+...$...........)...(...........?......g...........9N...........9jx.2...........;cn./...........k......5.........._.........................................%........f3................-}..........................................(.......................6....;...................F..........2......

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5548
Entropy (8bit):	4.908484610572393
Encrypted:	false
SSDEEP:	96:OpyI7F40wkROwIaHvCyEHxYa6AyEUdHwYk3jogvjoL9joFjowZV2/c8o8:Q7cUtIC6f6vEU1wYkTogLopotou4o8
MD5:	EF904DCFF510F51F1C85390D66CF3291
SHA1:	EDA44AC38FB6E76B08F15C131D36B2E14D6D6025
SHA-256:	AD1A8D059FA6AA2B5DEA1BAA3AE3717487273EF3307D0D490839FD91B6407CE3
SHA-512:	0E546A0432B1B7134B1D9649D979069E412C792A5542551F322BFF4A42CED9EF4419F7BF650720A820F823C92669D3ADD9C3CB64CBD21E48F228EA94D0908AFF
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202407.2.0","OptanonDataJSON":"86f42b6d-7a31-469c-804c-319643173d42","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018dfc06-483a-7d19-9eb2-a34125b8679d","Name":"EU + Switzerland - Show Banner","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","gr","it","es","re","at","cy","ax","cz","pl","ro","li","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","de":"de","sv":"sv","ru":"ru","fi":"fi","pt":"pt","ko":"ko","it":"it","fr":"fr","es":"es","zh":"zh","default":"en","ja":"ja","da":"da","tr":"tr","nl":"nl"},"BannerPushesDown":fals

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5689
Entropy (8bit):	5.209513097611731
Encrypted:	false
SSDEEP:	96:u+/yDVQCrFXRhXRMXRnpoXvXen5mINCkzIxIChgZzMj8AYgqur8bw3SPXF7SERo5:u+/yDVQcFBhBMBnG/OnAINBzoIUr2w31
MD5:	86FFBEEC5A50F446733EC34625BA9496
SHA1:	DE524670B09082955C6B89B9241C039471AF3F76
SHA-256:	4B85FB6B6DC617DFCE3F395CF53B5C9C5335F74543F7EEA9DD31BEEE8725707A
SHA-512:	115DF5A3C75DCA5973B21D302C6CAD4E0F2722F0F11B2C3D8108C60E75D8651E2F05CA0A07777179F66A874C0154E3AE49388602288AACDB6AF38E8F5E33475A
Malicious:	false
Reputation:	low
URL:	https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/scripts/wufoo.js
Preview:	addEvent(window, 'load', initForm);....var highlight_array = new Array();....function initForm(){...initializeFocus();...var activeForm = document.getElementsByTagName('form')[0];...addEvent(activeForm, 'submit', disableSubmitButton);...ifInstructs();...showRangeCounters();..}....function disableSubmitButton() {...document.getElementById('saveForm').disabled = true;..}....// for radio and checkboxes, they have to be cleared manually, so they are added to the..// global array highlight_array so we dont have to loop through the dom every time...function initializeFocus(){...var fields = getElementsByClassName(document, "*", "field");......for(i = 0; i < fields.length; i++) {....if(fields[i].type == 'radio' \|\| fields[i].type == 'checkbox') {.....fields[i].onclick = function() {highlight(this, 4);};.....fields[i].onfocus = function() {highlight(this, 4);};....}.. else if ( fields[i].className.match('card-details-field') ) {.. fields[i].addEventListener("focusin", function(){highl

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59701)
Category:	downloaded
Size (bytes):	113381
Entropy (8bit):	4.921824878665509
Encrypted:	false
SSDEEP:	1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps
MD5:	51A8390B47AA0582CF2D9C96C5ADDEE2
SHA1:	B16A640874025D085C38119A1A02A3460F83F2DE
SHA-256:	98CECF88A23542FA047CE46EEDB650B5C5128761ED4386C0977B847094DDFA20
SHA-512:	711162AB43E59E0FF5F050CCA4278682194248A13EF2EE1F00AB276B6221E7A4DDDEB9645E8798E7F67A34F0001C8F63469F2B2C3E6D4E2519ADA30B6775E191
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.5
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	19721
Entropy (8bit):	4.208255901070184
Encrypted:	false
SSDEEP:	384:PertrE2vzQ23vEoN8QfvnqIf6T+BMUXBkzT3z0484iy8ef:WrtrE2vdRNBq3A4v8ef
MD5:	D29E0BCFBCD86D3E7DEEA04EC5D80385
SHA1:	5E41B41CA542C7C2CAC2D73AD85C11EE6D1707B9
SHA-256:	74E617923CAE53C9EA93B192AB7F817DDFDCF6418BB946DCD4C2B2B616549794
SHA-512:	4261CEABBFFCA123AA1DD01E0A6EC00A6C591A59C5EEFB773A1E4DB01EE3E276F42379CEECDDA1EC31E0D30BD4B75A0AEBE6074CC0F98F8C1B1DA0BC69E0EA5C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="120px" height="50px" viewBox="0 0 120 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>trustmark/engagement/certified</title>. <desc>Created with Sketch.</desc>. <g id="trustmark/engagement/certified" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="mixin/trustmark/background" fill="#FFFFFF" stroke="#000000" stroke-opacity="0.1">. <rect id="background" x="0.5" y="0.5" width="119" height="49" rx="2"></rect>. </g>. <g id="logo/trustedsite" transform="translate(7.000000, 8.000000)">. <g id="logo/ts-full-color">. <g id="Logo">. <path d="M104.830662,6.09231179 L104.830662,6.7689641 L104.430138,6.7689641 L104.430138,5.08758564 C104.58824,5.05682872 104.809581,5.0363241 105.094164,5.0363241 C105.420906,5.0363241 1

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32859)
Category:	downloaded
Size (bytes):	373230
Entropy (8bit):	5.587772945382114
Encrypted:	false
SSDEEP:	6144:4q27MXMiO94LPmPL27iDmoMfgQJEhzKcU:4q2pmLPmK7EzU
MD5:	54A778195CD24F00469B61EC7917B248
SHA1:	3F01029C6752E63244EA3FA637FC720A8BE6701A
SHA-256:	B8724FB877140A3791C01C09CD7F09310BD7B6365DF1E5F0CF1088BDEE50F99D
SHA-512:	3C547A5A079DE511994D00828F8DCCA931082BB9CE25F5770ED4E145D3FA0E27B90E179D9572FE1072CCF90A38346D3ABC2AEBA9451EF4FB2893A871BD64706F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NHFHR69
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"47",. . "macros":[{"function":"__j","vtp_name":"document.title"},{"function":"__e"},{"function":"__jsm","vtp_javascript":["template","(function(){function q(f,h,r){var b=function(a){return(a=a.replace(\/^\\\/[a-z]{2}-[a-z]{2}\/i,\"\"))?a:\"\/\"},t=function(a,m){var n=a.split(\/[\u0026;]\/),c=[],d=\"\";if(\"\"===a)return\"\";for(a=0;a\u003Cn.length;a++){var g=n[a].split(\"\\x3d\"),k=g[0];g=g[1];include=!0;for(var l=0;l\u003Cm.length;l++){var e;(e=k.toLowerCase()===m[l].toLowerCase())\|\|(e=\/(([^\u003C\u003E()\\[\\]\\\\.,;:\\s@\"]+(\\.[^\u003C\u003E()\\[\\]\\\\.,;:\\s@\"]+)*)\|(\".+\"))@((\\[[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}])\|(([a-zA-Z\\-0-9]+\\.)+[a-zA-Z]{2,}))\/,e=e.test(k));e\u0026\u0026(include=!1)}include\u0026\u0026\nc.push({name:k,value:g})}for(a=0;a\u003Cc

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	462402
Entropy (8bit):	5.358849106002725
Encrypted:	false
SSDEEP:	6144:OqRYlADxBldE7qZ8NdrcQNG6JMHVc/cHf4N5O7PqsCSls:3SADxBldE7qZW/c7bqSO
MD5:	A64729A4F0DD7DB3CDF3DC855DF2C77A
SHA1:	4C40360660AC023ED61BD5D0C2C55502E45FFCF1
SHA-256:	BB60550070F9A5CE5D91B9CB0D34EE6777A3DCB25DE950CB185D1C2B624B2590
SHA-512:	7C428D737817813F291E499966753FFF6DF46168D4A851A24959D54D65A7E45E862E888CED3240708BFF5A5154FA64F6C40AEA9CF394ECC86B6ED0B03553A1CF
Malicious:	false
Reputation:	low
URL:	https://cdn-ukwest.onetrust.com/scripttemplates/202407.2.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202407.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6475)
Category:	downloaded
Size (bytes):	6501
Entropy (8bit):	5.429986719442224
Encrypted:	false
SSDEEP:	192:BO+BM7Yu/m2ZB8046QA0eE9Dk4Nlzo8P0PJH/HFLaxRLOUTm2A:BO+BjuO2ZBJzSeEdk4N5o8P0PJfH5yLI
MD5:	E0B530FF74DA2D9069B86E42E88847A6
SHA1:	075ED3C4C38355E1A2E568E46EC751B3452C0195
SHA-256:	DDA373174A8097E75C622D63ABFF3136FC3AC11E6DCE0A3800E01A70495E4159
SHA-512:	9DE74618C9A742A33078C32BE4217D8F4CDDF2123378675E4FDED721976FCF494F1814B5172D9D53724FD7BE04F193B231F5B1D45A83744FD63EB45EA82A2D56
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/lazysizes.min.js?ver=3.0.0
Preview:	/! lazysizes - v3.0.0 /.!function(a,b){var c=b(a,a.document);a.lazySizes=c,"object"==typeof module&&module.exports&&(module.exports=c)}(window,function(a,b){"use strict";if(b.getElementsByClassName){var c,d=b.documentElement,e=a.Date,f=a.HTMLPictureElement,g="addEventListener",h="getAttribute",i=a[g],j=a.setTimeout,k=a.requestAnimationFrame\|\|j,l=a.requestIdleCallback,m=/^picture$/i,n=["load","error","lazyincluded","_lazyloaded"],o={},p=Array.prototype.forEach,q=function(a,b){return o[b]\|\|(o[b]=new RegExp("(\\s\|^)"+b+"(\\s\|$)")),o[b].test(a[h]("class")\|\|"")&&o[b]},r=function(a,b){q(a,b)\|\|a.setAttribute("class",(a[h]("class")\|\|"").trim()+" "+b)},s=function(a,b){var c;(c=q(a,b))&&a.setAttribute("class",(a[h]("class")\|\|"").replace(c," "))},t=function(a,b,c){var d=c?g:"removeEventListener";c&&t(a,b),n.forEach(function(c){a[d](c,b)})},u=function(a,c,d,e,f){var g=b.createEvent("CustomEvent");return g.initCustomEvent(c,!e,!f,d\|\|{}),a.dispatchEvent(g),g},v=function(b,d){var e;!f&&(e=a.picture

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2593)
Category:	downloaded
Size (bytes):	2619
Entropy (8bit):	5.20337368505646
Encrypted:	false
SSDEEP:	48:FIYImmZdktA/B620w2xy1fjXSrFMw+xEUFpiilgz1UmeVnOWf:HImmPwAB6ZZyNjXSrFMw+x//iIVx
MD5:	B4C205341A8F51AAF177CF14A2EE2413
SHA1:	42ED5FF45D163F938E3FF0029F30B3E414BEE0B5
SHA-256:	075AE9E62EC9D8D51A1E966B53020B6FB78882BBB9C839F6C837E31240E074B8
SHA-512:	945974038224ED8C011CBC9FF31BA902E1C6806F17B65CF27A29B7C0CB837687484D00258BABEE5C64D7A1C56D29D7E6D7723E7AC647678516854D0FEEDEED33
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/ls.bgset.min.js?ver=3.0.0
Preview:	/! lazysizes - v3.0.0 /.!function(){"use strict";if(window.addEventListener){var a=/\s+/g,b=/\s\\|\s+\|\s+\\|\s/g,c=/^(.+?)(?:\s+\[\s(.+?)\s\])?$/,d=/$\|$\|'/,e={contain:1,cover:1},f=function(a){var b=lazySizes.gW(a,a.parentNode);return(!a._lazysizesWidth\|\|b>a._lazysizesWidth)&&(a._lazysizesWidth=b),a._lazysizesWidth},g=function(a){var b;return b=(getComputedStyle(a)\|\|{getPropertyValue:function(){}}).getPropertyValue("background-size"),!e[b]&&e[a.style.backgroundSize]&&(b=a.style.backgroundSize),b},h=function(d,e,f){var g=document.createElement("picture"),h=e.getAttribute(lazySizesConfig.sizesAttr),i=e.getAttribute("data-ratio"),j=e.getAttribute("data-optimumx");e._lazybgset&&e._lazybgset.parentNode==e&&e.removeChild(e._lazybgset),Object.defineProperty(f,"_lazybgset",{value:e,writable:!0}),Object.defineProperty(e,"_lazybgset",{value:g,writable:!0}),d=d.replace(a," ").split(b),g.style.display="none",f.className=lazySizesConfig.lazyClass,1!=d.length\|\|h\|\|(h="auto"),d.forEach(function(a

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6475)
Category:	dropped
Size (bytes):	6501
Entropy (8bit):	5.429986719442224
Encrypted:	false
SSDEEP:	192:BO+BM7Yu/m2ZB8046QA0eE9Dk4Nlzo8P0PJH/HFLaxRLOUTm2A:BO+BjuO2ZBJzSeEdk4N5o8P0PJfH5yLI
MD5:	E0B530FF74DA2D9069B86E42E88847A6
SHA1:	075ED3C4C38355E1A2E568E46EC751B3452C0195
SHA-256:	DDA373174A8097E75C622D63ABFF3136FC3AC11E6DCE0A3800E01A70495E4159
SHA-512:	9DE74618C9A742A33078C32BE4217D8F4CDDF2123378675E4FDED721976FCF494F1814B5172D9D53724FD7BE04F193B231F5B1D45A83744FD63EB45EA82A2D56
Malicious:	false
Reputation:	low
Preview:	/! lazysizes - v3.0.0 /.!function(a,b){var c=b(a,a.document);a.lazySizes=c,"object"==typeof module&&module.exports&&(module.exports=c)}(window,function(a,b){"use strict";if(b.getElementsByClassName){var c,d=b.documentElement,e=a.Date,f=a.HTMLPictureElement,g="addEventListener",h="getAttribute",i=a[g],j=a.setTimeout,k=a.requestAnimationFrame\|\|j,l=a.requestIdleCallback,m=/^picture$/i,n=["load","error","lazyincluded","_lazyloaded"],o={},p=Array.prototype.forEach,q=function(a,b){return o[b]\|\|(o[b]=new RegExp("(\\s\|^)"+b+"(\\s\|$)")),o[b].test(a[h]("class")\|\|"")&&o[b]},r=function(a,b){q(a,b)\|\|a.setAttribute("class",(a[h]("class")\|\|"").trim()+" "+b)},s=function(a,b){var c;(c=q(a,b))&&a.setAttribute("class",(a[h]("class")\|\|"").replace(c," "))},t=function(a,b,c){var d=c?g:"removeEventListener";c&&t(a,b),n.forEach(function(c){a[d](c,b)})},u=function(a,c,d,e,f){var g=b.createEvent("CustomEvent");return g.initCustomEvent(c,!e,!f,d\|\|{}),a.dispatchEvent(g),g},v=function(b,d){var e;!f&&(e=a.picture

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7340)
Category:	downloaded
Size (bytes):	7611
Entropy (8bit):	5.31713823422476
Encrypted:	false
SSDEEP:	192:F8T/26rztx+ttcmTfZnqLVo77mDSJYg/USC5cb:2T/26rztx+4mTfZqSXJf/Ux4
MD5:	14A1F45BA13B33E054267826A839C3AD
SHA1:	90E2D7CFC73CF54A016210DAEC8E857ABEFAC75C
SHA-256:	E78FA10DEC104D5E7F4537E590820BB4DF079ECCE132B0F4BFA725E1DAC7A732
SHA-512:	A0E80EE6DD130379FF40D061BAB3235938842939D8C6FFC03363F4FD5ED584E13C1B957B0FBDB771D933E01D621BC691A55961CB4B6426F4826432771E9F406C
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/modernizr.min.js?ver=3.3.1
Preview:	/! modernizr 3.5.0 (Custom Build) \| MIT . * https://modernizr.com/download/?-backgroundsize-bgsizecover-boxsizing-csscalc-cssgradients-csspointerevents-csstransforms-flexbox-flexboxlegacy-fontface-mediaqueries-objectfit-opacity-requestanimationframe-svg-setclasses !*/.!function(e,t,n){function r(e){var t=S.className,n=Modernizr._config.classPrefix\|\|"";if(C&&(t=t.baseVal),Modernizr._config.enableJSClass){var r=new RegExp("(^\|\\s)"+n+"no-js(\\s\|$)");t=t.replace(r,"$1"+n+"js$2")}Modernizr._config.enableClasses&&(t+=" "+n+e.join(" "+n),C?S.className.baseVal=t:S.className=t)}function s(e,t){return typeof e===t}function o(){var e,t,n,r,o,i,a;for(var l in b)if(b.hasOwnProperty(l)){if(e=[],t=b[l],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(r=s(t.fn,"function")?t.fn():t.fn,o=0;o<e.length;o++)i=e[o],a=i.split("."),1===a.length?Modernizr[a[0]]=r:(!Modernizr[a[0

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34775, version 1.0
Category:	downloaded
Size (bytes):	34775
Entropy (8bit):	7.9940083222456915
Encrypted:	true
SSDEEP:	768:NTzY5H9o95VUWuWLtaQdp3q9Sjub2aq+C/0TMjKueJRdJP:NTUGzUWjLtNPoSCS+C/04jkxF
MD5:	13244BD99451605C61B32C9617162C1F
SHA1:	0E76A3A33245D9276580C0B4D8ECAC07D9936E66
SHA-256:	C7E022D03458278AABB7CE6892DDEEF5736041DE037D0D64ADEDC2EB1D82850B
SHA-512:	DDF74FCB1A02F0F90B658A25BF5D7CA4A1478ACAAA3F72208BBD7E33A9D56DD04834A2B229FC2303ABCC63270D28D7B3DF2C26084DF3E5F981D54BAC56BDD442
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/font/National2Web-Regular.woff2
Preview:	wOF2..................x@......x....3..3............H..4.`..`..Z.R..a.....P..;.6.$........ ........"[Ncq...C.m....._W2.k...l}y.X..`..$..V./.......zR.1...uc......\p..Ql...'....T&....(".0.....O.....B.G..r..6.3..+.q..k..t.9......$..M..L3.2....>..-#.<&x.,..{gg+...b....'.Rv...']l1...u...'~..C.:.X~.Q.D...j.8q6....&.A.C.d......u...Uu.#.....]7.)#.o(dq....@..+..)..l.#7..\|.<XW....t....%......... ..A.....b!...y...Ux...T...(.S5.+....>@5G...7..NH#!..B.0..t........V.W..~.\...}.(..b.h....3.......$...>.,T...t.p."un.~..{.......?.....t[..Kj..)....B...-......s.d&#........R.Q.E..e..~."..J..w...h.C+,k.....`\|.....Z?.....+.\|k.<........n.%).........z.....a.27..2qF..r.O._i.#..9...%:....h2.%..O`.....:...E...Tlc'!..sc..y:..z...J.O&........~...<.".>.U...n.LO+....<B.#t..Z......^........mI...P........`..-Q......x.s..X.....'!.-..?...?......h#.....>.....".*.J%..D".H$R_.;.1$.......Z...a.'..?..;#...)...Dp.:..j.+...u.VW.5...N.8.......^P..6]..L..s.%@.C...tU.....=.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	108935
Entropy (8bit):	5.310646996873333
Encrypted:	false
SSDEEP:	1536:gz1ZkuOCjjOZv/HxcxxDTgvJXSzPwmuSlYRz6h7B:m1SuOCjiiDYxS7B
MD5:	30A3446A792A536A8659DF9462BD8417
SHA1:	EBE40BB805BA5C106E7BBBB674EB4DF9702FCC24
SHA-256:	EF89D1E3E3EE00BC38DED9D1BFB559A5C17C52BA9487E7C5A2A4B7B58C285A76
SHA-512:	BF77845ABFF042EAB24081B4AC02DB856C9A24358EEC50BC4855CA54616B27E8893E81AC481BB33B83A57EB1C7D1A37F712B26F77BDBD83C154AF31CDE0BBA37
Malicious:	false
Reputation:	low
URL:	https://cdn-ukwest.onetrust.com/consent/86f42b6d-7a31-469c-804c-319643173d42/018dfc06-450f-70ae-81ef-536da56b2895/en.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Preferences Center","MainInfoText":"<p>Cookies are small bits of data stored on the device (computer, mobile phone, tablet, or any other mobile device) that you use to access any of our websites (the Sites), so we can recognize repeat users. Each cookie expires after a certain period of time depending on what we use it for.</p>\n<p>In our Cookies Notice, we use the word .cookies. as a catchall term to include not only cookies, but also other technologies such as pixels, web beacons and page tags. Like most commercial websites we use both first and third party cookies on our Sites.</p>\n<p>We use cookies for several reasons. Below we list and describe the various types of cookies we use on our Sites.</p>\n<p>Depending on your geographic locat

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89166
Entropy (8bit):	5.289013695909453
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE
MD5:	E422394640E6B0859FEFA04074D7A19C
SHA1:	514027A8B7C00C611C1B2BEECF93A43374EAA986
SHA-256:	532627A12FEF57F15C830263F7FCA46BAF80A627C87D7597D4A0CAF3BBCD47D1
SHA-512:	4903A073E4AD42916ABB49F4115A93970A92363E124707B7951D92DD945836ADE44183F43B74116D79E1C87F09E1B4B6212DB697BDB99FADA5D865830310C6C1
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32076)
Category:	dropped
Size (bytes):	41953
Entropy (8bit):	5.1745761144675955
Encrypted:	false
SSDEEP:	768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsJ:X0tVUkkK1GPz6QrG1AJ
MD5:	B53BDFC29E18F4D493D775A8023FBDC8
SHA1:	E9FCBCC4FA70CBA093B81D982A1B78509414CEF7
SHA-256:	E02AF7DF9A190D88380E2DCEC2050ECAA493AE2D23526DBEEC67F6907DF3A752
SHA-512:	027E1ADC510CC91E416CEF4245042A82C06C7318CCEEE34D99C71448448D56D5A7E77116C7907DA0EED15673EF3C6E847187183E9D06BF78BF410E0A53307958
Malicious:	false
Reputation:	low
Preview:	/. _ _ _ _. ___\| (_) ___\| \| __ (_)___./ __\| \| \|/ __\| \|/ / \| / __\|.\__ \ \| \| (__\| < _ \| \__ \.\|___/_\|_\|\___\|_\|\_(_)/ \|___/. \|__/.. Version: 1.6.0. Author: Ken Wheeler. Website: http://kenwheeler.github.io. Docs: http://kenwheeler.github.io/slick. Repo: http://github.com/kenwheeler/slick. Issues: http://github.com/kenwheeler/slick/issues.. /.!function(a){"use strict";"function"==typeof define&&define.amd?define(["jquery"],a):"undefined"!=typeof exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){"use strict";var b=window.Slick\|\|{};b=function(){function c(c,d){var f,e=this;e.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:a(c),appendDots:a(c),arrows:!0,asNavFor:null,prevArrow:'<button type="button" data-role="none" class="slick-prev" aria-label="Previous" tabindex="0" role="button">Previous</button>',nextArrow:'<button type="button" data-role="none" class="slick-next" aria-label="Next" tabindex="0" role="button">Next<

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8863)
Category:	dropped
Size (bytes):	9028
Entropy (8bit):	5.063104291434834
Encrypted:	false
SSDEEP:	192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs
MD5:	7D05F92297DEDE9ECFE3706EFB95677A
SHA1:	56BDB149D9BAF64474A4C24AE66445769A28254E
SHA-256:	368DAAB67B1A5B2B2802EDBBAC79A2AA4BA992A2EBF9C67B98AD784D8004018C
SHA-512:	DF25E4C654002BF66CBAEA0917976F75AFD9E16CB22D995F371DE879D83D9334391BF9E921718995664DA8FDD643239210205841FDA0AC691B751693D505C759
Malicious:	false
Reputation:	low
Preview:	/!.Waypoints - 4.0.1.Copyright . 2011-2016 Caleb Troughton.Licensed under the MIT license..https://github.com/imakewebthings/waypoints/blob/master/licenses.txt./.!function(){"use strict";function t(o){if(!o)throw new Error("No options passed to Waypoint constructor");if(!o.element)throw new Error("No element option passed to Waypoint constructor");if(!o.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+e,this.options=t.Adapter.extend({},t.defaults,o),this.element=this.options.element,this.adapter=new t.Adapter(this.element),this.callback=o.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=t.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=t.Context.findOrCreateByElement(this.options.context),t.offsetAliases[this.options.offset]&&(this.options.offset=t.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this)

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22445)
Category:	downloaded
Size (bytes):	22446
Entropy (8bit):	5.308445901412534
Encrypted:	false
SSDEEP:	384:V82ipcutdutMABwXCQ+Ur+heTJ8eMAB6Lxbnmcc2Jo4pc:VSpcdCABwXG1heTJHexzdc
MD5:	1F896D98B7411583B15A172A513F2AA5
SHA1:	FA0A090E659190C28E40B25DDB080B7A52E99A61
SHA-256:	ADE920FD5B00CD298AAE7978673A9A64D0BB3FA593D23E91994EC6B6723EBACE
SHA-512:	0E67EB6B3ACC832DF85626AEEA6D0C522E4CAB202BAE39781DC9EB99C73D38A6298369E5B6154FF81102B865CAA0F0905281C6851671A0D86A3511F252BD7FEB
Malicious:	false
Reputation:	low
URL:	https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}},s=((g=y=y\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=e=e\|\|{}).Name="O

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4bj0/sw_iframe.html?origin=https%3A%2F%2Fwww.wufoo.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22445)
Category:	dropped
Size (bytes):	22446
Entropy (8bit):	5.308445901412534
Encrypted:	false
SSDEEP:	384:V82ipcutdutMABwXCQ+Ur+heTJ8eMAB6Lxbnmcc2Jo4pc:VSpcdCABwXG1heTJHexzdc
MD5:	1F896D98B7411583B15A172A513F2AA5
SHA1:	FA0A090E659190C28E40B25DDB080B7A52E99A61
SHA-256:	ADE920FD5B00CD298AAE7978673A9A64D0BB3FA593D23E91994EC6B6723EBACE
SHA-512:	0E67EB6B3ACC832DF85626AEEA6D0C522E4CAB202BAE39781DC9EB99C73D38A6298369E5B6154FF81102B865CAA0F0905281C6851671A0D86A3511F252BD7FEB
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}},s=((g=y=y\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=e=e\|\|{}).Name="O

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 45, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9888
Entropy (8bit):	7.959231106600909
Encrypted:	false
SSDEEP:	192:p4QUXtH6RRXUY1ELSYy6M3Xn1vhDoh70DOqY/DvMSHklSL8ufVFT0Ez:7UkRRXTE+Y7MHnLm0qqMvdE0L8EFTz
MD5:	AA4B1D78C43A327FBCF2F1A3DA531FB3
SHA1:	08FD6B25752068A697AABB6CF60F2CBB103A4BC6
SHA-256:	B71B51326B27EEF47D4EAEF3B6D186E74D994AF7F6E1959B707D2C2375955682
SHA-512:	C35F3A81795A21F50A7A7E87A3022078DE894B8FA89C1F8AB60BCFE7E9077AF767E56A6FC26FFEFA57E84EA525F4D29C1F78EE92A9925E3DF2064D6018B6F40A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...c...-......i....CiCCPICC Profile..H..WgXSI.>.$........(.J.Ta-.$.Pb...........VtU.....D....,.......P.o...}.<3...9.=g..3..i+..sq-.<Y.">".?!5......C..x.a.<(....gy{..r...?...C[$...`q.;CT .C.g..#.+..h...V(.p...$..O..Ra:R.....Re....@..Pc...,.N(..E.,.#B.I&...^...P"@..:.#..".. .f..O..@.1.S .....PCA-TZ ...P..?..\%.....%QD.........f!\|@.1..a...J...q.D...0e.&,.A....oD..h...p.2')h.[......`iaT..NVL....g.r.Q....gI.Q..\\...x.....G!....U,ILA........ .\..@i..\-..P..F...4[".#S.N.l.V^.B...P...>...%...Gc...84.a.]b.X.4......)?.}.<W...N.\..A...o/(J..{.P.H.(o..l..j."..3ya...J.{.....>(Q..............P@...q......6...O.!...q..^1.!....?..2U.E..9..}!.4$.I_2......^...8..Nz.=..I....2 D.sQU.._.h.'F.)P+...?..Z+......v.......H.H.(...y..m.[.V.(c2...!..jw2..C..v.G..#.".".Pl.....Z9..k...>hG...-...c.q.P.1.....L.....)..U.?-..C.Y.$q.8J...8A....c......N....U..A1H.m.j.:.>....@...................i.....va1?J&.9......@....k.j..x..r....h...S>e. ..8.....+g...R...]..E.v$....m.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5092), with no line terminators
Category:	downloaded
Size (bytes):	5092
Entropy (8bit):	5.573876663013392
Encrypted:	false
SSDEEP:	96:G5aOb5pxD2FuQThhA0yVqU26qGa1NjyOi0zjtoZpr1wWTsUkSzQ54T3w5p3X8ESn:+nD6uQy21sZHr1JI7HDY
MD5:	323C6E56CF6861FE0ACBA0EA0C350D4A
SHA1:	D9D754D1997436F8F3659385E19FC8202B1DA7D2
SHA-256:	97CE1E1F5DBFDA35AC979B593E79E1673A3E725790339D767E4A6CA6E94A4828
SHA-512:	07A7D0DCAAD60CA640D10E4756DA8DCBE1DE1157CAE9589D78EC2D1D9D69E021038B049EC697EEE6D45CC62A52C236B31925FF11344D9C5F44BDCE84BDD9C3C7
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/plugins/tablepress/css/default.min.css?ver=1.14
Preview:	@font-face{font-family:TablePress;src:url(data:application/font-woff2;charset=utf-8;base64,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

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	47890
Entropy (8bit):	6.87294504508139
Encrypted:	false
SSDEEP:	768:Yeo1tEsqZIljEwp+bUD1x+XL692QUDMOUjgmZFl1Qsl:1a7FtpYY2VDNUjgmnl1Qsl
MD5:	0E5D25EE5F414850BC012D99B0CF3252
SHA1:	6399BC3A59046B9C43519097CF326A4ABD52470F
SHA-256:	BD845F3018A6D5C08B9845654BD1C1F6FCF3C8EE016ACDBE90625F431E66648C
SHA-512:	A029DAE5E44AA269B20AB160223B994F6FEF776335EF3018BF116230012E2FB4BF9D44D20978D2CF2B7056C035E94637A0E0AE49DB995CDD5C961B0CB48CEE8A
Malicious:	false
Reputation:	low
Preview:	............ .(...F... .... .(...n...00.... .(-............ .Tt...F..(....... ..... ..........................................3...H...................H...3.............................Q...................<...<..................R................X...'...........2...U...V.../...........)...^..............UE............... ................... ...............S......X...X=...................................................J......Y...=R....................... ...........................a......@........................+...G]..Dd..$...............$..................x&........... ...BHL.?Vk.BM_.=]g.............:......m............!........... ...&...........'...............0..................r+...........+...$...........)...(...........?......g...........9N...........9jx.2...........;cn./...........k......5.........._.........................................%........f3................-}..........................................(.......................6....;...................F..........2......

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	128040
Entropy (8bit):	5.10954686861718
Encrypted:	false
SSDEEP:	3072:Oki6ggCyXuZhF2FokfDL9uokBDO5uok5Djb5Ds8ZkJfik/FHkUJqv:Oz6ggCJZhF2q5Ds8ZkJfib
MD5:	7C763CD68A6DA0A4C455640CCD2E24AD
SHA1:	09FAF3C91867973D93AE01D283136DC6C906881D
SHA-256:	0515F519D8403D4AAA5329924375863B54EDF355D69134197A7A14D467BC1B88
SHA-512:	256DDF9A0B7A411455E7D72E19084015FD11E21F9310F18DF887E6F2716E08C5F9FD180DAADA5D100DB46742E977C01D967AF3DFB2591FBDB3A7E5CF15CC8572
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/endpage/
Preview:	<!doctype html>.<html lang="en-US" class="no-js gdpr-opted-in ">. <head>. <meta charset="UTF-8">. . <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. OneTrust Cookies Consent Notice start for wufoo.com -->. <script src="https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.js" data-document-language="true" type="text/javascript" charset="UTF-8" data-domain-script="86f42b6d-7a31-469c-804c-319643173d42" ></script>. <script type="text/javascript">.. // store the original cookie setter and getter. document.cookieSetter = Object.getOwnPropertyDescriptor(Document.prototype, 'cookie').set;. document.cookieGetter = Object.getOwnPropertyDescriptor(Document.prototype, 'cookie').get;.. // each item in this array is in the format [cookie, group]. var notConsentedButTriedToLoad = [];. function OptanonWrapper() {. var onetrustData = OneTrust.GetDomainDa

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.463207674083736
Encrypted:	false
SSDEEP:	3:InFiCQuOLnrZzo31rL:a+B1o3h
MD5:	EE936DB88DE07D0C330B8A6B37F6F2AA
SHA1:	287FA79248C0DEB31A748FB03D86A946D7CB673B
SHA-256:	340AF2A72B19F5190BF9DF444DF94164D9D8CFFA92589DA27E1D447A1CC93D18
SHA-512:	4163E1EB7BB5704ACDACB0B2A681F7A629D47939AB1AD26CF9E82F9FC535A7A3E4CF48E77B04E46E5678B44E7A753EE46C1EB37AF3CD6B2CBF3E17DA3B34D746
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAk01cKobvV-2RIFDbDs4qoSBQ3oSn92EgUNsdK5ExIFDTJb-4ISBQ0xPZQw?alt=proto
Preview:	Ci0KBw2w7OKqGgAKBw3oSn92GgAKBw2x0rkTGgAKBw0yW/uCGgAKBw0xPZQwGgA=

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	19721
Entropy (8bit):	4.208255901070184
Encrypted:	false
SSDEEP:	384:PertrE2vzQ23vEoN8QfvnqIf6T+BMUXBkzT3z0484iy8ef:WrtrE2vdRNBq3A4v8ef
MD5:	D29E0BCFBCD86D3E7DEEA04EC5D80385
SHA1:	5E41B41CA542C7C2CAC2D73AD85C11EE6D1707B9
SHA-256:	74E617923CAE53C9EA93B192AB7F817DDFDCF6418BB946DCD4C2B2B616549794
SHA-512:	4261CEABBFFCA123AA1DD01E0A6EC00A6C591A59C5EEFB773A1E4DB01EE3E276F42379CEECDDA1EC31E0D30BD4B75A0AEBE6074CC0F98F8C1B1DA0BC69E0EA5C
Malicious:	false
Reputation:	low
URL:	https://cdn.ywxi.net/meter/wufoo.com/202.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="120px" height="50px" viewBox="0 0 120 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>trustmark/engagement/certified</title>. <desc>Created with Sketch.</desc>. <g id="trustmark/engagement/certified" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="mixin/trustmark/background" fill="#FFFFFF" stroke="#000000" stroke-opacity="0.1">. <rect id="background" x="0.5" y="0.5" width="119" height="49" rx="2"></rect>. </g>. <g id="logo/trustedsite" transform="translate(7.000000, 8.000000)">. <g id="logo/ts-full-color">. <g id="Logo">. <path d="M104.830662,6.09231179 L104.830662,6.7689641 L104.430138,6.7689641 L104.430138,5.08758564 C104.58824,5.05682872 104.809581,5.0363241 105.094164,5.0363241 C105.420906,5.0363241 1

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7055)
Category:	downloaded
Size (bytes):	13975
Entropy (8bit):	5.221047807764178
Encrypted:	false
SSDEEP:	384:pT/2XAzS+ydp7f8X7eckR5yKx/4F0Dn7RXj37igYo:P2n7fuKx/4F0Dn7RXj3L
MD5:	8046233A42B54B8D66FE79AD01E62B5F
SHA1:	5CF74FCABD17F9ED4F60A1644FD1EE51C83D81C7
SHA-256:	1B819A6D61EBB8839085F5CE354B05759CB4D5DDCD813FB2266D7F3EFB4D59D1
SHA-512:	0ECF4B5D4EF2A7239071ACCD23ACA5C9931F1D94B735648BBC98229FF2A99CCDEFE68F5DAB6CC6B14745AF66460141A16045CF80974373056E9D4A8EB73CAAE6
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/dist/scripts.min.js?ver=1.3
Preview:	/!. JavaScripts.. * Version: 0.0.1. * Author: Soshal (@SoshalGroup). * Author URI: http://www.soshal.ca. */.!function(e,t,n){function r(e){var t=C.className,n=S._config.classPrefix\|\|"";if(T&&(t=t.baseVal),S._config.enableJSClass){var r=new RegExp("(^\|\\s)"+n+"no-js(\\s\|$)");t=t.replace(r,"$1"+n+"js$2")}S._config.enableClasses&&(t+=" "+n+e.join(" "+n),T?C.className.baseVal=t:C.className=t)}function s(e,t){return typeof e===t}function o(){var e,t,n,r,o,i,a;for(var l in b)if(b.hasOwnProperty(l)){if(e=[],t=b[l],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(r=s(t.fn,"function")?t.fn():t.fn,o=0;o<e.length;o++)i=e[o],a=i.split("."),1===a.length?S[a[0]]=r:(!S[a[0]]\|\|S[a[0]]instanceof Boolean\|\|(S[a[0]]=new Boolean(S[a[0]])),S[a[0]][a[1]]=r),x.push((r?"":"no-")+a.join("-"))}}function i(){return"function"!=typeof t.createElement?t.createElement(arguments[0]):T?t

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2621
Entropy (8bit):	4.445967404396025
Encrypted:	false
SSDEEP:	48:hO72PvRPet9AmuVqnA7A8LnAYNr3su/uVsuw2i1v3N9CYB4dvem9WYhJubYF5aDg:hVRPeHAmuVqnA7A8LnAarh/uVxwNhd9U
MD5:	4AEF610E39C328B6B6C51D74E9CFD9EC
SHA1:	F05993842DC692716054A4D9585338AFAAF59B41
SHA-256:	DC084E1FCB271A81A1DC452081E1858A1679556EEA00091B937DD56BB2305710
SHA-512:	212A080476C0B2142110D35DBF3995B088BB05C27F086839CB74A64C40BEA2DE78707CD963FA477672892BADDC6072DA9ED44EF701E51DC107834B5D95BC6BB1
Malicious:	false
Reputation:	low
URL:	https://www.wufoo.com/wp-content/themes/wufoo-site/js/vendor/waypoints.inview.min.js?ver=1.0.0
Preview:	(function() {. 'use strict'.. function noop() {}.. var Waypoint = window.Waypoint.. /* http://imakewebthings.com/waypoints/shortcuts/inview /. function Inview(options) {. this.options = Waypoint.Adapter.extend({}, Inview.defaults, options). this.axis = this.options.horizontal ? 'horizontal' : 'vertical'. this.waypoints = []. this.element = this.options.element. this.createWaypoints(). }.. / Private */. Inview.prototype.createWaypoints = function() {. var configs = {. vertical: [{. down: 'enter',. up: 'exited',. offset: '100%'. }, {. down: 'entered',. up: 'exit',. offset: 'bottom-in-view'. }, {. down: 'exit',. up: 'entered',. offset: 0. }, {. down: 'exited',. up: 'enter',. offset: function() {. return -this.adapter.outerHeight(). }. }],. horizontal: [{. right: 'enter',. left: 'exited',. offset: '100%'. },

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (2554)
Category:	dropped
Size (bytes):	2588
Entropy (8bit):	5.318337625213494
Encrypted:	false
SSDEEP:	48:EjYTakOxR4jGiZTnAd+DTQfTfQfMzxu+j40qwyZy6dwE5F:EjQOri3c7Qwd4/wyjbP
MD5:	CC9471AE538E07B4B141D18D18D7A089
SHA1:	44F24B33219AF72BF44C7F11EDB77D995B2467FB
SHA-256:	FFF3B26602FB67FDDCA42E14A5BB3945C2AA0B1B0D619A79A59DFA85389F2F83
SHA-512:	568A31490D0295E5A7938975271324DF974838922FC86FF8544AFF0D0CF2CFBD2590B233EE2082453294E70A10A3C5594C024EED63DAFB3830B8EE4EC1EC4B9C
Malicious:	false
Reputation:	low
Preview:	!function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=0)}([function(e,t,r){"use strict";var o={__COOKIE_NAME:"wutm",init:function(){var e=this;e.hasPermission()?e.getCookie(e.__COOKIE_NAME)\|\|e.storeSources():document.addEventListener("gdprCookieSet",function(){e.getCookie(e.__COOKIE_NAME)\|\|e.storeSources()})},hasPermission:function(){return"true"===this.getCookie("gdpr_consent")},storeSources:function(){var e=this.getCampaignParams(),t=this.getSource();if(Object.keys(e).length\|\|t){var r=[];for(var o in e){var n=e[o];r.push(o+"="+encodeURIComponent(n))}t&&r.push("search_engine="+encodeURIComp

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7055)
Category:	dropped
Size (bytes):	13975
Entropy (8bit):	5.221047807764178
Encrypted:	false
SSDEEP:	384:pT/2XAzS+ydp7f8X7eckR5yKx/4F0Dn7RXj37igYo:P2n7fuKx/4F0Dn7RXj3L
MD5:	8046233A42B54B8D66FE79AD01E62B5F
SHA1:	5CF74FCABD17F9ED4F60A1644FD1EE51C83D81C7
SHA-256:	1B819A6D61EBB8839085F5CE354B05759CB4D5DDCD813FB2266D7F3EFB4D59D1
SHA-512:	0ECF4B5D4EF2A7239071ACCD23ACA5C9931F1D94B735648BBC98229FF2A99CCDEFE68F5DAB6CC6B14745AF66460141A16045CF80974373056E9D4A8EB73CAAE6
Malicious:	false
Reputation:	low
Preview:	/!. JavaScripts.. * Version: 0.0.1. * Author: Soshal (@SoshalGroup). * Author URI: http://www.soshal.ca. */.!function(e,t,n){function r(e){var t=C.className,n=S._config.classPrefix\|\|"";if(T&&(t=t.baseVal),S._config.enableJSClass){var r=new RegExp("(^\|\\s)"+n+"no-js(\\s\|$)");t=t.replace(r,"$1"+n+"js$2")}S._config.enableClasses&&(t+=" "+n+e.join(" "+n),T?C.className.baseVal=t:C.className=t)}function s(e,t){return typeof e===t}function o(){var e,t,n,r,o,i,a;for(var l in b)if(b.hasOwnProperty(l)){if(e=[],t=b[l],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(r=s(t.fn,"function")?t.fn():t.fn,o=0;o<e.length;o++)i=e[o],a=i.split("."),1===a.length?S[a[0]]=r:(!S[a[0]]\|\|S[a[0]]instanceof Boolean\|\|(S[a[0]]=new Boolean(S[a[0]])),S[a[0]][a[1]]=r),x.push((r?"":"no-")+a.join("-"))}}function i(){return"function"!=typeof t.createElement?t.createElement(arguments[0]):T?t

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 2, 2024 11:04:46.114661932 CET	49698	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:46.115217924 CET	49699	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:46.180697918 CET	49700	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:46.235676050 CET	80	49698	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:46.235692024 CET	80	49699	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:46.235780001 CET	49698	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:46.235821009 CET	49699	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:46.236099958 CET	49699	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:46.303181887 CET	80	49700	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:46.303277016 CET	49700	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:46.356060982 CET	80	49699	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:47.725083113 CET	80	49699	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:47.775329113 CET	49699	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:47.872044086 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:47.872091055 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:47.872186899 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:47.872433901 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:47.872448921 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:47.887726068 CET	49673	443	192.168.2.16	204.79.197.203
Dec 2, 2024 11:04:48.191327095 CET	49673	443	192.168.2.16	204.79.197.203
Dec 2, 2024 11:04:48.797316074 CET	49673	443	192.168.2.16	204.79.197.203
Dec 2, 2024 11:04:49.184686899 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:49.184732914 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:04:49.184812069 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:49.185031891 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:49.185048103 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:04:49.496043921 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:49.496390104 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:49.496417046 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:49.497524023 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:49.497602940 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:49.498526096 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:49.498598099 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:49.498718023 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:49.498724937 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:49.544212103 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:50.000209093 CET	49673	443	192.168.2.16	204.79.197.203
Dec 2, 2024 11:04:50.316610098 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:50.316948891 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:50.317032099 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:50.317482948 CET	49701	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:50.317502022 CET	443	49701	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:50.319741011 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:50.319780111 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:50.319864988 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:50.320085049 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:50.320099115 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:50.927860022 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:04:50.928251982 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:50.928281069 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:04:50.929394007 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:04:50.929461002 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:50.930386066 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:50.930449963 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:04:50.984280109 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:50.984349012 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:04:51.032215118 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:04:51.889163017 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:51.889512062 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:51.889543056 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:51.889892101 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:51.890183926 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:51.890240908 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:51.890315056 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:51.935328960 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:52.404242039 CET	49673	443	192.168.2.16	204.79.197.203
Dec 2, 2024 11:04:52.503580093 CET	49690	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:04:53.036062956 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.036093950 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.036163092 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.036189079 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.036237955 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.036875010 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.036936045 CET	443	49705	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.036993980 CET	49705	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.057898998 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.057945967 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.058011055 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.059494972 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.059510946 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.061134100 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.061183929 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.061253071 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.061636925 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.061666965 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.061795950 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.061836958 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.061856985 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:53.061970949 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:53.061980963 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.231458902 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:54.231498957 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:54.231592894 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:54.233648062 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:54.233664036 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:54.629882097 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.631540060 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.637305021 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.649878025 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.649904013 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.649987936 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.649996996 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.650115967 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.650171041 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.650624037 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.650939941 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.651025057 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.651108980 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.651304007 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.651817083 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.652059078 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.652143002 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.652148008 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.652160883 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.654109955 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.654206038 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.654422998 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.654496908 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.654501915 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.654623985 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.695346117 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.704231977 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.704245090 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.704711914 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.704718113 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:54.752207994 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:54.752230883 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.455008030 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.455667973 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.455754995 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.456573963 CET	49709	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.456593990 CET	443	49709	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.512691975 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.512758970 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.512794971 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.512814999 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.512845993 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.512876987 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.512999058 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.513067007 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.513955116 CET	49710	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.514002085 CET	443	49710	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523417950 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523446083 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523453951 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523477077 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523487091 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523499966 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.523499012 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523523092 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.523550987 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.523581982 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.658988953 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.659027100 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.659104109 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.659701109 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.659710884 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.660717964 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:55.660804033 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:55.665271997 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:55.665298939 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:55.665537119 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:55.683712006 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.683728933 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.683792114 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.683823109 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.683840990 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.683876038 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.684106112 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.684123039 CET	443	49708	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.684132099 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.684166908 CET	49708	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.707206011 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:55.709455967 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:55.723387003 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.723453045 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.723531961 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.723980904 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:55.723998070 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:55.751339912 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:56.058751106 CET	49678	443	192.168.2.16	20.189.173.10
Dec 2, 2024 11:04:56.239514112 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:56.239594936 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:56.239667892 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:56.239747047 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:56.239768028 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:56.239774942 CET	49712	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:56.239780903 CET	443	49712	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:56.269145012 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:56.269185066 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:56.269264936 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:56.269545078 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:56.269558907 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:56.360255003 CET	49678	443	192.168.2.16	20.189.173.10
Dec 2, 2024 11:04:56.905688047 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:56.905738115 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:56.909813881 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:56.909813881 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:56.909853935 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:56.962317944 CET	49678	443	192.168.2.16	20.189.173.10
Dec 2, 2024 11:04:57.217215061 CET	49673	443	192.168.2.16	204.79.197.203
Dec 2, 2024 11:04:57.235260010 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.235516071 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.235527039 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.236485004 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.236603975 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.236974001 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.236974001 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.237034082 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.281263113 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.281284094 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.296716928 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.296968937 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.296996117 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.297344923 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.297667027 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.297727108 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.297796011 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.329231024 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:57.343341112 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:57.740784883 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:57.740868092 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:57.742002964 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:57.742014885 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:57.742227077 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:57.745745897 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:57.787328005 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:58.079907894 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.079936981 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.079955101 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.079993963 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.080008030 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.080030918 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.080993891 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.081036091 CET	443	49713	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.081088066 CET	49713	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.132077932 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.132106066 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.132174015 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.132199049 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.173208952 CET	49678	443	192.168.2.16	20.189.173.10
Dec 2, 2024 11:04:58.173234940 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.276915073 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:58.276978016 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:58.277033091 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:58.277731895 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:58.277750969 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:58.277760983 CET	49716	443	192.168.2.16	23.218.208.109
Dec 2, 2024 11:04:58.277766943 CET	443	49716	23.218.208.109	192.168.2.16
Dec 2, 2024 11:04:58.332413912 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.332431078 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.332458019 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.332560062 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.332561016 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.332600117 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.333153009 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.379225969 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.379247904 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.379300117 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.379317045 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.379345894 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.379476070 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.402442932 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.402529001 CET	443	49714	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.402560949 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.402759075 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.402759075 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.402807951 CET	49714	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.405783892 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.405832052 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.406121016 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.406121016 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:58.406157017 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:58.530985117 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:58.531292915 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:58.534169912 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:58.534179926 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:58.534569979 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:58.589648962 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:58.590521097 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:58.635329962 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178769112 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178802967 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178812981 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178843975 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178853989 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178864002 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178910971 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:59.178941965 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.178981066 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:59.179065943 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:59.199959993 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.200064898 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.200102091 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:59.200202942 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:59.200202942 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:59.200370073 CET	49717	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:04:59.200392962 CET	443	49717	20.12.23.50	192.168.2.16
Dec 2, 2024 11:04:59.978331089 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:59.980484962 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:59.980499983 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:59.981884003 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:59.981959105 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:59.982340097 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:59.982419014 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:04:59.982503891 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:04:59.982511044 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:00.024246931 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:00.535459042 CET	49680	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:05:00.583229065 CET	49678	443	192.168.2.16	20.189.173.10
Dec 2, 2024 11:05:00.612514973 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:05:00.612581968 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:05:00.612665892 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:05:00.753089905 CET	49702	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:05:00.753118992 CET	443	49702	142.250.181.68	192.168.2.16
Dec 2, 2024 11:05:00.816945076 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:00.816970110 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:00.816976070 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:00.817063093 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:00.817092896 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:00.838244915 CET	49680	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:05:00.870228052 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.016376972 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.016388893 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.016431093 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.016452074 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.016460896 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.016469955 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.016484976 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.016541004 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.046948910 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.047038078 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.047063112 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.070122957 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.070208073 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.070236921 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.093195915 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.093270063 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.093280077 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.093327045 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.093492031 CET	49718	443	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:01.093517065 CET	443	49718	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:01.444284916 CET	49680	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:05:02.656251907 CET	49680	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:05:05.071254015 CET	49680	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:05:05.390305996 CET	49678	443	192.168.2.16	20.189.173.10
Dec 2, 2024 11:05:06.829272032 CET	49673	443	192.168.2.16	204.79.197.203
Dec 2, 2024 11:05:09.876286983 CET	49680	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:05:14.993462086 CET	49678	443	192.168.2.16	20.189.173.10
Dec 2, 2024 11:05:17.478007078 CET	80	49698	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:17.478214025 CET	49698	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:17.548074961 CET	80	49700	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:17.548290014 CET	49700	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:18.492201090 CET	49698	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:18.492372990 CET	49700	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:18.612262011 CET	80	49698	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:18.612278938 CET	80	49700	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:19.477530003 CET	49680	80	192.168.2.16	192.229.211.108
Dec 2, 2024 11:05:23.985601902 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:23.985639095 CET	443	49719	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:23.985801935 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:23.985913038 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:23.985964060 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:23.986020088 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:23.986089945 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:23.986104965 CET	443	49719	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:23.986219883 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:23.986233950 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.513861895 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.514146090 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.514172077 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.515073061 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.515156984 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.516450882 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.516551018 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.516669989 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.516679049 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.516693115 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.554565907 CET	443	49719	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.554800034 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.554815054 CET	443	49719	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.555721998 CET	443	49719	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.555793047 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.556026936 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.556086063 CET	443	49719	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.563330889 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.572325945 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.604315996 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:25.604341030 CET	443	49719	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:25.652313948 CET	49719	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:27.648317099 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:27.650722980 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:27.650821924 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:27.653928041 CET	49720	443	192.168.2.16	18.66.161.101
Dec 2, 2024 11:05:27.653944016 CET	443	49720	18.66.161.101	192.168.2.16
Dec 2, 2024 11:05:28.233726978 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:28.233767033 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:28.233844995 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:28.234087944 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:28.234101057 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:29.805645943 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:29.806058884 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:29.806078911 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:29.807095051 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:29.807163000 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:29.808170080 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:29.808243036 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:29.808345079 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:29.808352947 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:29.849324942 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.686820984 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.686842918 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.686850071 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.686922073 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.686954021 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.700576067 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.700627089 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.700709105 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.700853109 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.700877905 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.700934887 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.701077938 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.701098919 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.701359034 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.701368093 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.733366966 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.872783899 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.872795105 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.872842073 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.872857094 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.872931957 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.872950077 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.872982979 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.873003006 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.875463009 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.875505924 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.875591040 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.875971079 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.876023054 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.876075029 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.876291037 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.876306057 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.876477957 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.876492977 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.906054020 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.906146049 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.926258087 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:31.926309109 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:31.926415920 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:31.926619053 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:31.926632881 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:31.956957102 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.956979990 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.957062960 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:31.957072973 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:31.957120895 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.078188896 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.078208923 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.078306913 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.078318119 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.078371048 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.125586033 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.125614882 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.125725031 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.125734091 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.125782967 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.143345118 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.143364906 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.143455982 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.143464088 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.143512964 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.163072109 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.163086891 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.163170099 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.163180113 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.163222075 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.272197008 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.272245884 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.272269964 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.272279024 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.272288084 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.272341013 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.272347927 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.272394896 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.272542953 CET	49721	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:32.272555113 CET	443	49721	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:32.735348940 CET	49699	80	192.168.2.16	18.165.220.71
Dec 2, 2024 11:05:32.855407953 CET	80	49699	18.165.220.71	192.168.2.16
Dec 2, 2024 11:05:33.190263033 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.190689087 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.190716028 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.192136049 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.192207098 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.193233013 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.193347931 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.193445921 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.193451881 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.246332884 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.310441971 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.310818911 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.310849905 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.311216116 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.312228918 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.312294960 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.312570095 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.359332085 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.360110044 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.360477924 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.360500097 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.361012936 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.361380100 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.361460924 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.361565113 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.401778936 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.402122974 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.402165890 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.403196096 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.403280020 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.403637886 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.403702974 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.403805971 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.403816938 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.407337904 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.453336954 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.501261950 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.503653049 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.503684044 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.504703999 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.504796028 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.505140066 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.505196095 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.505513906 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.505521059 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:33.549758911 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:33.647895098 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.648602962 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.648634911 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.648660898 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.648698092 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.648741007 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.650099993 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.651540041 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.651583910 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.651595116 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.664246082 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.664335966 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.664365053 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.672831059 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.672916889 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.672930956 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.724335909 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.767888069 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.820344925 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.849174023 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.853094101 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.853159904 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.853185892 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.861473083 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.861530066 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.861548901 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.869167089 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.869232893 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.869245052 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.869313002 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.869513035 CET	49726	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.869529009 CET	443	49726	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.875835896 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.875869036 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:33.875952959 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.876178980 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:33.876193047 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:34.012500048 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:34.012547016 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:34.012631893 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:34.012876987 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:34.012892008 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:34.962618113 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:34.962641954 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:34.962738991 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:34.962769032 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:34.963907957 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:34.963963032 CET	443	49724	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:34.964030027 CET	49724	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.204016924 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.204054117 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.204113007 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.204159975 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.204185009 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.205204010 CET	49725	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.205219030 CET	443	49725	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.205864906 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:35.206165075 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:35.206173897 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:35.207189083 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:35.207274914 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:35.208118916 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:35.208216906 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:35.208483934 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:35.208488941 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:35.215251923 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.264336109 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:35.265729904 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.332040071 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.332052946 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.332086086 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.332098961 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:35.332101107 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.332113028 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.332144022 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.332179070 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.332215071 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.332242966 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.332545996 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:35.332562923 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:35.333645105 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:35.333709002 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:35.334018946 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:35.334089994 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:35.334167957 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:35.334175110 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:35.341409922 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.341438055 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.341463089 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.341501951 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.341532946 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.341546059 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.341583014 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.375345945 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:35.491364002 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:35.491421938 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:35.491518021 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:35.491910934 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:35.491925955 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:35.646924973 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:35.646970034 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:35.647070885 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:35.647288084 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:35.647303104 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:35.671580076 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.671595097 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.671633959 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.671674967 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.671701908 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.671842098 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.671842098 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.680111885 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.680124998 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.680166960 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.680232048 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.680263996 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.680279016 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.680316925 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.773633957 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.773655891 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.773678064 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.773688078 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.773798943 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.773823023 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.773861885 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.773871899 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.773878098 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.773926020 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.867006063 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.867036104 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.867110968 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.867136002 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.867165089 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.867183924 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.891468048 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.891494036 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.891563892 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.891592026 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.891606092 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.891638041 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.971524000 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.971544981 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.971652985 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.971664906 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.971715927 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.978034973 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.978066921 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.978138924 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.978164911 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:35.978180885 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:35.978210926 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.049935102 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:36.056282043 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:36.056349993 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:36.056509972 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:36.056543112 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:36.056590080 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:36.062782049 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:36.062836885 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.062871933 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.062896967 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:36.062937021 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.062977076 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.062994957 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.063013077 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:36.063019991 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.063560009 CET	49727	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:36.063575983 CET	443	49727	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:36.065618992 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.065665007 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.065751076 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.066210032 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.066226006 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.069365025 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.069397926 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.069464922 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.069633007 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.069647074 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.082439899 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.082490921 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.082526922 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.082545042 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.082566023 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.082609892 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.088968039 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.102063894 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.102088928 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.102216005 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.102240086 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.102284908 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.108520031 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.108593941 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.108608007 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.131125927 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.131386995 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.131396055 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.143673897 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.143836975 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.143846035 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.173752069 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.173787117 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.173980951 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.173980951 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.174009085 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.174052954 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.184431076 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.184441090 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.185273886 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.185329914 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.185376883 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.185376883 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.185419083 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.185446978 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.185709953 CET	49722	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.185729027 CET	443	49722	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.218837976 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.218869925 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.219049931 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.219058990 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.219119072 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.231458902 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.250816107 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.250844002 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.250896931 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.250907898 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.250979900 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.250987053 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.250998974 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.251054049 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.251502037 CET	49723	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.251518011 CET	443	49723	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.256084919 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.261339903 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.261365891 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.261389017 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.261435986 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.261460066 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.261512041 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.261529922 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.261568069 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.261703014 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.261729002 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.261787891 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.262212038 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.262243986 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.262311935 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.263211012 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.263222933 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.263473034 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.263487101 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.263771057 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:36.263782024 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:36.266664982 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.266711950 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.266820908 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.266820908 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.267260075 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.267263889 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.267271042 CET	443	49728	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.267271996 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:36.267302036 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.267322063 CET	49728	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.267357111 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.267708063 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:36.267720938 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.089189053 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.089286089 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.090697050 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.090703964 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.090938091 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.092483997 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.139333010 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.308747053 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:37.309030056 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:37.309046984 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:37.310065031 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:37.310239077 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:37.310441017 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:37.310499907 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:37.310612917 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:37.310622931 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:37.351070881 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.351397991 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.351433992 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.351727009 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.351996899 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.352055073 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.352113962 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.360351086 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:37.395349026 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.480643988 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.480937958 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.480976105 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.481933117 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.482090950 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.482870102 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.482968092 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.483067036 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.483072042 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.536510944 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.660691023 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.661006927 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.661032915 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.661457062 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.661870003 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.661933899 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.661938906 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.661971092 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.712369919 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.724734068 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.724760056 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.724870920 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.724910975 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.724920034 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.725066900 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.725066900 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.771703005 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.771740913 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.771783113 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.771787882 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.771806002 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.771831036 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.771867037 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.771934032 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.771945953 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.771956921 CET	49729	443	192.168.2.16	20.12.23.50
Dec 2, 2024 11:05:37.771960974 CET	443	49729	20.12.23.50	192.168.2.16
Dec 2, 2024 11:05:37.792624950 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.792871952 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.792885065 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.794334888 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.794403076 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.794708014 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.794836044 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.794853926 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.829994917 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.830033064 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.830084085 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.830102921 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.831923962 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.831975937 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.831984043 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.836402893 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.836458921 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.836595058 CET	49733	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.836610079 CET	443	49733	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.839324951 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.840348959 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.840357065 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.885493994 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.885699987 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.885709047 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.886060953 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.886354923 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.886411905 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.886464119 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.887350082 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.894036055 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.894227982 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.894243956 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.895279884 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.895347118 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.895601034 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.895657063 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.895709991 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.895715952 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.931322098 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.939419031 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.939541101 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.939596891 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.940090895 CET	49737	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:37.940108061 CET	443	49737	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:37.941920996 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.941955090 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.942029953 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.942631960 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.942642927 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:37.950352907 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:37.999643087 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:37.999669075 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:37.999715090 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:37.999726057 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:38.000525951 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:38.000562906 CET	443	49730	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:38.000619888 CET	49730	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:38.081389904 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:38.081425905 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:38.081502914 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:38.081696987 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:38.081712008 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.087547064 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.087574959 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.087645054 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.088474035 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.088485003 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.291876078 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.292891979 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:39.292926073 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.293921947 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.293996096 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:39.294408083 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:39.294466019 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.294568062 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:39.294574022 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.331707001 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.331744909 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.331752062 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.331784964 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.331850052 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.331854105 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.331899881 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.332669973 CET	49731	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.332688093 CET	443	49731	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.335462093 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.335504055 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:39.335608006 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.335846901 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.335860968 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:39.338164091 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.338191032 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.338197947 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.338228941 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.338246107 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.338251114 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.338289976 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.338774920 CET	49736	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.338789940 CET	443	49736	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.340272903 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.340317965 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.340364933 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:39.340393066 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.340728998 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.340764046 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.340828896 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.341137886 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.341162920 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.341274977 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.341286898 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.341650963 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.341691017 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:39.341758013 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.341990948 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.342006922 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:39.445478916 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.445508957 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.445514917 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.445545912 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.445555925 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.445589066 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.445739985 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.445739985 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.446403027 CET	49735	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.446419954 CET	443	49735	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.449467897 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.449510098 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:39.449594021 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.449790955 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:39.449811935 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:39.476327896 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.476560116 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.476574898 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.477082014 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.477560997 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.477638006 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.477754116 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.523333073 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.631038904 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:39.631105900 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:39.631181002 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:39.631382942 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:39.631403923 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:39.744261980 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.744334936 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.744400978 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:39.744982958 CET	49739	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:39.745002985 CET	443	49739	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:39.931675911 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.931706905 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.931725025 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.931806087 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:39.931828022 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:39.931910992 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.129595995 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.129638910 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.129760981 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.129791975 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.129849911 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.158163071 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.158215046 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.158250093 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.158269882 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.158324957 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.158508062 CET	49734	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.158524990 CET	443	49734	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.161075115 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:40.161111116 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:40.161201954 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:40.161540985 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:40.161555052 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:40.162178993 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.162209034 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.162271023 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.162471056 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.162481070 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.662440062 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.662745953 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.662765026 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.663100004 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.663414955 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.663476944 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.663583994 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.707340002 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.873877048 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.874214888 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.874243975 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.875171900 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.875247955 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.882627010 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.882704973 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.886152983 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.886164904 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.913230896 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.913536072 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.913558006 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.914469957 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.914577961 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.914870024 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.914927959 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.915024996 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.915033102 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.928354025 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.932183981 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.932717085 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.933643103 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.933667898 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.933768988 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.933794975 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.934181929 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.935360909 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.935465097 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.936114073 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.936194897 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.938177109 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.938241959 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.939946890 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:40.939954996 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:40.939982891 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.959723949 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.978046894 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.981314898 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.981334925 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.982323885 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.982378006 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.983611107 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.983669043 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.983760118 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:40.983767033 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.987330914 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:40.991388083 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.039370060 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.081569910 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.081599951 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.081654072 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.081666946 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.082434893 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.082482100 CET	443	49738	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.082545042 CET	49738	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.085195065 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.085238934 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.085309982 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.085606098 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.085622072 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.086802006 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.086838961 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.086910963 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.087131977 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.087145090 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.650970936 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:41.651287079 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:41.651309967 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:41.651885033 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:41.652070045 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:41.652080059 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:41.652348042 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:41.652414083 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:41.652420044 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:41.652910948 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:41.652987957 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:41.653067112 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:41.653342009 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:41.653403044 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:41.653460026 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:41.653465986 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:41.679574013 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.679595947 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.679651976 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.679670095 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.680600882 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.680643082 CET	443	49740	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.680710077 CET	49740	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.681766987 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.681823015 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.681902885 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.682492971 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:41.682508945 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:41.683906078 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.683940887 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.684025049 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.684212923 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.684226990 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.699330091 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:41.704622030 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:41.781342983 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.781636000 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.781665087 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.782805920 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.782875061 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.783168077 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.783224106 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.783318996 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:41.783324957 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:41.832372904 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.041938066 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.054596901 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.077792883 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.077801943 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.077840090 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.077852964 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.077871084 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.077878952 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.077930927 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.078142881 CET	49746	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.078160048 CET	443	49746	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.079968929 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.079994917 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.080061913 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.080074072 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.080122948 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.080996990 CET	49745	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.081017971 CET	443	49745	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.087517023 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.087524891 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.087553024 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.087589979 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.087595940 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.087642908 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.088109016 CET	49742	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.088126898 CET	443	49742	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.146495104 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.146539927 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.146600962 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.146615982 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.150392056 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.150448084 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.150455952 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.159089088 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.159121037 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.159151077 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.159161091 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.159203053 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.163110971 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.167157888 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.167237043 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.167244911 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.213346004 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.265475035 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.309418917 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.309432030 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.346993923 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.347065926 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.347076893 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.356237888 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.356292009 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.356300116 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.364487886 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.364550114 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.364558935 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.374039888 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.374102116 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.374114037 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.386907101 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:42.386930943 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:42.386965036 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:42.387002945 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:42.387020111 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:42.387046099 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:42.387868881 CET	49744	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:42.387885094 CET	443	49744	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:42.389337063 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.389391899 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.389403105 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.391963005 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.391988993 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.392066002 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.392781973 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.392793894 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.401499033 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.401535034 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.401557922 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.401566982 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.401611090 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.406696081 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.414789915 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.414844036 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.414851904 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.422904015 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.422960043 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.422967911 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.432341099 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.432482958 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.432491064 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.440809965 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.440876961 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.440888882 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.445221901 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.445275068 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.445282936 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.482861996 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.500354052 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.532380104 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.552074909 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.552083969 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.552134037 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.552153111 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.552165985 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.552171946 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.552197933 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.552216053 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.552217960 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.552243948 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.556571007 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.561290026 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.561372995 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.561383963 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.568591118 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.568676949 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.568685055 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.575108051 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.575177908 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.575185061 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.575232029 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.583704948 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.583719015 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.583779097 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.585835934 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.585899115 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.592237949 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.592272997 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.592353106 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.596524000 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.600666046 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.600677967 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.600754976 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.616261005 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.616353989 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.628729105 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.628808975 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.645395994 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.645473003 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.657812119 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.657876968 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.666162014 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.666224957 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.674555063 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.674623013 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.682876110 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.682948112 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.691129923 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.691204071 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.753537893 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.753547907 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.753592968 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.753609896 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.753618956 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.753633976 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.753650904 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.753670931 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.782644987 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.782653093 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.782721043 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.782730103 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.782773018 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.782908916 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.782927036 CET	443	49749	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:42.782934904 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.782968044 CET	49749	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:42.791002989 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.791086912 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.799355030 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.799470901 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.807658911 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.807748079 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.811769962 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.811846018 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.828501940 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.828581095 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.836683035 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.836750984 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.853153944 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.853226900 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.861213923 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.861299992 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.881453037 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.881510973 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.893548012 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.893627882 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.901628971 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.901707888 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.913779020 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.913856030 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.921866894 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.921956062 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.933943987 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.934010029 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.950203896 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.950278997 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.954235077 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.954301119 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.976430893 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.976500988 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:42.984477043 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:42.984565973 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.004694939 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.004754066 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.008810043 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.008872032 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.029073954 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.029155970 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.037059069 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.037137032 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.049364090 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049391985 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049401045 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049417019 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049426079 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049432993 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049459934 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.049474955 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049499035 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.049499035 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.049552917 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.050492048 CET	49743	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.050507069 CET	443	49743	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.053520918 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.053564072 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.053623915 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.053900003 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.053911924 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.128128052 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.128216028 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.136076927 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.136147976 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.140117884 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.140208960 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.148210049 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.148273945 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.170466900 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.170542955 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.214925051 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.214932919 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.214965105 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.215001106 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.215019941 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.215032101 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.215066910 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.253626108 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.253643990 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.253731966 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.253750086 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.253799915 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.298732042 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.298749924 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.298821926 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.298845053 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.298885107 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.347625017 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.347883940 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.347902060 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.348277092 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.348546982 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.348565102 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.348628044 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.348648071 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.348660946 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.348670006 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.348706961 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.348763943 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.348946095 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.350689888 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.350902081 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.350909948 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.351290941 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.351592064 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.351661921 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.351723909 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.388617992 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.388636112 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.388698101 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.388730049 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.388772011 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.395328045 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.399328947 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.465231895 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.465512037 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.465534925 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.465857029 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.466200113 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.466267109 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.466376066 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:43.473297119 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.473535061 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.473547935 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.473864079 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.474198103 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.474256992 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.474318027 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:43.476845026 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.476862907 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.476869106 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.476931095 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.476948977 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.479515076 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.479533911 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.479600906 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.479609966 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.479654074 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.505678892 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.505695105 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.505783081 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.505794048 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.505846024 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.511331081 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:43.519325972 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:43.519989967 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.520005941 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.520081997 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.520097017 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.520137072 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.521390915 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.530535936 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.530545950 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.530571938 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.530582905 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.530596018 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.530625105 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.530658960 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.530663013 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.530699015 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.530986071 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.531006098 CET	443	49747	18.165.220.112	192.168.2.16
Dec 2, 2024 11:05:43.531016111 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.531049013 CET	49747	443	192.168.2.16	18.165.220.112
Dec 2, 2024 11:05:43.540677071 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.540694952 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.540771008 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.540782928 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.540818930 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.556024075 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.556045055 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.556147099 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.556155920 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.556205988 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.572500944 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.572518110 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.572608948 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.572630882 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.572676897 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.587434053 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.587451935 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.587524891 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.587548018 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.587590933 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.602711916 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.602730036 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.602792978 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.602806091 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.602848053 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.622400999 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.622419119 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.622503996 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.622526884 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.622574091 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.629831076 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:43.629869938 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:43.629941940 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:43.630141973 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:43.630156040 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:43.638375998 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.638397932 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.638451099 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.638469934 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.638510942 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.643491983 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.643556118 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.643568039 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.643582106 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.643631935 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.643713951 CET	49748	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.643728018 CET	443	49748	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.644454956 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:43.644481897 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:43.644541979 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:43.644680977 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:43.644691944 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:43.647680998 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:43.647706985 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:43.647768974 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:43.647977114 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:43.647986889 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:43.652650118 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.652682066 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.652754068 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.653012991 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:43.653024912 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:43.672048092 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:43.672080040 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:43.672162056 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:43.672341108 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:43.672357082 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:43.672959089 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:43.672986984 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:43.673190117 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:43.673190117 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:43.673218012 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:43.786314011 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:43.786351919 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:43.786530972 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:43.786907911 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:43.786925077 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:44.001636982 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.001935005 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.001956940 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.002255917 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.002556086 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.002597094 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.002708912 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.047322035 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.095650911 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.105294943 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.105381966 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.105408907 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.105676889 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.105709076 CET	443	49751	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.105761051 CET	49751	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.154618979 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.161484003 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.161513090 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.161537886 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.161619902 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.161638021 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.161708117 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.162456036 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.166615963 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.166687012 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.166714907 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.166941881 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.166986942 CET	443	49753	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.167035103 CET	49753	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.202373028 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.206031084 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.206039906 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.206088066 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.206114054 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.206126928 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.206140041 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.206181049 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.337023973 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.337048054 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.337125063 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.337146997 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.337193966 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.344933033 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.345002890 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.345004082 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.345051050 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.345231056 CET	49750	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.345247030 CET	443	49750	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.389404058 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.389437914 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.389570951 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.389590979 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.389743090 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.404230118 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.404314995 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.404349089 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.404396057 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.404848099 CET	49752	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:44.404860973 CET	443	49752	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:44.692240000 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.708681107 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.708756924 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.708779097 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.708837986 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.709039927 CET	49754	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.709059000 CET	443	49754	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.890614033 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.890894890 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.890911102 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.891279936 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.891695023 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.891794920 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.891892910 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:44.905247927 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:44.905565977 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:44.905591965 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:44.905930996 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:44.906258106 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:44.906322956 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:44.906388998 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:44.910007954 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:44.910216093 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:44.910237074 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:44.910558939 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:44.910865068 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:44.910927057 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:44.910981894 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:44.939327002 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:44.951325893 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:44.955333948 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.113781929 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.114041090 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.114062071 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.114984989 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.115044117 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.116149902 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.116199017 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.116400957 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.116408110 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.172524929 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.216497898 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.216830015 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.216856956 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.217207909 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.217268944 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.217919111 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.217967987 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.218827009 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.218883038 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.218981981 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.218993902 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.268390894 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.534468889 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.534523010 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.534573078 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.534600973 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.534931898 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.534977913 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.534990072 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.587364912 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.654355049 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.655447006 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.655483007 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.655508041 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.655517101 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.655565977 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.662015915 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:45.662281036 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:45.662296057 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:45.662657976 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.662708998 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.662760973 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.662795067 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.663271904 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:45.663347006 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:45.663737059 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:45.663794041 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:45.664016962 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:45.664026022 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:45.665003061 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.665066004 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.665076017 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.667346954 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.667376041 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.667407990 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.667417049 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.667457104 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.669739008 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.674488068 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.676846027 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.676906109 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.676913977 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.679203033 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.679295063 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.679302931 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.684292078 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:45.684705973 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:45.684715986 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:45.686196089 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:45.686258078 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:45.686777115 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:45.686933994 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:45.687350988 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:45.687356949 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:45.688752890 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:45.690500021 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:45.690685034 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:45.690691948 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:45.691807032 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:45.691896915 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:45.692677021 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:45.692759037 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:45.692799091 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:45.700593948 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.700706005 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.703003883 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.709074020 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.709136963 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.709161997 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.713661909 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.713748932 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.713757038 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.715394020 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:45.716134071 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:45.716176987 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:45.716206074 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:45.716212034 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:45.716223001 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:45.716253042 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:45.716275930 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:45.716540098 CET	49755	443	192.168.2.16	18.165.220.115
Dec 2, 2024 11:05:45.716551065 CET	443	49755	18.165.220.115	192.168.2.16
Dec 2, 2024 11:05:45.718405008 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.718446016 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.718467951 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.718480110 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.718523026 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.720746040 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.731399059 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.731427908 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.731460094 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:45.739329100 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:45.747409105 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:45.747415066 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.747419119 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:45.747435093 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:45.751183987 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.751208067 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.751271009 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.751295090 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.763367891 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.772058010 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.775319099 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.775372028 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.775381088 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.777601957 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.777611971 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.777664900 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.777673960 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:45.779359102 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.783034086 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.783134937 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.783142090 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.784132004 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.788427114 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.788451910 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.788495064 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.788507938 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.788556099 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.791600943 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.791660070 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.791667938 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.795317888 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.795397043 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:45.795402050 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:45.804689884 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.804753065 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.804763079 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.810606003 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.810687065 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.810694933 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.813275099 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.813349962 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.813361883 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.821063995 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.821149111 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.821157932 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.827367067 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:45.829433918 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.829510927 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.829519033 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:45.859400988 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.859407902 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.875410080 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:45.907387018 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:45.973376036 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:45.985892057 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.018522978 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.034403086 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.518862963 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.560478926 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.574740887 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.577352047 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.577364922 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.577411890 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.577451944 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.579159021 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.579216003 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.579231977 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.580836058 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.580849886 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.580873966 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.580883980 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.580900908 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.580914021 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.580933094 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.580954075 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.587968111 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.592979908 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.593074083 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.593091965 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.594337940 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.594397068 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.594429970 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.597798109 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.597805977 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.597831011 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.597877979 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.597893000 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.597924948 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.600260019 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.600342035 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.600351095 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.601653099 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.601701021 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.601710081 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.608664989 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.608730078 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.608738899 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.609961987 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.610017061 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.610024929 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.621490955 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.621577978 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.621586084 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.623136044 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.623143911 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.623167038 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.623205900 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.623214960 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.623245001 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.624386072 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.629805088 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.629870892 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.629879951 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.633256912 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.633268118 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.633347034 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.633356094 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.636933088 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.636945009 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.636974096 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.636985064 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.636995077 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.637005091 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.637010098 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.637042999 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.637073994 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.638056040 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.638113022 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.638123035 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.641938925 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.642019033 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.642026901 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.642080069 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.646497965 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.646574020 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.646584034 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.648833036 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.655993938 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.656002998 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.656021118 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.656068087 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.656102896 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.656126022 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.664441109 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.664531946 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.664541006 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.664618015 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.673290014 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.673300028 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.673372984 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.688409090 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.704375029 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.711056948 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.716578007 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.716587067 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.716650009 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.726035118 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.726133108 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.726145029 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.726202011 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.729940891 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.729943991 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.729948997 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.729953051 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.729981899 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.730024099 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.730058908 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.730058908 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.737541914 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.737620115 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.737644911 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.737658978 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.737710953 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.737881899 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.737899065 CET	443	49758	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.737909079 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.737946987 CET	49758	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.741245985 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.741254091 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.741307020 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.745055914 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.745063066 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.745115042 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.747927904 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.747936964 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.747998953 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.752244949 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.752253056 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.752319098 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.757355928 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.757364988 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.757396936 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.757430077 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.757642984 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.757667065 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.757719040 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.762453079 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.762461901 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.762523890 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.769053936 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.769135952 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.781702042 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.781713009 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.781796932 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.814840078 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.814852953 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.814955950 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.816535950 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.816553116 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.816618919 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.822423935 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.822489023 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.826155901 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.826273918 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.832252979 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.832266092 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.832321882 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.832357883 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.832379103 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.832391024 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.832427025 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.834793091 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.834861040 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.836678982 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.836765051 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.838269949 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.838345051 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.850433111 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.850506067 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.852021933 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.852097034 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.854615927 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.854681969 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.864968061 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.865118027 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.866859913 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.866956949 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.872575998 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.872631073 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.872685909 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.872694969 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.872730970 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.874468088 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.874568939 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.878283978 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.878437042 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.883958101 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.884036064 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.887752056 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.887856960 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.889657974 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.889719009 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.891544104 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.891642094 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.891647100 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.891707897 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.891930103 CET	49762	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.891949892 CET	443	49762	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.895323992 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.895345926 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.895463943 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.896192074 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.896223068 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.896287918 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.896451950 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.896471977 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.896809101 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.896826982 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.897269011 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.897346020 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.897366047 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.897666931 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.897700071 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.897753954 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.897989988 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:46.898005009 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:46.904887915 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.904962063 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.904980898 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.905029058 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.909431934 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.909462929 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.909534931 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.909837008 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.909856081 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.910252094 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.910267115 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.910348892 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.910625935 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.910644054 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.911143064 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.911166906 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.911235094 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.911524057 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:46.911540985 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:46.912451029 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.912550926 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.914350986 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.914369106 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.914443970 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.914463997 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.916229963 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.916301012 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.932348967 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.932367086 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.932420015 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.932486057 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.932502031 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.932514906 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.938920975 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.939006090 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.943186998 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.943279982 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.951793909 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.951862097 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.957099915 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.957170963 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.965832949 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.965913057 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.969749928 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:46.973431110 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.973448038 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.973520994 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.973537922 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.973589897 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.977215052 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.977297068 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.981220007 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:46.981297016 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:46.984827995 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.984911919 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:46.992459059 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:46.992537975 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.005753040 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.005832911 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.009763956 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.011414051 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.011492968 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.013338089 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.013349056 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.013381958 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.013441086 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.013472080 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.013485909 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.023407936 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.026628971 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.026751995 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.034115076 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.034190893 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.043176889 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.043243885 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.046816111 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.046863079 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.046924114 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.046942949 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.050307035 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.050390005 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.055368900 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.060842037 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.060955048 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.061665058 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.061675072 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.061713934 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.061729908 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.061738014 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.061743975 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.061769009 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.061778069 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.061813116 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.061813116 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.061852932 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.062407970 CET	49766	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.062421083 CET	443	49766	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.067681074 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.067765951 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.073618889 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.073666096 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.073678970 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.073698044 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.073750019 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.073771954 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.073812962 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.075093031 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.075181007 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.094371080 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.094383955 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.094405890 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.094413996 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.094441891 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.094460011 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.094470978 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.094501019 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.094537020 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.099514961 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.099556923 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.099567890 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.099580050 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.099592924 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.099602938 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.099623919 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.101006985 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.101015091 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.101047039 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.101082087 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.101090908 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.101104975 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.101146936 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.106847048 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.106923103 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.106933117 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.106983900 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.109800100 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.109852076 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.109918118 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.109977961 CET	49764	443	192.168.2.16	157.240.196.15
Dec 2, 2024 11:05:47.109992027 CET	443	49764	157.240.196.15	192.168.2.16
Dec 2, 2024 11:05:47.117136002 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.117153883 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.117230892 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.117240906 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.131223917 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.131263971 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.131294966 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.131303072 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.131346941 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.145894051 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.145914078 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.145958900 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.145968914 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.145996094 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.156290054 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:47.156821012 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:47.156862020 CET	443	49760	172.217.21.36	192.168.2.16
Dec 2, 2024 11:05:47.156913042 CET	49760	443	192.168.2.16	172.217.21.36
Dec 2, 2024 11:05:47.160614014 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.160635948 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.160696983 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.160706043 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.160736084 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.179055929 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.179071903 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.179128885 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.179138899 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.194469929 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.194500923 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.194576025 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.194583893 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.194622040 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.207509041 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.207530022 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.207607031 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.207617044 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.213335037 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.213402987 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.213717937 CET	49761	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:47.213733912 CET	443	49761	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:47.225903034 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.225972891 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.225986958 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.226033926 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.226037979 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.226084948 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.226257086 CET	49765	443	192.168.2.16	18.165.220.93
Dec 2, 2024 11:05:47.226267099 CET	443	49765	18.165.220.93	192.168.2.16
Dec 2, 2024 11:05:47.231935024 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.231976986 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:47.232034922 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.232249975 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:47.232269049 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:48.174952984 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.175240040 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.175259113 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.175558090 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.176019907 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.176130056 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.176197052 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.214503050 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.214782000 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.214793921 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.215150118 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.215493917 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.215558052 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.215658903 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.220777035 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.222197056 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.222227097 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.222543955 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.222877979 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.222961903 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.223041058 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.223262072 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.223326921 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.223558903 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.223567963 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.224627018 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.224692106 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.224956036 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.225018978 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.225111008 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.225117922 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.263322115 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.267340899 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.267366886 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.580295086 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.580590963 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.580615997 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.581012964 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.581329107 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.581409931 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.581444979 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.583030939 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.583277941 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.583296061 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.583602905 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.583667040 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.584203959 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.584377050 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.584377050 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.584433079 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.584511995 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.584517956 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.623334885 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.630949020 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.630991936 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.631228924 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.631257057 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.633389950 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.633884907 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.636004925 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.636034966 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.636079073 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.636086941 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.636137962 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.642801046 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.655019045 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.655091047 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.655097008 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.655123949 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.655174017 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.655267000 CET	49773	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.655280113 CET	443	49773	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.658128023 CET	49781	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.658169031 CET	443	49781	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.658303976 CET	49781	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.658575058 CET	49781	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.658588886 CET	443	49781	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.684267044 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.684310913 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.684382915 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.684403896 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.686429977 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.686466932 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.686521053 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.686531067 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.686604977 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.687385082 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.688527107 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.688560009 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.688626051 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.688636065 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.688699961 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.689635992 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.690646887 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.690885067 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.690897942 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.692303896 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.692349911 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.692414045 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.692430973 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.692981005 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.693054914 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.693063974 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.696006060 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.696042061 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.696084023 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.696093082 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.696141005 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.696333885 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.699068069 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.699153900 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.699161053 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.701293945 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.711421967 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.711889982 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.711898088 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.712043047 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.712477922 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.712549925 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.712560892 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.712662935 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.714099884 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.714170933 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.714179993 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.724055052 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.759381056 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.762362003 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.775401115 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.804394960 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.807142019 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.812149048 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.854384899 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.855925083 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.855937004 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.855978012 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.885952950 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.887075901 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.889539957 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.889703989 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.889950991 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.889971018 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.890259027 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.890753031 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.890877008 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.890899897 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.891324997 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.891453981 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.891473055 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.898195028 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.898900986 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.898972988 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.898983955 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.899954081 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.900019884 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.900031090 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.901766062 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.901902914 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.901916027 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.907489061 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.907618046 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.907644033 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.908500910 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.908574104 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.908582926 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.915899992 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.915993929 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.916213989 CET	49775	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.916233063 CET	443	49775	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.916971922 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.917097092 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.917123079 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.918885946 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.918911934 CET	49782	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:48.918936968 CET	443	49782	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:48.919029951 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.919045925 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.919049978 CET	49782	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:48.919375896 CET	49783	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.919409990 CET	443	49783	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.919466972 CET	49783	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.919622898 CET	49782	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:48.919637918 CET	443	49782	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:48.919881105 CET	49784	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.919891119 CET	443	49784	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.919985056 CET	49784	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.920156002 CET	49783	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:48.920171022 CET	443	49783	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:48.920527935 CET	49784	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.920543909 CET	443	49784	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.925664902 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.927480936 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.927545071 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.927553892 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.927596092 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.927606106 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.936178923 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.936301947 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.936312914 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.942763090 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.942878962 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.942888021 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.944856882 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.944960117 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.944967985 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.948405981 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:48.951603889 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.951605082 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.951687098 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.951694965 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.951730967 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.951738119 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.951821089 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:48.951829910 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:48.952836990 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:48.952923059 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:48.953187943 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:48.953243017 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:48.953294039 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:48.958590984 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.958749056 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.958759069 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.959063053 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.959172010 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.959181070 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.964566946 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.965400934 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.965409994 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.966289997 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.967814922 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.967823029 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.971030951 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.971904993 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.971914053 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.973980904 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.974044085 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.974050999 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.981478930 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.981534004 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:48.981543064 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:48.983695984 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.983860970 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:48.983870983 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:48.995326042 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.002361059 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:49.002366066 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.028373957 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.028382063 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.028402090 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.043405056 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:49.045371056 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.045542955 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.045610905 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.046133041 CET	49770	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.046152115 CET	443	49770	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.048882961 CET	49785	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.048924923 CET	443	49785	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.049010038 CET	49785	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.049204111 CET	49785	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.049217939 CET	443	49785	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.053144932 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.053170919 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.053230047 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.053246975 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.075387001 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.086549997 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.087569952 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.089241982 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.089764118 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.089772940 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.089864969 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.089874983 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.089875937 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.089890957 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.090795994 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.090825081 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.090874910 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.090883970 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.090929985 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.094115973 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.094871998 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.094943047 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.094952106 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.103596926 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.103713036 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.103724003 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.103837013 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.105029106 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.105041027 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.105094910 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.105103970 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.108511925 CET	49786	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:05:49.108541965 CET	443	49786	142.250.181.68	192.168.2.16
Dec 2, 2024 11:05:49.108643055 CET	49786	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:05:49.108865023 CET	49786	443	192.168.2.16	142.250.181.68
Dec 2, 2024 11:05:49.108880043 CET	443	49786	142.250.181.68	192.168.2.16
Dec 2, 2024 11:05:49.112782001 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.112791061 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.112874985 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.113013983 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.113161087 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.114126921 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.114164114 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.114197969 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.114208937 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.114578009 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.114641905 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.114643097 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.114649057 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.114667892 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.114696026 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.114725113 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.114887953 CET	49774	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.114896059 CET	443	49774	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.116949081 CET	49787	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.116969109 CET	443	49787	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.117033958 CET	49787	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.117217064 CET	49787	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.117233992 CET	443	49787	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.121795893 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.121820927 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.121969938 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.130724907 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.130733013 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.130819082 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.135469913 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.135615110 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.138664961 CET	49788	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.138686895 CET	443	49788	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.138780117 CET	49788	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.138968945 CET	49788	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.138981104 CET	443	49788	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.144176006 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.144269943 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.153116941 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.153309107 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.158103943 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.158180952 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.159220934 CET	49789	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.159241915 CET	443	49789	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.159831047 CET	49789	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.160063028 CET	49789	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.160075903 CET	443	49789	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.166891098 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.166977882 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.175626993 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.175698042 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.180308104 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.180416107 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.189013958 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.189104080 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.189153910 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.189153910 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.189285994 CET	49771	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:49.189299107 CET	443	49771	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.195631027 CET	49790	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.195652008 CET	443	49790	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.195772886 CET	49790	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.196270943 CET	49790	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:49.196281910 CET	443	49790	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:49.270801067 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.270813942 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.270956993 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.270982981 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.297102928 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.297116995 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.297246933 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.297256947 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.323016882 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.323028088 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.323060036 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.323113918 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.323123932 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.323142052 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.357516050 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.357527971 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.357559919 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.357609987 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.357624054 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.357655048 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.366250038 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.366332054 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.366332054 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.366405010 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.366530895 CET	49772	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:49.366543055 CET	443	49772	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:49.622338057 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.622364044 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.622374058 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.622380972 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.622392893 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.622400045 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.622461081 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:49.622490883 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.622528076 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:49.622582912 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:49.623158932 CET	49780	443	192.168.2.16	13.227.2.22
Dec 2, 2024 11:05:49.623173952 CET	443	49780	13.227.2.22	192.168.2.16
Dec 2, 2024 11:05:49.919912100 CET	443	49781	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:49.969409943 CET	49781	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:50.175672054 CET	443	49784	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:50.225389957 CET	49784	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:50.326097012 CET	443	49787	104.18.32.137	192.168.2.16
Dec 2, 2024 11:05:50.369411945 CET	49787	443	192.168.2.16	104.18.32.137
Dec 2, 2024 11:05:50.369730949 CET	443	49789	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:50.397671938 CET	443	49788	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:50.417426109 CET	49789	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:50.449523926 CET	49788	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:50.451920033 CET	443	49790	172.64.155.119	192.168.2.16
Dec 2, 2024 11:05:50.492176056 CET	443	49782	18.165.220.67	192.168.2.16
Dec 2, 2024 11:05:50.496397018 CET	49790	443	192.168.2.16	172.64.155.119
Dec 2, 2024 11:05:50.503613949 CET	443	49783	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:50.544389009 CET	49782	443	192.168.2.16	18.165.220.67
Dec 2, 2024 11:05:50.559381008 CET	49783	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:50.642995119 CET	443	49785	150.171.27.10	192.168.2.16
Dec 2, 2024 11:05:50.685390949 CET	49785	443	192.168.2.16	150.171.27.10
Dec 2, 2024 11:05:50.892419100 CET	443	49786	142.250.181.68	192.168.2.16
Dec 2, 2024 11:05:50.941400051 CET	49786	443	192.168.2.16	142.250.181.68

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 2, 2024 11:04:44.556298971 CET	53	63811	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:44.563582897 CET	53	52431	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:45.154331923 CET	53799	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:45.154516935 CET	63176	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:46.109008074 CET	53	63176	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:46.109666109 CET	53	53799	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:47.307399035 CET	53	53569	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:47.728147984 CET	63343	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:47.728226900 CET	60575	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:47.867789984 CET	53	63343	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:47.871125937 CET	53	60575	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:49.046219110 CET	54886	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:49.046363115 CET	63551	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:49.183585882 CET	53	63551	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:49.183887005 CET	53	54886	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:55.517539024 CET	56321	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:55.518502951 CET	53213	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:04:55.658093929 CET	53	53213	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:55.658202887 CET	53	56321	1.1.1.1	192.168.2.16
Dec 2, 2024 11:04:55.858656883 CET	53	51541	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:04.352236032 CET	53	57932	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:12.175025940 CET	53	51729	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:23.188086987 CET	53	54250	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:23.560616016 CET	54157	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:23.560909033 CET	61880	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:23.972362995 CET	53	54157	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:23.985090017 CET	53	61880	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:27.655057907 CET	57291	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:27.655205011 CET	59353	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:28.232799053 CET	53	59353	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:28.232863903 CET	53	57291	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:31.699251890 CET	58020	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:31.699532032 CET	64254	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:31.924726963 CET	53	64254	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:31.925635099 CET	53	58020	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:33.873167992 CET	49897	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:33.873310089 CET	56891	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:34.011054993 CET	53	49897	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:34.011903048 CET	53	56891	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:34.015109062 CET	53	50998	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:35.210839033 CET	58903	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:35.211209059 CET	64834	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:35.646039009 CET	53	64834	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:35.646056890 CET	53	58903	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:36.067343950 CET	64972	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:36.067743063 CET	54381	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:36.261313915 CET	53	54381	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:36.266537905 CET	53	64972	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:37.942997932 CET	50030	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:37.943141937 CET	50366	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:38.080451965 CET	53	50030	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:38.080859900 CET	53	50366	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:39.087840080 CET	49804	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:39.087950945 CET	59366	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:39.225497961 CET	53	61798	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:39.498699903 CET	53	59366	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:39.630407095 CET	53	49804	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.488419056 CET	55717	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.488552094 CET	63416	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.490392923 CET	51589	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.490529060 CET	63600	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.492228985 CET	64061	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.492367983 CET	51396	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.532891989 CET	57137	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.533109903 CET	51831	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.533804893 CET	58072	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.533936024 CET	54209	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.602659941 CET	53	53326	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.626487017 CET	53	63416	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.643809080 CET	53	55717	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.647069931 CET	60001	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.647365093 CET	53065	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:43.653986931 CET	53	59514	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.670471907 CET	53	51831	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.671607018 CET	53	57137	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.671710968 CET	53	54209	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.672055960 CET	53	58072	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.785377026 CET	53	53065	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:43.785675049 CET	53	60001	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:44.326773882 CET	53	51480	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:44.505703926 CET	64252	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:44.505944014 CET	57173	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:45.686299086 CET	53	55836	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:45.688827038 CET	59746	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:45.688960075 CET	56990	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:46.529124975 CET	61016	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:46.741580963 CET	64494	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:46.741729975 CET	60556	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:46.891515017 CET	53	64494	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:46.893435001 CET	53	60556	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:46.894151926 CET	50619	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:47.066771984 CET	51230	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:47.066905975 CET	61198	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:47.083961964 CET	53	50619	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:47.230003119 CET	53	61198	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:47.231333971 CET	53	51230	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:47.532531977 CET	61016	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:48.537554979 CET	61016	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:49.199328899 CET	53777	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:49.199575901 CET	50330	53	192.168.2.16	1.1.1.1
Dec 2, 2024 11:05:49.337871075 CET	53	50330	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:49.374871969 CET	53	52045	1.1.1.1	192.168.2.16
Dec 2, 2024 11:05:50.544501066 CET	61016	53	192.168.2.16	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 2, 2024 11:04:45.154331923 CET	192.168.2.16	1.1.1.1	0xd9d5	Standard query (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:45.154516935 CET	192.168.2.16	1.1.1.1	0x5f5c	Standard query (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	65	IN (0x0001)	false
Dec 2, 2024 11:04:47.728147984 CET	192.168.2.16	1.1.1.1	0x408e	Standard query (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:47.728226900 CET	192.168.2.16	1.1.1.1	0x5cd0	Standard query (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	65	IN (0x0001)	false
Dec 2, 2024 11:04:49.046219110 CET	192.168.2.16	1.1.1.1	0x58a0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:49.046363115 CET	192.168.2.16	1.1.1.1	0xbafe	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 2, 2024 11:04:55.517539024 CET	192.168.2.16	1.1.1.1	0xa34	Standard query (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:55.518502951 CET	192.168.2.16	1.1.1.1	0x7eb2	Standard query (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	65	IN (0x0001)	false
Dec 2, 2024 11:05:23.560616016 CET	192.168.2.16	1.1.1.1	0x14e6	Standard query (0)	authbset.wufoo.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:23.560909033 CET	192.168.2.16	1.1.1.1	0x55e6	Standard query (0)	authbset.wufoo.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:27.655057907 CET	192.168.2.16	1.1.1.1	0x6231	Standard query (0)	www.wufoo.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:27.655205011 CET	192.168.2.16	1.1.1.1	0x7893	Standard query (0)	www.wufoo.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:31.699251890 CET	192.168.2.16	1.1.1.1	0x20fe	Standard query (0)	cdn-ukwest.onetrust.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:31.699532032 CET	192.168.2.16	1.1.1.1	0xd1d0	Standard query (0)	cdn-ukwest.onetrust.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:33.873167992 CET	192.168.2.16	1.1.1.1	0xe55	Standard query (0)	cdn-ukwest.onetrust.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:33.873310089 CET	192.168.2.16	1.1.1.1	0x722	Standard query (0)	cdn-ukwest.onetrust.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:35.210839033 CET	192.168.2.16	1.1.1.1	0x4f86	Standard query (0)	www.wufoo.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:35.211209059 CET	192.168.2.16	1.1.1.1	0xf0bd	Standard query (0)	www.wufoo.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:36.067343950 CET	192.168.2.16	1.1.1.1	0x9fbf	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:36.067743063 CET	192.168.2.16	1.1.1.1	0xe60a	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:37.942997932 CET	192.168.2.16	1.1.1.1	0x391a	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:37.943141937 CET	192.168.2.16	1.1.1.1	0x1275	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:39.087840080 CET	192.168.2.16	1.1.1.1	0x4e68	Standard query (0)	cdn.ywxi.net	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:39.087950945 CET	192.168.2.16	1.1.1.1	0x4a10	Standard query (0)	cdn.ywxi.net	65	IN (0x0001)	false
Dec 2, 2024 11:05:43.488419056 CET	192.168.2.16	1.1.1.1	0xeedb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.488552094 CET	192.168.2.16	1.1.1.1	0x905b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:43.490392923 CET	192.168.2.16	1.1.1.1	0xa41a	Standard query (0)	tracker.marinsm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.490529060 CET	192.168.2.16	1.1.1.1	0x6312	Standard query (0)	tracker.marinsm.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:43.492228985 CET	192.168.2.16	1.1.1.1	0x6192	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.492367983 CET	192.168.2.16	1.1.1.1	0xcf00	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:43.532891989 CET	192.168.2.16	1.1.1.1	0xab80	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.533109903 CET	192.168.2.16	1.1.1.1	0xa2cb	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Dec 2, 2024 11:05:43.533804893 CET	192.168.2.16	1.1.1.1	0xa271	Standard query (0)	cdn.ywxi.net	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.533936024 CET	192.168.2.16	1.1.1.1	0x7b8f	Standard query (0)	cdn.ywxi.net	65	IN (0x0001)	false
Dec 2, 2024 11:05:43.647069931 CET	192.168.2.16	1.1.1.1	0xe989	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.647365093 CET	192.168.2.16	1.1.1.1	0xe7bc	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Dec 2, 2024 11:05:44.505703926 CET	192.168.2.16	1.1.1.1	0xeb99	Standard query (0)	tracker.marinsm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:44.505944014 CET	192.168.2.16	1.1.1.1	0x1fb5	Standard query (0)	tracker.marinsm.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:45.688827038 CET	192.168.2.16	1.1.1.1	0xf925	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:45.688960075 CET	192.168.2.16	1.1.1.1	0x63ef	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:46.529124975 CET	192.168.2.16	1.1.1.1	0x5389	Standard query (0)	tracker.marinsm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:46.741580963 CET	192.168.2.16	1.1.1.1	0xcb02	Standard query (0)	cdn.krxd.net	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:46.741729975 CET	192.168.2.16	1.1.1.1	0x6244	Standard query (0)	cdn.krxd.net	65	IN (0x0001)	false
Dec 2, 2024 11:05:46.894151926 CET	192.168.2.16	1.1.1.1	0x9a2d	Standard query (0)	cdn.krxd.net	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:47.066771984 CET	192.168.2.16	1.1.1.1	0x460f	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:47.066905975 CET	192.168.2.16	1.1.1.1	0x4467	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Dec 2, 2024 11:05:47.532531977 CET	192.168.2.16	1.1.1.1	0x5389	Standard query (0)	tracker.marinsm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:48.537554979 CET	192.168.2.16	1.1.1.1	0x5389	Standard query (0)	tracker.marinsm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:49.199328899 CET	192.168.2.16	1.1.1.1	0x37d9	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:49.199575901 CET	192.168.2.16	1.1.1.1	0xfd82	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 2, 2024 11:05:50.544501066 CET	192.168.2.16	1.1.1.1	0x5389	Standard query (0)	tracker.marinsm.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 2, 2024 11:04:46.109008074 CET	1.1.1.1	192.168.2.16	0x5f5c	No error (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	dnyuxtqeop0tn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:04:46.109666109 CET	1.1.1.1	192.168.2.16	0xd9d5	No error (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	dnyuxtqeop0tn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:04:46.109666109 CET	1.1.1.1	192.168.2.16	0xd9d5	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.71	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:46.109666109 CET	1.1.1.1	192.168.2.16	0xd9d5	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.67	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:46.109666109 CET	1.1.1.1	192.168.2.16	0xd9d5	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.60	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:46.109666109 CET	1.1.1.1	192.168.2.16	0xd9d5	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.126	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:47.867789984 CET	1.1.1.1	192.168.2.16	0x408e	No error (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	dnyuxtqeop0tn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:04:47.867789984 CET	1.1.1.1	192.168.2.16	0x408e	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.71	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:47.867789984 CET	1.1.1.1	192.168.2.16	0x408e	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.126	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:47.867789984 CET	1.1.1.1	192.168.2.16	0x408e	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.60	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:47.867789984 CET	1.1.1.1	192.168.2.16	0x408e	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.67	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:47.871125937 CET	1.1.1.1	192.168.2.16	0x5cd0	No error (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	dnyuxtqeop0tn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:04:49.183585882 CET	1.1.1.1	192.168.2.16	0xbafe	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 2, 2024 11:04:49.183887005 CET	1.1.1.1	192.168.2.16	0x58a0	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:55.658093929 CET	1.1.1.1	192.168.2.16	0x7eb2	No error (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	dnyuxtqeop0tn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:04:55.658202887 CET	1.1.1.1	192.168.2.16	0xa34	No error (0)	espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space	dnyuxtqeop0tn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:04:55.658202887 CET	1.1.1.1	192.168.2.16	0xa34	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.71	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:55.658202887 CET	1.1.1.1	192.168.2.16	0xa34	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.126	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:55.658202887 CET	1.1.1.1	192.168.2.16	0xa34	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.67	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:04:55.658202887 CET	1.1.1.1	192.168.2.16	0xa34	No error (0)	dnyuxtqeop0tn.cloudfront.net		18.165.220.60	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:23.972362995 CET	1.1.1.1	192.168.2.16	0x14e6	No error (0)	authbset.wufoo.com	primary-frontdoor.wufoo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:23.972362995 CET	1.1.1.1	192.168.2.16	0x14e6	No error (0)	primary-frontdoor.wufoo.com	d19zzur8741aig.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:23.972362995 CET	1.1.1.1	192.168.2.16	0x14e6	No error (0)	d19zzur8741aig.cloudfront.net		18.66.161.101	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:23.972362995 CET	1.1.1.1	192.168.2.16	0x14e6	No error (0)	d19zzur8741aig.cloudfront.net		18.66.161.50	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:23.972362995 CET	1.1.1.1	192.168.2.16	0x14e6	No error (0)	d19zzur8741aig.cloudfront.net		18.66.161.78	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:23.972362995 CET	1.1.1.1	192.168.2.16	0x14e6	No error (0)	d19zzur8741aig.cloudfront.net		18.66.161.9	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:23.985090017 CET	1.1.1.1	192.168.2.16	0x55e6	No error (0)	authbset.wufoo.com	primary-frontdoor.wufoo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:23.985090017 CET	1.1.1.1	192.168.2.16	0x55e6	No error (0)	primary-frontdoor.wufoo.com	d19zzur8741aig.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232799053 CET	1.1.1.1	192.168.2.16	0x7893	No error (0)	www.wufoo.com	g-wf-prod-cloudeng-cms.svmkinfra.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232799053 CET	1.1.1.1	192.168.2.16	0x7893	No error (0)	g-wf-prod-cloudeng-cms.svmkinfra.com	d12rqiuxgezxz2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232863903 CET	1.1.1.1	192.168.2.16	0x6231	No error (0)	www.wufoo.com	g-wf-prod-cloudeng-cms.svmkinfra.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232863903 CET	1.1.1.1	192.168.2.16	0x6231	No error (0)	g-wf-prod-cloudeng-cms.svmkinfra.com	d12rqiuxgezxz2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232863903 CET	1.1.1.1	192.168.2.16	0x6231	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.67	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232863903 CET	1.1.1.1	192.168.2.16	0x6231	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.18	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232863903 CET	1.1.1.1	192.168.2.16	0x6231	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.77	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:28.232863903 CET	1.1.1.1	192.168.2.16	0x6231	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.115	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:31.924726963 CET	1.1.1.1	192.168.2.16	0xd1d0	No error (0)	cdn-ukwest.onetrust.com			65	IN (0x0001)	false
Dec 2, 2024 11:05:31.925635099 CET	1.1.1.1	192.168.2.16	0x20fe	No error (0)	cdn-ukwest.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:31.925635099 CET	1.1.1.1	192.168.2.16	0x20fe	No error (0)	cdn-ukwest.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:34.011054993 CET	1.1.1.1	192.168.2.16	0xe55	No error (0)	cdn-ukwest.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:34.011054993 CET	1.1.1.1	192.168.2.16	0xe55	No error (0)	cdn-ukwest.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:34.011903048 CET	1.1.1.1	192.168.2.16	0x722	No error (0)	cdn-ukwest.onetrust.com			65	IN (0x0001)	false
Dec 2, 2024 11:05:35.646039009 CET	1.1.1.1	192.168.2.16	0xf0bd	No error (0)	www.wufoo.com	g-wf-prod-cloudeng-cms.svmkinfra.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:35.646039009 CET	1.1.1.1	192.168.2.16	0xf0bd	No error (0)	g-wf-prod-cloudeng-cms.svmkinfra.com	d12rqiuxgezxz2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:35.646056890 CET	1.1.1.1	192.168.2.16	0x4f86	No error (0)	www.wufoo.com	g-wf-prod-cloudeng-cms.svmkinfra.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:35.646056890 CET	1.1.1.1	192.168.2.16	0x4f86	No error (0)	g-wf-prod-cloudeng-cms.svmkinfra.com	d12rqiuxgezxz2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:35.646056890 CET	1.1.1.1	192.168.2.16	0x4f86	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.115	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:35.646056890 CET	1.1.1.1	192.168.2.16	0x4f86	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.77	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:35.646056890 CET	1.1.1.1	192.168.2.16	0x4f86	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.18	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:35.646056890 CET	1.1.1.1	192.168.2.16	0x4f86	No error (0)	d12rqiuxgezxz2.cloudfront.net		18.165.220.67	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:36.261313915 CET	1.1.1.1	192.168.2.16	0xe60a	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Dec 2, 2024 11:05:36.266537905 CET	1.1.1.1	192.168.2.16	0x9fbf	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:36.266537905 CET	1.1.1.1	192.168.2.16	0x9fbf	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:38.080451965 CET	1.1.1.1	192.168.2.16	0x391a	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:38.080451965 CET	1.1.1.1	192.168.2.16	0x391a	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:38.080859900 CET	1.1.1.1	192.168.2.16	0x1275	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Dec 2, 2024 11:05:39.498699903 CET	1.1.1.1	192.168.2.16	0x4a10	No error (0)	cdn.ywxi.net	dtx9pzf7ji0d9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:39.630407095 CET	1.1.1.1	192.168.2.16	0x4e68	No error (0)	cdn.ywxi.net	dtx9pzf7ji0d9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:39.630407095 CET	1.1.1.1	192.168.2.16	0x4e68	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.112	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:39.630407095 CET	1.1.1.1	192.168.2.16	0x4e68	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.115	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:39.630407095 CET	1.1.1.1	192.168.2.16	0x4e68	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.87	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:39.630407095 CET	1.1.1.1	192.168.2.16	0x4e68	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.93	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.626487017 CET	1.1.1.1	192.168.2.16	0x905b	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 2, 2024 11:05:43.629415035 CET	1.1.1.1	192.168.2.16	0xfe31	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.629415035 CET	1.1.1.1	192.168.2.16	0xfe31	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.629415035 CET	1.1.1.1	192.168.2.16	0xfe31	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.631755114 CET	1.1.1.1	192.168.2.16	0xcf00	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.636620998 CET	1.1.1.1	192.168.2.16	0x6192	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.643809080 CET	1.1.1.1	192.168.2.16	0xeedb	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.670471907 CET	1.1.1.1	192.168.2.16	0xa2cb	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.670471907 CET	1.1.1.1	192.168.2.16	0xa2cb	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Dec 2, 2024 11:05:43.670471907 CET	1.1.1.1	192.168.2.16	0xa2cb	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Dec 2, 2024 11:05:43.671607018 CET	1.1.1.1	192.168.2.16	0xab80	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.671607018 CET	1.1.1.1	192.168.2.16	0xab80	No error (0)	scontent.xx.fbcdn.net		157.240.196.15	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.671710968 CET	1.1.1.1	192.168.2.16	0x7b8f	No error (0)	cdn.ywxi.net	dtx9pzf7ji0d9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.672055960 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	cdn.ywxi.net	dtx9pzf7ji0d9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.672055960 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.93	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.672055960 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.115	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.672055960 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.112	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.672055960 CET	1.1.1.1	192.168.2.16	0xa271	No error (0)	dtx9pzf7ji0d9.cloudfront.net		18.165.220.87	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:43.785377026 CET	1.1.1.1	192.168.2.16	0xe7bc	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.785675049 CET	1.1.1.1	192.168.2.16	0xe989	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:43.785675049 CET	1.1.1.1	192.168.2.16	0xe989	No error (0)	dg2iu7dxxehbo.cloudfront.net		13.227.2.22	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:45.826683044 CET	1.1.1.1	192.168.2.16	0x63ef	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:45.826824903 CET	1.1.1.1	192.168.2.16	0xf925	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:46.897185087 CET	1.1.1.1	192.168.2.16	0x415f	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:46.897185087 CET	1.1.1.1	192.168.2.16	0x415f	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:46.897185087 CET	1.1.1.1	192.168.2.16	0x415f	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:47.230003119 CET	1.1.1.1	192.168.2.16	0x4467	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:47.231333971 CET	1.1.1.1	192.168.2.16	0x460f	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:47.231333971 CET	1.1.1.1	192.168.2.16	0x460f	No error (0)	dg2iu7dxxehbo.cloudfront.net		13.227.2.22	A (IP address)	IN (0x0001)	false
Dec 2, 2024 11:05:49.337871075 CET	1.1.1.1	192.168.2.16	0xfd82	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:49.337871075 CET	1.1.1.1	192.168.2.16	0xfd82	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:49.337958097 CET	1.1.1.1	192.168.2.16	0x37d9	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 11:05:49.337958097 CET	1.1.1.1	192.168.2.16	0x37d9	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space

https:

authbset.wufoo.com

www.wufoo.com

cdn-ukwest.onetrust.com

geolocation.onetrust.com

cdn.ywxi.net

connect.facebook.net

bat.bing.com

www.google.com

js.adsrvr.org

fs.microsoft.com

slscr.update.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49699	18.165.220.71	80	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2024 11:04:46.236099958 CET	474	OUT	GET / HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 2, 2024 11:04:47.725083113 CET	609	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 02 Dec 2024 10:04:47 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/ X-Cache: Redirect from cloudfront Via: 1.1 53a0f975e2490ceb7823ef71fea7315a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: ON4Iu7in0NnrQLmaiM2ssKW7nHXtAU0QrJxyMlj8ODk_3KLNmr8Shg== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
Dec 2, 2024 11:05:32.735348940 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49701	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:49 UTC	702	OUT	GET / HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:04:50 UTC	731	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 40 Connection: close Date: Mon, 02 Dec 2024 10:04:49 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d8641-1b95f0f660a49a806cedca30 Vary: Origin, Accept Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range Location: /index.html X-Cache: Miss from cloudfront Via: 1.1 bf53ab602e7d8a88d55571ca0f838cbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: f9l9WzEdKqOyipjt-VZw_VoedL1VvhUqP2M5jkWIbE-_0ju7q074uw==
2024-12-02 10:04:50 UTC	40	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 69 6e 64 65 78 2e 68 74 6d 6c 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to /index.html</p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49705	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:51 UTC	712	OUT	GET /index.html HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:04:53 UTC	790	IN	HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Mon, 02 Dec 2024 10:04:52 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d8644-449b79034f3be41a1de37b52 Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range Link: <https://huggingface.co/spaces/espanyol/hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd>; rel="canonical" X-Cache: Miss from cloudfront Via: 1.1 a95adf7afe468fe543cb5750140a2bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: GmwS0wDctVw4dOjykQmPc1z8Y9UH7bFrQR59mQCNc1xcIjHUVj2r9g==
2024-12-02 10:04:53 UTC	3517	IN	Data Raw: 64 62 36 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 68 75 67 67 69 6e 67 66 61 63 65 3d 7b 76 61 72 69 61 62 6c 65 73 3a 7b 22 53 50 41 43 45 5f 43 52 45 41 54 4f 52 5f 55 53 45 52 5f 49 44 22 3a 22 36 37 34 62 37 62 30 63 61 35 35 62 62 35 37 33 65 62 39 62 36 36 66 63 22 7d 7d 3b 3c 2f 73 63 72 69 70 74 3e 20 20 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 74 69 74 6c 65 3e 0a 53 69 67 6e 20 69 6e 20 77 69 74 68 20 79 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 20 61 63 63 6f 75 6e 74 0a 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 21 2d 2d 20 4d 65 74 61 20 54 61 67 73 20 2d 2d 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 Data Ascii: db6<script>window.huggingface={variables:{"SPACE_CREATOR_USER_ID":"674b7b0ca55bb573eb9b66fc"}};</script> <!DOCTYPE html><html><head><title>Sign in with your organizational account</title>... Meta Tags --><meta charset="utf-8"><meta name="ge
2024-12-02 10:04:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49709	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:54 UTC	644	OUT	GET /css/structure.css HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:04:55 UTC	1025	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 1172 Connection: close Date: Mon, 02 Dec 2024 10:04:55 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d8647-24d6666e36a820193b75a432 Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range Link: <https://huggingface.co/spaces/espanyol/hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd>; rel="canonical" X-Repo-Commit: f118f9bf563cc1d6f67d3bd32e8b637aa73cb70e Accept-Ranges: bytes Content-Disposition: inline; filename*=UTF-8''css%2Fstructure.css; filename="css/structure.css"; ETag: "50bd472a1685592ab79bee75d56fc0477b4ea716" X-Cache: Miss from cloudfront Via: 1.1 d46e622c0d11ffdbb1b481b1a8f2ae72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 6RybTKXLXuLmd957e1_HmO3uGCb5ebfPeTDJIey2wyuzHH2-COKlqg==
2024-12-02 10:04:55 UTC	1172	IN	Data Raw: 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 31 37 70 78 20 30 20 31 35 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 73 6d 61 6c 6c 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 54 61 68 6f 6d 61 2c 20 41 72 69 61 6c 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 66 69 67 75 72 65 2c 66 69 67 75 72 65 20 69 6d 67 2c 66 69 67 63 61 70 74 69 6f 6e 2c 68 67 72 6f 75 70 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 76 69 64 65 6f 2c 6f 62 6a 65 63 74 2c 6f 75 74 70 75 74 7b 64 69 73 70 Data Ascii: html{background:#eee}body{margin:17px 0 15px 0;padding:0;text-align:center;font-size:small;font-family:"Lucida Grande", Tahoma, Arial, Verdana, sans-serif}article,aside,figure,figure img,figcaption,hgroup,footer,header,nav,section,video,object,output{disp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49708	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:54 UTC	639	OUT	GET /css/form.css HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:04:55 UTC	1016	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 21992 Connection: close Date: Mon, 02 Dec 2024 10:04:55 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d8647-59a0566624b33be36cb30cdb Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range Link: <https://huggingface.co/spaces/espanyol/hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd>; rel="canonical" X-Repo-Commit: f118f9bf563cc1d6f67d3bd32e8b637aa73cb70e Accept-Ranges: bytes Content-Disposition: inline; filename*=UTF-8''css%2Fform.css; filename="css/form.css"; ETag: "2e6167570a6f7578a5ea66c5b239ebd0d6f08e9b" X-Cache: Miss from cloudfront Via: 1.1 ad4641cb3263eb2a4233d70631a033f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: c3n12JtDETMt34vN-swQiPfo43Pic4D0oEaBmqtdGoCAHeOrx1UEWA==
2024-12-02 10:04:55 UTC	15145	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 69 63 74 6f 73 27 3b 73 72 63 3a 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 70 69 63 74 6f 73 2e 65 6f 74 3f 69 65 66 69 78 22 29 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 50 69 63 74 6f 73 22 29 2c 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 70 69 63 74 6f 73 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 70 69 63 74 6f 73 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 70 69 63 74 6f 73 2e 73 76 67 23 77 65 62 66 6f 6e 74 49 79 66 5a 62 73 65 46 22 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c Data Ascii: @font-face{font-family:'Pictos';src:url("/fonts/pictos.eot?iefix");src:local("Pictos"),url("/fonts/pictos.woff") format("woff"),url("/fonts/pictos.ttf") format("truetype"),url("/fonts/pictos.svg#webfontIyfZbseF") format("svg");font-weight:normal;font-styl
2024-12-02 10:04:55 UTC	6847	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 66 6f 72 6d 20 6c 69 2e 63 61 70 74 63 68 61 20 2e 6e 6f 73 63 72 69 70 74 20 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 66 6f 72 6d 20 6c 69 2e 63 61 70 74 63 68 61 20 2e 6e 6f 73 63 72 69 70 74 20 6c 61 62 65 6c 2e 64 65 73 63 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 7d 66 6f 72 6d 20 6c 69 2e 63 61 70 74 63 68 61 20 2e 6e 6f 73 63 72 69 70 74 20 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 69 66 72 61 6d 65 5b 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 66 6f 72 6d 20 6c Data Ascii: background:#fff}form li.captcha .noscript iframe{border:none;overflow:hidden;margin:0;padding:0}form li.captcha .noscript label.desc{display:block !important}form li.captcha .noscript textarea{margin-left:12px}iframe[src="about:blank"]{display:none}form l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49710	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:54 UTC	629	OUT	GET /scripts/wufoo.js HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:04:55 UTC	1037	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 5689 Connection: close Date: Mon, 02 Dec 2024 10:04:55 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d8647-43bc92b46f796ea54ac73000 Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range Link: <https://huggingface.co/spaces/espanyol/hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd>; rel="canonical" X-Repo-Commit: f118f9bf563cc1d6f67d3bd32e8b637aa73cb70e Accept-Ranges: bytes Content-Disposition: inline; filename*=UTF-8''scripts%2Fwufoo.js; filename="scripts/wufoo.js"; ETag: "fb32974df2ebd9c69af9cffb8b1e6f56c68be3f3" X-Cache: Miss from cloudfront Via: 1.1 ad4641cb3263eb2a4233d70631a033f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 9RjS0YsZfYdNK-V4GrJTSQzh0m9_FdKey2zVQG_vinTlej6IHTEE9w==
2024-12-02 10:04:55 UTC	5689	IN	Data Raw: 61 64 64 45 76 65 6e 74 28 77 69 6e 64 6f 77 2c 20 27 6c 6f 61 64 27 2c 20 69 6e 69 74 46 6f 72 6d 29 3b 0d 0a 0d 0a 76 61 72 20 68 69 67 68 6c 69 67 68 74 5f 61 72 72 61 79 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 46 6f 72 6d 28 29 7b 0d 0a 09 69 6e 69 74 69 61 6c 69 7a 65 46 6f 63 75 73 28 29 3b 0d 0a 09 76 61 72 20 61 63 74 69 76 65 46 6f 72 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 66 6f 72 6d 27 29 5b 30 5d 3b 0d 0a 09 61 64 64 45 76 65 6e 74 28 61 63 74 69 76 65 46 6f 72 6d 2c 20 27 73 75 62 6d 69 74 27 2c 20 64 69 73 61 62 6c 65 53 75 62 6d 69 74 42 75 74 74 6f 6e 29 3b 0d 0a 09 69 66 49 6e 73 74 72 75 63 74 73 28 29 3b 0d 0a 09 73 Data Ascii: addEvent(window, 'load', initForm);var highlight_array = new Array();function initForm(){initializeFocus();var activeForm = document.getElementsByTagName('form')[0];addEvent(activeForm, 'submit', disableSubmitButton);ifInstructs();s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49712	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-02 10:04:56 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=120104 Date: Mon, 02 Dec 2024 10:04:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49713	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:57 UTC	399	OUT	GET /scripts/wufoo.js HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:04:58 UTC	1037	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 5689 Connection: close Date: Mon, 02 Dec 2024 10:04:57 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d8649-6b876d921ffc0c17723fe8d2 Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Repo-Commit,X-Request-Id,X-Error-Code,X-Error-Message,X-Total-Count,ETag,Link,Accept-Ranges,Content-Range Link: <https://huggingface.co/spaces/espanyol/hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd>; rel="canonical" X-Repo-Commit: f118f9bf563cc1d6f67d3bd32e8b637aa73cb70e Accept-Ranges: bytes Content-Disposition: inline; filename*=UTF-8''scripts%2Fwufoo.js; filename="scripts/wufoo.js"; ETag: "fb32974df2ebd9c69af9cffb8b1e6f56c68be3f3" X-Cache: Miss from cloudfront Via: 1.1 c1ca71e6238e57e7b87d021fa60aad98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: G89dUG3no7sxr4w6Ch9Uf_pN76-tqYDqn3zcJnMBBr_HFd4Jl3tn0g==
2024-12-02 10:04:58 UTC	5689	IN	Data Raw: 61 64 64 45 76 65 6e 74 28 77 69 6e 64 6f 77 2c 20 27 6c 6f 61 64 27 2c 20 69 6e 69 74 46 6f 72 6d 29 3b 0d 0a 0d 0a 76 61 72 20 68 69 67 68 6c 69 67 68 74 5f 61 72 72 61 79 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 46 6f 72 6d 28 29 7b 0d 0a 09 69 6e 69 74 69 61 6c 69 7a 65 46 6f 63 75 73 28 29 3b 0d 0a 09 76 61 72 20 61 63 74 69 76 65 46 6f 72 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 66 6f 72 6d 27 29 5b 30 5d 3b 0d 0a 09 61 64 64 45 76 65 6e 74 28 61 63 74 69 76 65 46 6f 72 6d 2c 20 27 73 75 62 6d 69 74 27 2c 20 64 69 73 61 62 6c 65 53 75 62 6d 69 74 42 75 74 74 6f 6e 29 3b 0d 0a 09 69 66 49 6e 73 74 72 75 63 74 73 28 29 3b 0d 0a 09 73 Data Ascii: addEvent(window, 'load', initForm);var highlight_array = new Array();function initForm(){initializeFocus();var activeForm = document.getElementsByTagName('form')[0];addEvent(activeForm, 'submit', disableSubmitButton);ifInstructs();s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49714	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:57 UTC	684	OUT	GET /favicon.ico HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:04:58 UTC	632	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 47890 Connection: close Date: Mon, 02 Dec 2024 10:04:57 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d8649-2c095f694fb493d22b63c012 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Fri, 29 Nov 2024 17:07:06 GMT ETag: W/"bb12-19378e3f690" X-Cache: Miss from cloudfront Via: 1.1 1cfee74ca8783b126318bfb563367846.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: MMj6GmDS5xUDnJ2fov1pRGx3eM-mrS85oVvFJs1b4XDGciSwLpJ45w==
2024-12-02 10:04:58 UTC	8484	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 28 05 00 00 46 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 6e 05 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 96 19 00 00 00 00 00 00 01 00 20 00 54 74 00 00 be 46 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 33 00 05 ff 48 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 48 00 07 ff 33 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff aa 7f 0c ff f5 f2 51 ca ec ff 97 a6 e0 ff c1 a2 de ff c6 d7 f0 ff 8d ff ee e1 3c ff e9 e1 3c ce ec ff 8d a0 de ff c6 a9 e1 ff c1 cf ee ff 97 ff f5 ef 52 ff b9 8b 0b 00 00 00 00 ff eb d7 1a b7 e7 ff bc 58 d0 ff ff 27 ca ff ff 17 Data Ascii: (F (n00 (- TtF( 3HH3Q<<RX'
2024-12-02 10:04:58 UTC	16384	IN	Data Raw: ff ff 1d d0 ff ff 09 b4 ff ff 00 a8 ff ff b8 e9 ff ff ff f8 f5 f5 ff ff ff 16 ff ff ff 11 ff f6 f3 ef 7d d7 ff ff 00 a7 ff ff 0f bb ff ff 17 c6 ff ff 0d b8 ff ff 0a b3 ff ff 13 c0 ff ff 1e d1 ff ff 1f d3 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1f d4 ff ff 10 be ff ff 01 a9 ff ff 13 c2 ff ff 1f d4 ff ff 1f d3 ff ff 0d ba ff ff 01 a9 ff ff 15 c6 ff ff 1f d3 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1f d3 ff ff 1c ce ff ff 10 bc ff ff 09 b2 ff ff 0f bb ff ff 18 c8 ff ff 0b b6 ff ff 00 a9 ff ff b0 e7 ff ff ff f8 f6 ed ff ff ff 11 ff ff ff 0b ff f8 f4 e5 b1 e8 ff ff 00 aa ff ff 02 ab ff ff 0c b6 ff ff 17 c6 ff ff 1e d2 ff ff 20 d4 ff ff 17 Data Ascii: }
2024-12-02 10:04:58 UTC	16384	IN	Data Raw: 18 7b fe 45 65 91 26 fa 9e da 4c 0e a0 fd 7b c9 f9 39 b9 b9 ef bf 91 6f b5 5f 97 b8 ec 97 6a 8a e0 59 0c 03 3a 09 20 d0 6d 68 ba b7 7f 80 f3 07 81 66 4d dd bc a6 68 fe 7e f3 27 73 c3 7b 3f d5 e1 da af b6 01 d0 fe bf 20 04 7f 7c e7 20 66 7f 7b 98 55 61 aa 4f e0 2d ff b9 22 dc cd cc 41 ca 8c 5b 6d 95 a6 ec da e6 ea 98 1e 44 49 95 3a a7 69 94 8b d7 d2 94 df 13 e0 a3 95 93 d9 8e 49 13 00 54 fa b2 6a 68 5c ff 8d 2c 8c 18 c6 c9 53 b6 f0 27 ae fa 63 e9 e5 3c 08 20 c5 c4 6a 5c da e4 3c 05 7b ef c1 44 dd 86 c3 4b 87 5f 3b a1 8f 69 c4 7f 43 00 6c c1 1a e8 f8 a1 00 26 fb 2d b7 0f 84 ff ba 6e 71 e8 c3 9b df 4e 10 af b7 e3 4b 70 26 c1 a9 d5 8e 85 d9 8c ed 17 e1 9f 4a 91 52 4a b6 6d 1f c5 77 a0 df a0 10 f4 14 3e a6 30 c6 04 5f 4e a6 00 b8 96 ba c1 b5 0d 60 e4 20 73 a2 Data Ascii: {Ee&L{9o_jY: mhfMh~'s{? \| f{UaO-"A[mDI:iITjh\,S'c< j\<{DK_;iCl&-nqNKp&JRJmw>0_N` s
2024-12-02 10:04:58 UTC	6638	IN	Data Raw: 13 51 07 40 30 72 21 cc 45 c8 b4 22 5c 0a 8a 9b f2 57 e2 c3 75 eb 2e ae d1 2c 2f 12 c0 be 73 ea 4e 01 50 74 b0 69 61 23 c8 c3 1d 8a e6 51 06 e2 d6 05 58 5a 29 d3 5d 00 58 ff 85 d0 e3 61 f0 07 0a c2 7c ac 9a 79 e0 7c 0e f7 d9 9a fd 32 7c d4 bf 37 1f b5 fa 08 e1 00 1a de cf 7e 1d 86 36 75 6c cb f4 2d 31 7e b5 10 f3 3d 02 f3 df f2 96 10 ae f8 bb fa 92 eb ef 37 f2 00 0d 7e 0f 58 b5 51 60 47 e0 f9 dc dc 40 80 1b 1b c0 9e 6f 84 70 dd c3 61 26 90 91 6a bb 47 c6 93 7a 29 2a 96 36 a6 c8 4a 21 71 38 41 43 06 d0 70 ae 97 9e 07 31 81 73 30 d4 3a e3 46 49 4b 9e b1 fc 04 22 ae d4 a4 b3 ff db 26 37 e2 b8 ee 3f 85 68 dc be ec 76 ec 56 84 9f 42 64 3f 44 ea 9a 8a 22 61 23 c6 cc df 95 8b 2e 45 6e a5 ac 8e c4 3a b4 13 db 3d 51 1a 44 21 1d 03 3f 2e 8e 3b 80 f5 36 8c f0 96 ae Data Ascii: Q@0r!E"\Wu.,/sNPtia#QXZ)]Xa\|y\|2\|7~6ul-1~=7~XQ`G@opa&jGz)*6J!q8ACp1s0:FIK"&7?hvVBd?D"a#.En:=QD!?.;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49716	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:57 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-02 10:04:58 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=180026 Date: Mon, 02 Dec 2024 10:04:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-02 10:04:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49717	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:58 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HOBz34y5de7DD+B&MD=PCZ7zMOE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-02 10:04:59 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: de326bc7-a99a-4d59-bdef-a9df0830d59c MS-RequestId: fdb9c880-8898-49ff-a313-15ae9707f05a MS-CV: kqSzuMif1U2hV8Xk.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 02 Dec 2024 10:04:58 GMT Connection: close Content-Length: 24490
2024-12-02 10:04:59 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-02 10:04:59 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49718	18.165.220.71	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:04:59 UTC	394	OUT	GET /favicon.ico HTTP/1.1 Host: espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:00 UTC	632	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 47890 Connection: close Date: Mon, 02 Dec 2024 10:05:00 GMT X-Powered-By: huggingface-moon cross-origin-opener-policy: same-origin Referrer-Policy: strict-origin-when-cross-origin X-Request-Id: Root=1-674d864c-4c0fc01168df375020bf2893 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Fri, 29 Nov 2024 17:07:06 GMT ETag: W/"bb12-19378e3f690" X-Cache: Miss from cloudfront Via: 1.1 d46e622c0d11ffdbb1b481b1a8f2ae72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: --BjLJ0oqWvn1cb7IrHbrBXj9JIQ3QMuGKKVSVh3_o-QlDxqLrnEuw==
2024-12-02 10:05:00 UTC	8484	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 28 05 00 00 46 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 6e 05 00 00 30 30 00 00 01 00 20 00 28 2d 00 00 96 19 00 00 00 00 00 00 01 00 20 00 54 74 00 00 be 46 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 33 00 05 ff 48 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 48 00 07 ff 33 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff aa 7f 0c ff f5 f2 51 ca ec ff 97 a6 e0 ff c1 a2 de ff c6 d7 f0 ff 8d ff ee e1 3c ff e9 e1 3c ce ec ff 8d a0 de ff c6 a9 e1 ff c1 cf ee ff 97 ff f5 ef 52 ff b9 8b 0b 00 00 00 00 ff eb d7 1a b7 e7 ff bc 58 d0 ff ff 27 ca ff ff 17 Data Ascii: (F (n00 (- TtF( 3HH3Q<<RX'
2024-12-02 10:05:01 UTC	16384	IN	Data Raw: ff ff 1d d0 ff ff 09 b4 ff ff 00 a8 ff ff b8 e9 ff ff ff f8 f5 f5 ff ff ff 16 ff ff ff 11 ff f6 f3 ef 7d d7 ff ff 00 a7 ff ff 0f bb ff ff 17 c6 ff ff 0d b8 ff ff 0a b3 ff ff 13 c0 ff ff 1e d1 ff ff 1f d3 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1f d4 ff ff 10 be ff ff 01 a9 ff ff 13 c2 ff ff 1f d4 ff ff 1f d3 ff ff 0d ba ff ff 01 a9 ff ff 15 c6 ff ff 1f d3 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1e d2 ff ff 1f d3 ff ff 1c ce ff ff 10 bc ff ff 09 b2 ff ff 0f bb ff ff 18 c8 ff ff 0b b6 ff ff 00 a9 ff ff b0 e7 ff ff ff f8 f6 ed ff ff ff 11 ff ff ff 0b ff f8 f4 e5 b1 e8 ff ff 00 aa ff ff 02 ab ff ff 0c b6 ff ff 17 c6 ff ff 1e d2 ff ff 20 d4 ff ff 17 Data Ascii: }
2024-12-02 10:05:01 UTC	8949	IN	Data Raw: 18 7b fe 45 65 91 26 fa 9e da 4c 0e a0 fd 7b c9 f9 39 b9 b9 ef bf 91 6f b5 5f 97 b8 ec 97 6a 8a e0 59 0c 03 3a 09 20 d0 6d 68 ba b7 7f 80 f3 07 81 66 4d dd bc a6 68 fe 7e f3 27 73 c3 7b 3f d5 e1 da af b6 01 d0 fe bf 20 04 7f 7c e7 20 66 7f 7b 98 55 61 aa 4f e0 2d ff b9 22 dc cd cc 41 ca 8c 5b 6d 95 a6 ec da e6 ea 98 1e 44 49 95 3a a7 69 94 8b d7 d2 94 df 13 e0 a3 95 93 d9 8e 49 13 00 54 fa b2 6a 68 5c ff 8d 2c 8c 18 c6 c9 53 b6 f0 27 ae fa 63 e9 e5 3c 08 20 c5 c4 6a 5c da e4 3c 05 7b ef c1 44 dd 86 c3 4b 87 5f 3b a1 8f 69 c4 7f 43 00 6c c1 1a e8 f8 a1 00 26 fb 2d b7 0f 84 ff ba 6e 71 e8 c3 9b df 4e 10 af b7 e3 4b 70 26 c1 a9 d5 8e 85 d9 8c ed 17 e1 9f 4a 91 52 4a b6 6d 1f c5 77 a0 df a0 10 f4 14 3e a6 30 c6 04 5f 4e a6 00 b8 96 ba c1 b5 0d 60 e4 20 73 a2 Data Ascii: {Ee&L{9o_jY: mhfMh~'s{? \| f{UaO-"A[mDI:iITjh\,S'c< j\<{DK_;iCl&-nqNKp&JRJmw>0_N` s
2024-12-02 10:05:01 UTC	7435	IN	Data Raw: 16 54 ed a6 9e a2 f2 63 5f a2 99 eb 99 df 34 d2 86 d3 c3 b1 1f 12 f1 5a 5f 96 7d a9 23 d9 3c 52 04 52 96 de e2 74 ee 92 bc ed 10 87 05 b4 6b ef 77 42 f8 d2 93 98 7b 45 c9 96 83 bc fa 97 55 de 2d 8c 5d 8a 29 32 79 0a 39 58 6a 7e dc 3b df 15 c2 b7 5e 4a 14 44 d5 a8 a9 cf 6d bb 21 33 9f 35 c3 bd 4e 05 09 47 d3 d0 25 a1 cd 74 ac f9 5b ce a2 b9 95 f1 60 51 99 62 c7 fc b3 25 c4 45 75 b3 0e 0e 27 f4 2c 37 5b 1f ad 01 9c 82 47 6e 9d 17 8e 7e 0d 4d 78 f3 c2 30 fb 08 9f 1a e3 79 fc a6 5f 51 b9 ad be 53 d8 50 e6 89 1e fa f7 dc 83 a1 ef 21 3b c3 d0 c5 fb c3 1c 0e f7 68 89 f1 b3 7a d8 85 1e f6 a2 15 50 a6 39 c5 bd 6b 3f 56 23 cc 8b fa c1 bc ed 07 f7 02 94 e5 99 d5 c3 5f fb 41 ff ce 7a 2c 4c 7f 9b e9 17 fb be 99 61 4c 6d b9 cd 5c 7b 5e 86 27 06 3f ec 43 08 a9 47 97 a5 Data Ascii: Tc_4Z_}#<RRtkwB{EU-])2y9Xj~;^JDm!35NG%t[`Qb%Eu',7[Gn~Mx0y_QSP!;hzP9k?V#_Az,LaLm\{^'?CG
2024-12-02 10:05:01 UTC	6638	IN	Data Raw: 13 51 07 40 30 72 21 cc 45 c8 b4 22 5c 0a 8a 9b f2 57 e2 c3 75 eb 2e ae d1 2c 2f 12 c0 be 73 ea 4e 01 50 74 b0 69 61 23 c8 c3 1d 8a e6 51 06 e2 d6 05 58 5a 29 d3 5d 00 58 ff 85 d0 e3 61 f0 07 0a c2 7c ac 9a 79 e0 7c 0e f7 d9 9a fd 32 7c d4 bf 37 1f b5 fa 08 e1 00 1a de cf 7e 1d 86 36 75 6c cb f4 2d 31 7e b5 10 f3 3d 02 f3 df f2 96 10 ae f8 bb fa 92 eb ef 37 f2 00 0d 7e 0f 58 b5 51 60 47 e0 f9 dc dc 40 80 1b 1b c0 9e 6f 84 70 dd c3 61 26 90 91 6a bb 47 c6 93 7a 29 2a 96 36 a6 c8 4a 21 71 38 41 43 06 d0 70 ae 97 9e 07 31 81 73 30 d4 3a e3 46 49 4b 9e b1 fc 04 22 ae d4 a4 b3 ff db 26 37 e2 b8 ee 3f 85 68 dc be ec 76 ec 56 84 9f 42 64 3f 44 ea 9a 8a 22 61 23 c6 cc df 95 8b 2e 45 6e a5 ac 8e c4 3a b4 13 db 3d 51 1a 44 21 1d 03 3f 2e 8e 3b 80 f5 36 8c f0 96 ae Data Ascii: Q@0r!E"\Wu.,/sNPtia#QXZ)]Xa\|y\|2\|7~6ul-1~=7~XQ`G@opa&jGz)*6J!q8ACp1s0:FIK"&7?hvVBd?D"a#.En:=QD!?.;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49720	18.66.161.101	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:25 UTC	976	OUT	POST /forms/ztefh951y2ux4k/ HTTP/1.1 Host: authbset.wufoo.com Connection: keep-alive Content-Length: 805 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space Content-Type: multipart/form-data; boundary=----WebKitFormBoundarywUhyM3wsn04z2YRr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:25 UTC	805	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 77 55 68 79 4d 33 77 73 6e 30 34 7a 32 59 52 72 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 46 69 65 6c 64 33 22 0d 0a 0d 0a 6a 6f 6e 2e 64 6f 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 77 55 68 79 4d 33 77 73 6e 30 34 7a 32 59 52 72 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 46 69 65 6c 64 31 30 22 0d 0a 0d 0a 6a 6f 6e 2e 64 6f 65 40 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 77 55 68 79 4d 33 77 73 6e 30 34 7a 32 59 52 72 Data Ascii: ------WebKitFormBoundarywUhyM3wsn04z2YRrContent-Disposition: form-data; name="Field3"jon.doe------WebKitFormBoundarywUhyM3wsn04z2YRrContent-Disposition: form-data; name="Field10"jon.doe@microsoft.com------WebKitFormBoundarywUhyM3wsn04z2YRr
2024-12-02 10:05:27 UTC	1591	IN	HTTP/1.1 302 Found Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Mon, 02 Dec 2024 10:05:27 GMT Server: nginx/1.22.0 set-cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; Domain=wufoo.com; expires=Wed, 01-Jan-2025 10:05:27 GMT; Max-Age=2592000; Path=/; SameSite=None; Secure set-cookie: ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; Domain=.wufoo.com; expires=Mon, 02 Dec 2024 10:35:27 GMT; Path=/; SameSite=None; Secure set-cookie: ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; Domain=.wufoo.com; expires=Sun, 02 Mar 2025 10:05:27 GMT; Path=/; SameSite=None; Secure set-cookie: submission-authbset-1=submitted; Domain=wufoo.com; expires=Mon, 02-Dec-2024 11:05:27 GMT; Max-Age=3600; Path=/; SameSite=None; Secure set-cookie: wuConfirmPage=1; Domain=wufoo.com; expires=Wed, 01-Jan-2025 10:05:27 GMT; Max-Age=2592000; Path=/; SameSite=None; Secure set-cookie: wuentry=m-122-m-989; Domain=authbset.wufoo.com; expires=Wed, 01-Jan-2025 10:05:27 GMT; Max-Age=2592000; Path=/; SameSite=None; Secure Location: https://www.wufoo.com/endpage/ Cache-Control: no-cache, no-store Access-Control-Allow-Origin: * Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: origin, x-requested-with, content-type, authorization Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 edd0b6250cdc635d6c9fac34e62bc31c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: BjzUtOCWdj4waiDHqkGrG6sqY2CnGxK9DizCsXc-yZSqhSmKG8DGLA==
2024-12-02 10:05:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49721	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:29 UTC	992	OUT	GET /endpage/ HTTP/1.1 Host: www.wufoo.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:31 UTC	717	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Mon, 02 Dec 2024 10:05:31 GMT Server: nginx Link: <https://www.wufoo.com/wp-json/>; rel="https://api.w.org/" Link: <https://www.wufoo.com/wp-json/wp/v2/pages/15014>; rel="alternate"; type="application/json" Link: <https://www.wufoo.com/?p=15014>; rel=shortlink X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 a95adf7afe468fe543cb5750140a2bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 38Nk6TfHL9SW1Zf5kad35v8HUfKBUS8uLHgSz2kIN6IQTpwXvteI7A==
2024-12-02 10:05:31 UTC	7910	IN	Data Raw: 31 65 64 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 67 64 70 72 2d 6f 70 74 65 64 2d 69 6e 20 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 21 Data Ascii: 1ede<!doctype html><html lang="en-US" class="no-js gdpr-opted-in "> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <!
2024-12-02 10:05:31 UTC	16384	IN	Data Raw: 35 66 33 37 0d 0a 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 Data Ascii: 5f37 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,1
2024-12-02 10:05:31 UTC	7999	IN	Data Raw: 6c 3d 22 23 33 33 33 45 34 38 22 20 64 3d 22 4d 37 33 2e 36 2c 35 39 2e 37 63 2d 30 2e 33 2c 31 2d 31 2e 32 2c 31 2e 36 2d 32 2e 32 2c 31 2e 35 63 2d 31 2e 32 2c 30 2e 31 2d 32 2e 32 2d 30 2e 38 2d 32 2e 32 2d 32 63 30 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 33 76 2d 35 68 31 2e 37 76 34 2e 36 63 30 2c 30 2e 38 2c 30 2e 34 2c 31 2e 33 2c 31 2e 31 2c 31 2e 33 0a 09 20 20 20 20 20 20 73 31 2e 35 2d 30 2e 36 2c 31 2e 35 2d 31 2e 39 76 2d 34 68 31 2e 38 56 36 31 68 2d 31 2e 35 4c 37 33 2e 36 2c 35 39 2e 37 7a 22 2f 3e 0a 09 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 33 33 33 45 34 38 22 20 64 3d 22 4d 38 31 2e 36 2c 35 35 2e 35 63 2d 30 2e 32 2d 30 2e 31 2d 30 2e 35 2d 30 2e 31 2d 30 2e 37 2d 30 2e 31 63 2d 31 2c 30 2d 31 2e 38 2c 30 2e 37 2d 31 Data Ascii: l="#333E48" d="M73.6,59.7c-0.3,1-1.2,1.6-2.2,1.5c-1.2,0.1-2.2-0.8-2.2-2c0-0.1,0-0.2,0-0.3v-5h1.7v4.6c0,0.8,0.4,1.3,1.1,1.3 s1.5-0.6,1.5-1.9v-4h1.8V61h-1.5L73.6,59.7z"/> <path fill="#333E48" d="M81.6,55.5c-0.2-0.1-0.5-0.1-0.7-0.1c-1,0-1.8,0.7-1
2024-12-02 10:05:31 UTC	16368	IN	Data Raw: 33 66 65 38 0d 0a 34 2c 30 2c 30 2e 38 2d 30 2e 33 2c 30 2e 38 2d 30 2e 38 76 2d 38 2e 39 43 31 30 2e 34 2c 32 32 2c 31 30 2e 31 2c 32 31 2e 35 2c 39 2e 37 2c 32 31 2e 35 22 2f 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 31 2c 39 2e 38 6c 2d 35 2e 33 2d 34 2e 31 6c 35 2e 33 2d 34 2e 31 6c 35 2e 33 2c 34 2e 31 4c 31 36 2e 31 2c 39 2e 38 7a 20 4d 32 33 2c 36 2e 35 68 33 2e 35 56 31 38 6c 2d 30 2e 38 2d 30 2e 35 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 2d 30 2e 31 2d 31 2c 30 2e 32 73 2d 30 2e 31 2c 30 2e 38 2c 30 2e 32 2c 31 0d 0a 20 20 20 20 20 20 6c 32 2c 31 2e 33 63 30 2e 31 2c 30 2c 30 2e 32 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 32 2c 30 2c 30 2e 33 2d 30 2e 31 68 30 2e 31 6c 31 2e 39 2d 31 2e 33 63 30 2e 33 2d 30 Data Ascii: 3fe84,0,0.8-0.3,0.8-0.8v-8.9C10.4,22,10.1,21.5,9.7,21.5"/> <path d="M16.1,9.8l-5.3-4.1l5.3-4.1l5.3,4.1L16.1,9.8z M23,6.5h3.5V18l-0.8-0.5c-0.4-0.2-0.8-0.1-1,0.2s-0.1,0.8,0.2,1 l2,1.3c0.1,0,0.2,0.1,0.3,0.1c0.1,0,0.2,0,0.3-0.1h0.1l1.9-1.3c0.3-0
2024-12-02 10:05:32 UTC	16384	IN	Data Raw: 62 66 64 61 0d 0a 2d 31 2e 32 2d 30 2e 38 2d 31 2e 39 2d 30 2e 38 2d 31 2e 39 63 2d 30 2e 31 2d 30 2e 33 2d 30 2e 31 2d 30 2e 35 2c 30 2e 32 2d 30 2e 37 63 30 2e 31 2c 30 2e 31 2c 30 2e 34 2c 30 2e 36 2c 30 2e 35 2c 30 2e 39 0d 0a 20 20 20 20 20 20 4c 36 2e 36 2c 32 31 63 30 2e 38 2c 31 2e 34 2c 31 2c 31 2e 36 2c 32 2e 38 2c 32 2e 34 63 31 2e 36 2c 30 2e 38 2c 32 2e 36 2c 31 2e 32 2c 32 2e 38 2c 32 2e 39 56 32 36 2e 39 4c 31 32 2e 32 2c 32 36 2e 39 7a 20 4d 31 30 2c 32 32 63 2d 31 2e 34 2d 30 2e 36 2d 31 2e 34 2d 30 2e 36 2d 32 2d 31 2e 37 6c 2d 30 2e 31 2d 30 2e 32 0d 0a 20 20 20 20 20 20 63 2d 30 2e 34 2d 30 2e 38 2d 31 2d 32 2e 32 2d 32 2e 34 2d 31 2e 37 48 35 2e 34 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 35 2c 30 2e 34 43 33 2e 37 Data Ascii: bfda-1.2-0.8-1.9-0.8-1.9c-0.1-0.3-0.1-0.5,0.2-0.7c0.1,0.1,0.4,0.6,0.5,0.9 L6.6,21c0.8,1.4,1,1.6,2.8,2.4c1.6,0.8,2.6,1.2,2.8,2.9V26.9L12.2,26.9z M10,22c-1.4-0.6-1.4-0.6-2-1.7l-0.1-0.2 c-0.4-0.8-1-2.2-2.4-1.7H5.4c-0.2,0.1-0.4,0.2-0.5,0.4C3.7
2024-12-02 10:05:32 UTC	16384	IN	Data Raw: 2e 31 2c 32 36 2e 35 2c 31 33 2e 33 2c 32 33 2e 39 7a 20 4d 34 35 2e 34 2c 33 30 2e 33 63 32 2e 33 2c 30 2c 34 2e 34 2d 31 2e 33 2c 35 2e 39 2d 33 2e 36 0d 0a 09 09 63 32 2e 32 2d 33 2e 34 2c 32 2e 37 2d 38 2e 31 2c 31 2e 32 2d 31 31 2e 33 63 2d 31 2e 33 2d 32 2e 37 2d 34 2d 34 2e 35 2d 37 2e 31 2d 34 2e 35 63 2d 33 2e 31 2c 30 2d 35 2e 39 2c 31 2e 37 2d 37 2e 31 2c 34 2e 35 63 2d 31 2e 35 2c 33 2e 32 2d 31 2c 38 2c 31 2e 32 2c 31 31 2e 33 43 34 30 2e 39 2c 32 39 2c 34 33 2c 33 30 2e 33 2c 34 35 2e 34 2c 33 30 2e 33 7a 0d 0a 09 09 20 4d 34 30 2e 31 2c 31 36 2e 31 63 30 2e 39 2d 32 2e 31 2c 32 2e 39 2d 33 2e 33 2c 35 2e 33 2d 33 2e 33 73 34 2e 34 2c 31 2e 32 2c 35 2e 33 2c 33 2e 33 63 31 2e 32 2c 32 2e 36 2c 30 2e 37 2c 36 2e 37 2d 31 2c 39 2e 34 63 2d 30 Data Ascii: .1,26.5,13.3,23.9z M45.4,30.3c2.3,0,4.4-1.3,5.9-3.6c2.2-3.4,2.7-8.1,1.2-11.3c-1.3-2.7-4-4.5-7.1-4.5c-3.1,0-5.9,1.7-7.1,4.5c-1.5,3.2-1,8,1.2,11.3C40.9,29,43,30.3,45.4,30.3z M40.1,16.1c0.9-2.1,2.9-3.3,5.3-3.3s4.4,1.2,5.3,3.3c1.2,2.6,0.7,6.7-1,9.4c-0
2024-12-02 10:05:32 UTC	16354	IN	Data Raw: 2d 31 32 2e 39 35 32 2d 2e 35 39 35 20 31 2e 36 31 34 2d 33 2e 33 37 7a 6d 2d 33 2e 34 37 38 20 37 2e 32 38 6c 31 39 2e 30 30 37 2e 38 39 35 20 33 2e 36 20 33 2e 36 32 2d 32 34 2e 32 32 36 2d 31 2e 31 33 38 20 31 2e 36 31 38 2d 33 2e 33 37 36 7a 6d 32 2e 32 37 33 20 31 39 2e 32 35 6c 2d 31 31 2e 32 32 33 2d 2e 35 32 34 63 2e 30 32 33 2d 2e 30 35 35 2e 30 34 36 2d 2e 31 31 32 2e 30 37 32 2d 2e 31 36 36 6c 31 2e 35 32 36 2d 33 2e 31 39 35 20 31 36 2e 30 36 38 2e 37 36 36 2d 36 2e 34 34 33 20 33 2e 31 32 7a 6d 31 39 2e 37 35 37 2d 39 2e 35 36 36 6c 2d 35 2e 30 33 36 20 32 2e 34 33 38 2d 32 32 2e 32 39 2d 31 2e 30 36 32 20 31 2e 36 30 35 2d 33 2e 33 36 20 32 36 2e 36 36 38 20 31 2e 32 37 63 2d 2e 32 36 2e 32 39 33 2d 2e 35 38 2e 35 33 37 2d 2e 39 34 36 2e 37 Data Ascii: -12.952-.595 1.614-3.37zm-3.478 7.28l19.007.895 3.6 3.62-24.226-1.138 1.618-3.376zm2.273 19.25l-11.223-.524c.023-.055.046-.112.072-.166l1.526-3.195 16.068.766-6.443 3.12zm19.757-9.566l-5.036 2.438-22.29-1.062 1.605-3.36 26.668 1.27c-.26.293-.58.537-.946.7
2024-12-02 10:05:32 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 31 2c 31 2e 34 2c 32 2e 31 2c 31 2e 34 2c 34 2e 32 63 30 2c 32 2d 30 2e 37 2c 38 2e 37 2d 31 30 2c 38 2e 37 0d 0a 09 09 63 2d 36 2e 37 2c 30 2d 31 39 2e 37 2d 36 2e 34 2d 31 39 2e 37 2d 32 31 2e 31 43 33 2e 32 2c 31 34 2c 31 30 2e 36 2c 33 2e 31 2c 32 34 2e 33 2c 33 2e 31 63 31 32 2e 37 2c 30 2c 32 31 2e 31 2c 31 31 2c 32 31 2e 31 2c 31 38 2e 33 43 34 35 2e 34 2c 32 34 2e 36 2c 34 32 2e 32 2c 32 35 2e 39 2c 34 30 2e 39 2c 32 35 2e 39 7a 22 2f 3e 0d 0a 09 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 73 74 31 22 20 63 78 3d 22 32 31 2e 35 22 20 63 79 3d 22 33 35 2e 32 22 20 72 3d 22 34 2e 35 22 2f 3e 0d 0a 09 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 73 74 31 22 20 63 78 3d 22 33 31 2e 32 22 20 63 79 3d 22 31 35 2e 39 22 20 72 3d 22 34 Data Ascii: 3ff81,1.4,2.1,1.4,4.2c0,2-0.7,8.7-10,8.7c-6.7,0-19.7-6.4-19.7-21.1C3.2,14,10.6,3.1,24.3,3.1c12.7,0,21.1,11,21.1,18.3C45.4,24.6,42.2,25.9,40.9,25.9z"/><circle class="st1" cx="21.5" cy="35.2" r="4.5"/><circle class="st1" cx="31.2" cy="15.9" r="4
2024-12-02 10:05:32 UTC	13921	IN	Data Raw: 33 36 35 39 0d 0a 65 6d 70 6c 61 74 65 73 2f 69 6e 76 69 74 61 74 69 6f 6e 73 2f 22 20 63 6c 61 73 73 3d 22 6e 61 76 5f 5f 6c 69 6e 6b 22 3e 49 6e 76 69 74 61 74 69 6f 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 5f 5f 69 74 65 6d 20 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 75 66 6f 6f 2e 63 6f 6d 2f 66 6f 72 6d 2d 62 75 69 6c 64 65 72 2f 22 20 63 6c 61 73 73 3d 22 6e 61 76 5f 5f 6c 69 6e 6b 22 3e 44 65 6d 6f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 5f 5f 69 74 65 6d 20 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 75 66 6f 6f 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 2f 22 20 63 6c 61 73 73 3d 22 6e 61 76 5f 5f 6c 69 Data Ascii: 3659emplates/invitations/" class="nav__link">Invitations</a></li></ul></li><li class="nav__item "><a href="https://www.wufoo.com/form-builder/" class="nav__link">Demo</a></li><li class="nav__item "><a href="https://www.wufoo.com/pricing/" class="nav__li
2024-12-02 10:05:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49726	172.64.155.119	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:33 UTC	548	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:33 UTC	830	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: I15No2k5QFmqh89BwOau4g== Last-Modified: Thu, 28 Nov 2024 10:12:21 GMT x-ms-request-id: 9155e317-401e-002b-3cd1-42d73f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11929 Expires: Tue, 03 Dec 2024 10:05:33 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba7fcc3eac0f65-EWR
2024-12-02 10:05:33 UTC	539	IN	Data Raw: 35 37 61 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 28 74 3d 3e 7b 76 61 72 20 61 2c 6f 2c 72 2c 65 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 65 75 70 75 Data Ascii: 57aevar OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupu
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 69 66 79 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 Data Ascii: R","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",t
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 69 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c Data Ascii: [n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},i);function i(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toL
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 Data Ascii: .cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastI
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 5b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 2e 68 6f 73 74 6e 61 6d 65 5d 3b 74 72 79 7b 65 3d 6e 65 77 20 55 52 4c 28 74 2c 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 61 62 6f 75 74 3a 62 6c Data Ascii: createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i=[document.location.hostname,n.hostname];try{e=new URL(t,location.origin)}catch(t){return"about:bl
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e 49 66 42 75 6c 6b 44 6f 6d 61 69 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 3d 74 2e 44 6f 6d 61 69 6e 2c 61 3d 74 2e 42 75 6c 6b 44 6f 6d 61 69 6e 43 68 65 63 6b 55 72 6c 3b 65 26 26 65 2e 43 6f 6f 6b 69 65 56 32 42 75 6c 6b 44 6f 6d 61 69 6e 4d Data Ascii: bute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomainIfBulkDomainEnabled=function(t){var e=t&&t.TenantFeatures,i=window.location.hostname,n=t.Domain,a=t.BulkDomainCheckUrl;e&&e.CookieV2BulkDomainM
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 62 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 45 6e 61 62 6c 65 64 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2e 69 73 56 61 6c 69 64 29 29 2c 74 2e 69 73 56 61 6c 69 64 26 26 28 65 2e 44 6f 6d 61 69 6e 3d 77 69 6e 64 6f 77 Data Ascii: this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage.setItem("bulkDomainMgmtEnabled",JSON.stringify(t.isValid)),t.isValid&&(e.Domain=window
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 2e 64 6f 6d 61 69 6e 4a 73 6f 6e 3b 69 28 6f 29 7d 65 6c 73 65 7b 6c 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 2e 70 75 73 68 28 74 29 3b 76 61 72 20 73 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b Data Ascii: dow.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSON.parse(o).domainJson;i(o)}else{l.mobileOnlineURL.push(t);var s=new XMLHttpRequest;
2024-12-02 10:05:33 UTC	1369	IN	Data Raw: 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 70 5b 72 5d 26 26 30 3c 3d 70 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 72 65 61 6b 7d 30 3c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 43 6f 75 6e 74 72 69 65 73 2e 69 6e 64 65 78 4f 66 28 72 29 26 26 28 65 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 29 7d 72 65 74 75 72 6e 20 69 7c 7c 65 7c 7c 6e 7d 2c 66 2e 70 72 6f 74 6f Data Ascii: r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].States;if(p[r]&&0<=p[r].indexOf(s)){i=t.RuleSet[u];break}0<=t.RuleSet[u].Countries.indexOf(r)&&(e=t.RuleSet[u])}return i\|\|e\|\|n},f.proto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49722	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:33 UTC	808	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.5 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:35 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 113381 Connection: close Date: Mon, 02 Dec 2024 10:05:34 GMT Server: nginx Last-Modified: Tue, 16 Jul 2024 08:04:05 GMT ETag: "66962975-1bae5" Expires: Tue, 02 Dec 2025 10:05:34 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a95adf7afe468fe543cb5750140a2bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: Xpnw1F6JaFmm1wAQ6LVHKRyjcTnnXhHxSZGe6pjg0axFaTXth0gWbQ==
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-12-02 10:05:35 UTC	16053	IN	Data Raw: 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 37 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d Data Ascii: ound-dim-70:not(.has-background-gradient):before{opacity:.7}.wp-block-cover-image.has-background-dim.has-background-dim-80 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-80 .wp-block-cover__gradient-background,.wp-
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 2d 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 3b 70 61 64 64 69 6e 67 3a 30 20 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 Data Ascii: input__label-content{width:-moz-fit-content;width:fit-content}.wp-block-form-input__input{font-size:1em;margin-bottom:.5em;padding:0 .5em}.wp-block-form-input__input[type=date],.wp-block-form-input__input[type=datetime-local],.wp-block-form-input__input[t
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 68 32 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 6c 72 5d 29 2c 68 32 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 72 6c 5d 29 2c 68 33 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 6c 72 5d 29 2c 68 33 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 Data Ascii: h2.has-text-align-left[style=writing-mode]:where([style=vertical-lr]),h2.has-text-align-right[style=writing-mode]:where([style=vertical-rl]),h3.has-text-align-left[style=writing-mode]:where([style=vertical-lr]),h3.has-text-align-right[style*=writing
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 5f 5f 63 6f 6e 74 65 6e 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 68 61 73 2d 63 68 69 6c 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d Data Ascii: navigation__submenu-container>.wp-block-navigation-item>.wp-block-navigation-item__content .wp-block-navigation__submenu-icon{margin-left:auto;margin-right:0}.wp-block-navigation .has-child .wp-block-navigation__submenu-container .wp-block-navigation-item
2024-12-02 10:05:36 UTC	16384	IN	Data Raw: 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 65 6d 61 69 6c 20 6c 61 62 65 6c 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 75 72 6c 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 20 23 77 70 Data Ascii: omment-form-email label,.wp-block-post-comments-form .comment-form-url label{display:block;margin-bottom:.25em}.wp-block-post-comments-form .comment-form-cookies-consent{display:flex;gap:.25em}.wp-block-post-comments-form .comment-form-cookies-consent #wp
2024-12-02 10:05:36 UTC	15408	IN	Data Raw: 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 6c 69 6e 6b 65 64 69 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 64 36 36 63 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 6d 61 73 74 6f 64 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 38 38 64 34 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c Data Ascii: (.is-style-logos-only) .wp-social-link-linkedin{background-color:#0d66c2;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-mastodon{background-color:#3288d4;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49723	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:33 UTC	796	OUT	GET /wp-content/themes/wufoo-site/style.css?ver=1.3 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:35 UTC	610	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 147644 Connection: close Date: Mon, 02 Dec 2024 10:05:34 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:09 GMT ETag: "64e5de85-240bc" Expires: Tue, 02 Dec 2025 10:05:34 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 47ee4fe14f23efe91f211cb8c7e62ea8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: DDNhbVmX8SdVx5sCFz_AniL_2bRSljUbuA28E0k4-_L50OAuHgsFHg==
2024-12-02 10:05:35 UTC	15774	IN	Data Raw: ef bb bf 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b Data Ascii: html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 20 2e 63 2d 62 74 6e 2d 2d 6d 6f 64 75 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 35 38 36 65 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 37 64 31 66 38 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6d 6f 64 75 6c 65 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 20 2e 63 2d 62 74 6e 2d 2d 6d 6f 64 75 6c 65 3a 66 6f 63 75 73 2c 2e 6d 6f 64 75 6c 65 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 20 2e 63 2d 62 74 6e 2d 2d 6d 6f 64 75 6c 65 3a 68 6f 76 65 72 2c 2e 6d 6f 64 75 6c 65 2d 2d 63 6f 6c 6f 72 2d 70 75 72 70 6c 65 20 2e 63 2d 62 74 6e 2d 2d 6d 6f 64 75 6c 65 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 64 36 63 65 38 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 Data Ascii: -color-purple .c-btn--module{background-color:#9586ec;border-color:#d7d1f8;color:#fff}.module--color-purple .c-btn--module:focus,.module--color-purple .c-btn--module:hover,.module--color-purple .c-btn--module:active{background-color:#7d6ce8;border-color:#
2024-12-02 10:05:35 UTC	279	IN	Data Raw: 74 73 5f 5f 63 6f 6d 6d 65 6e 74 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 63 6f 6d 6d 65 6e 74 20 63 69 74 65 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 36 65 36 63 36 63 7d 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 63 6f 6d 6d 65 6e 74 20 2e 75 72 6c 2c 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 6c 69 6e 6b 2c 2e 63 6f 6d 6d 65 6e 74 2d 65 64 69 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 36 31 62 37 64 34 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 63 6f 6d 6d 65 6e 74 20 2e 75 72 6c 3a 66 6f 63 75 73 2c 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 63 6f 6d Data Ascii: ts__comment p{margin-bottom:.5rem}.c-comments__comment cite{font-style:normal;font-size:.75rem;color:#6e6c6c}.c-comments__comment .url,.c-comments__link,.comment-edit-link{color:#61b7d4;text-decoration:none}.c-comments__comment .url:focus,.c-comments__com
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 6e 74 73 5f 5f 63 6f 6d 6d 65 6e 74 20 2e 75 72 6c 3a 61 63 74 69 76 65 2c 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 63 2d 63 6f 6d 6d 65 6e 74 73 5f 5f 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 63 6f 6d 6d 65 6e 74 2d 65 64 69 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 63 6f 6d 6d 65 6e 74 2d 65 64 69 74 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 63 6f 6d 6d 65 6e 74 2d 65 64 69 74 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 36 39 63 35 65 34 7d 23 63 6f 6d 6d 65 6e 74 66 6f 72 6d 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 32 70 78 20 73 6f 6c 69 64 20 23 65 66 65 66 65 66 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 Data Ascii: nts__comment .url:active,.c-comments__link:focus,.c-comments__link:hover,.c-comments__link:active,.comment-edit-link:focus,.comment-edit-link:hover,.comment-edit-link:active{color:#69c5e4}#commentform{border-top:2px solid #efefef;padding-top:3rem;margin-t
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 66 65 61 74 75 72 65 2d 2d 61 72 74 69 63 6c 65 2d 6c 69 6e 6b 2d 6c 69 73 74 20 2e 6d 2d 66 65 61 74 75 72 65 5f 5f 61 72 74 69 63 6c 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 66 6c 65 78 3a 31 7d 7d 2e 6d 2d 66 65 61 74 75 72 65 2d 2d 61 72 74 69 63 6c 65 2d 6c 69 6e 6b 2d 6c 69 73 74 20 2e 6d 2d 66 65 61 74 75 72 65 5f 5f 61 72 74 69 63 6c 65 20 68 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 2d 66 65 61 74 75 72 65 2d 2d 61 72 74 69 63 6c 65 2d 6c 69 6e 6b 2d 6c 69 73 74 20 2e 6d 2d 66 65 61 74 75 72 65 5f 5f 61 72 74 69 63 6c 65 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6d 2d 66 65 61 74 75 72 65 2d 2d 61 72 74 69 63 6c 65 2d 6c Data Ascii: feature--article-link-list .m-feature__article{padding-top:0;padding-left:3rem;text-align:left;flex:1}}.m-feature--article-link-list .m-feature__article h2{width:100%}.m-feature--article-link-list .m-feature__article p{font-size:1rem}.m-feature--article-l
2024-12-02 10:05:35 UTC	16384	IN	Data Raw: 67 2d 70 6c 75 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 2e 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 65 36 63 36 63 7d 2e 6d 2d 61 63 63 6f 72 64 69 6f 6e 73 5f 5f 69 6d 61 67 65 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 2d 61 63 63 6f 72 64 69 6f 6e 73 5f 5f 6c 69 6e 65 2d 2d 76 65 72 74 2c 2e 6d 2d 61 63 63 6f 72 64 69 6f 6e 73 5f 5f 6c 69 6e 65 2d 2d 68 6f 72 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 36 37 36 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 2e 36 32 35 72 65 6d 7d 2e 6d 2d 61 63 63 6f 72 64 69 6f 6e 73 5f 5f 6c 69 6e 65 2d 2d 76 65 72 74 7b 77 69 64 74 68 3a 2e 31 38 37 35 72 65 6d Data Ascii: g-plus{font-size:.8em;display:inline-block;margin:0 .5em;color:#6e6c6c}.m-accordions__image{max-width:100%}.m-accordions__line--vert,.m-accordions__line--hori{background-color:#e66760;position:absolute;top:1.625rem}.m-accordions__line--vert{width:.1875rem
2024-12-02 10:05:36 UTC	16384	IN	Data Raw: 7b 2e 6d 2d 63 6f 6d 70 2d 63 68 61 72 74 5f 5f 74 61 62 6c 65 20 74 68 2c 2e 6d 2d 63 6f 6d 70 2d 63 68 61 72 74 5f 5f 74 61 62 6c 65 20 74 64 7b 70 61 64 64 69 6e 67 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 37 35 7d 7d 2e 6d 2d 63 6f 6d 70 2d 63 68 61 72 74 5f 5f 74 61 62 6c 65 20 74 68 65 61 64 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 7b 2e 6d 2d 63 6f 6d 70 2d 63 68 61 72 74 5f 5f 74 61 62 6c 65 20 74 68 65 61 64 20 74 68 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 7d 2e 6d 2d 63 6f 6d 70 2d 63 68 61 72 74 5f 5f 74 61 62 6c 65 20 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 Data Ascii: {.m-comp-chart__table th,.m-comp-chart__table td{padding:1rem;line-height:1.375}}.m-comp-chart__table thead th{font-weight:600}@media screen and (min-width: 480px){.m-comp-chart__table thead th{font-size:1rem}}.m-comp-chart__table th{background-color:#f8f
2024-12-02 10:05:36 UTC	16384	IN	Data Raw: 6f 73 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6e 61 76 2d 2d 6d 6f 62 2e 69 73 2d 6f 70 65 6e 20 2e 6d 6f 62 2d 74 6f 67 67 6c 65 2d 6e 61 76 5f 5f 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 61 76 2d 2d 6d 6f 62 2e 69 73 2d 6f 70 65 6e 20 2e 6e 61 76 5f 5f 6c 69 73 74 7b 6c 65 66 74 3a 30 7d 2e 6e 61 76 2d 2d 6d 6f 62 2e 69 73 2d 6f 70 65 6e 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 70 61 63 69 74 79 3a 2e 34 35 7d 2e 6e 61 76 2d 2d 6d 6f 62 20 2e 6e 61 76 5f 5f 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 Data Ascii: ose{display:block}.nav--mob.is-open .mob-toggle-nav__menu{display:none}.nav--mob.is-open .nav__list{left:0}.nav--mob.is-open:after{display:block;opacity:.45}.nav--mob .nav__link{display:block;color:#fff;text-transform:uppercase;text-decoration:none;font-s
2024-12-02 10:05:36 UTC	16384	IN	Data Raw: 62 6c 6f 67 5f 5f 66 6f 6c 6c 6f 77 3a 61 63 74 69 76 65 2e 63 2d 62 6c 6f 67 2d 70 6f 73 74 5f 5f 73 68 61 72 65 2d 6c 69 6e 6b 2d 2d 74 77 69 74 74 65 72 2c 2e 63 2d 62 6c 6f 67 2d 70 6f 73 74 5f 5f 73 68 61 72 65 20 61 3a 66 6f 63 75 73 2e 63 2d 62 6c 6f 67 2d 70 6f 73 74 5f 5f 73 68 61 72 65 2d 6c 69 6e 6b 2d 2d 74 77 69 74 74 65 72 2c 2e 63 2d 62 6c 6f 67 2d 70 6f 73 74 5f 5f 73 68 61 72 65 20 61 3a 68 6f 76 65 72 2e 63 2d 62 6c 6f 67 2d 70 6f 73 74 5f 5f 73 68 61 72 65 2d 6c 69 6e 6b 2d 2d 74 77 69 74 74 65 72 2c 2e 63 2d 62 6c 6f 67 2d 70 6f 73 74 5f 5f 73 68 61 72 65 20 61 3a 61 63 74 69 76 65 2e 63 2d 62 6c 6f 67 2d 70 6f 73 74 5f 5f 73 68 61 72 65 2d 6c 69 6e 6b 2d 2d 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: blog__follow:active.c-blog-post__share-link--twitter,.c-blog-post__share a:focus.c-blog-post__share-link--twitter,.c-blog-post__share a:hover.c-blog-post__share-link--twitter,.c-blog-post__share a:active.c-blog-post__share-link--twitter{background-color:#
2024-12-02 10:05:36 UTC	16384	IN	Data Raw: 36 38 35 63 36 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 6d 2d 70 6c 61 6e 73 5f 5f 70 6c 61 6e 2d 2d 66 72 65 65 20 2e 6d 2d 70 6c 61 6e 73 5f 5f 70 72 69 63 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 67 72 69 64 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 33 33 2e 33 33 25 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 66 72 20 31 66 72 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 70 6c 61 6e 73 5f 5f 70 6c 61 6e 2d 2d 66 Data Ascii: 685c6;display:block;padding-bottom:1.5rem}.m-plans__plan--free .m-plans__price-container{display:inline-grid;vertical-align:middle;width:33.33%;grid-template-columns:1fr 1fr;align-content:center;align-items:center;min-height:0 !important}.m-plans__plan--f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49724	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:33 UTC	808	OUT	GET /wp-content/plugins/tablepress/css/default.min.css?ver=1.14 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:34 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 5092 Connection: close Date: Mon, 02 Dec 2024 10:05:34 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:24:30 GMT ETag: "64e5de5e-13e4" Expires: Tue, 02 Dec 2025 10:05:34 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1b300ac0fc08f49360b62bb3f1350070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: zgta1xhFQ-BbquaWpZqJaBval_a8ZJgjFOeAjK1kVhq_K8w23GAy0w==
2024-12-02 10:05:34 UTC	5092	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 62 6c 65 50 72 65 73 73 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 32 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 64 30 39 47 4d 67 41 42 41 41 41 41 41 41 50 55 41 41 30 41 41 41 41 41 43 5a 41 41 41 41 4e 2b 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 50 30 5a 47 56 45 30 63 47 68 34 47 59 41 43 43 55 68 45 49 43 6f 51 49 67 6e 49 4c 46 67 41 42 4e 67 49 6b 41 79 67 45 49 41 57 47 63 67 65 42 41 52 76 36 42 38 69 75 42 7a 4b 35 33 6f 41 68 4b 67 32 4b 57 44 73 72 65 7a 6a 61 6c 53 65 66 6f 63 66 44 39 2f 75 5a 35 37 35 50 53 62 59 45 71 4a 48 41 Data Ascii: @font-face{font-family:TablePress;src:url(data:application/font-woff2;charset=utf-8;base64,d09GMgABAAAAAAPUAA0AAAAACZAAAAN+AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0ZGVE0cGh4GYACCUhEICoQIgnILFgABNgIkAygEIAWGcgeBARv6B8iuBzK53oAhKg2KWDsrezjalSefocfD9/uZ575PSbYEqJHA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49725	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:33 UTC	792	OUT	GET /wp-content/themes/wufoo-site/js/vendor/wufoo-mixpanel.js HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:35 UTC	620	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2588 Connection: close Date: Mon, 02 Dec 2024 10:05:34 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a1c" Expires: Tue, 02 Dec 2025 10:05:34 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 90772e5ec48c9653874b9b06fe89ab50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: kAI6oLuZuh-cQh4jvQSgaDZkI4hinal2CpryZij86CMMmkG-M0MxRg==
2024-12-02 10:05:35 UTC	2588	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 72 5b 6f 5d 29 72 65 74 75 72 6e 20 72 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 72 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 3d 7b 7d 3b 74 2e 6d 3d 65 2c 74 2e 63 3d 72 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6f 29 7b 74 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49727	172.64.155.119	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:35 UTC	633	OUT	GET /consent/86f42b6d-7a31-469c-804c-319643173d42/86f42b6d-7a31-469c-804c-319643173d42.json HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wufoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:36 UTC	829	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:35 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8eba7fda6b1632f4-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 73889 Cache-Control: public, max-age=86400 Last-Modified: Wed, 04 Sep 2024 20:47:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: uFSHn6VFDyK51A6G8or01Q== x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a0abfa26-401e-0082-45d8-3c164d000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-12-02 10:05:36 UTC	540	IN	Data Raw: 31 35 61 63 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 38 36 66 34 32 Data Ascii: 15ac{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202407.2.0","OptanonDataJSON":"86f42
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 2d 20 53 68 6f 77 20 42 61 6e 6e 65 72 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 64 65 22 2c 22 6e 6f 22 2c 22 66 69 22 2c 22 62 65 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 6c 76 22 2c 22 68 72 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 6d 63 22 2c 22 73 69 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 63 68 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 67 72 22 2c 22 69 74 22 2c 22 65 73 22 2c 22 72 65 22 2c 22 61 74 22 2c 22 63 79 22 2c 22 61 78 22 2c 22 63 7a 22 2c 22 70 6c 22 2c 22 72 6f 22 2c 22 6c 69 22 2c 22 6e 6c 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 Data Ascii: - Show Banner","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","gr","it","es","re","at","cy","ax","cz","pl","ro","li","nl"],"States":{},"Language
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 2c 22 66 6f 22 2c 22 77 66 22 2c 22 67 61 22 2c 22 77 73 22 2c 22 67 64 22 2c 22 67 65 22 2c 22 67 67 22 2c 22 67 68 22 2c 22 67 69 22 2c 22 67 6c 22 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 Data Ascii: ,"fo","wf","ga","ws","gd","ge","gg","gh","gi","gl","gm","gn","gq","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb"
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 43 50 41 20 54 65 6d 70 6c 61 74 65 20 28 57 75 66 6f 6f 29 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d Data Ascii: Vendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"CCPA Template (Wufoo)","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false}],"IabData":{"cookieVersion":"1","createdTime":"2024-09-
2024-12-02 10:05:36 UTC	909	IN	Data Raw: 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6a 65 63 74 41 6c 6c 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 61 72 67 65 74 65 64 54 65 6d 70 6c 61 74 65 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6e 73 65 6e 74 53 74 6f 72 65 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 Data Ascii: antFeatures":{"CookieV2BannerFocus":true,"CookieV2RejectAll":true,"CookieV2TargetedTemplates":true,"CookieV2GPC":true,"CookieV2GeolocationJsonApi":true,"CookieV2TCF21":true,"CookieV2BannerLogo":true,"ConsentStoreConsentStrings":true,"CookieV2AssignTemplat
2024-12-02 10:05:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49728	104.18.32.137	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:35 UTC	375	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:36 UTC	830	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: I15No2k5QFmqh89BwOau4g== Last-Modified: Thu, 28 Nov 2024 10:12:21 GMT x-ms-request-id: 9155e317-401e-002b-3cd1-42d73f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11931 Expires: Tue, 03 Dec 2024 10:05:35 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba7fda8bec236a-EWR
2024-12-02 10:05:36 UTC	539	IN	Data Raw: 35 37 61 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 28 74 3d 3e 7b 76 61 72 20 61 2c 6f 2c 72 2c 65 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 65 75 70 75 Data Ascii: 57aevar OneTrustStub=(t=>{var a,o,r,e,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupu
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 69 66 79 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 Data Ascii: R","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",t
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 69 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c Data Ascii: [n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},i);function i(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toL
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 Data Ascii: .cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastI
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 5b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 2e 68 6f 73 74 6e 61 6d 65 5d 3b 74 72 79 7b 65 3d 6e 65 77 20 55 52 4c 28 74 2c 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 61 62 6f 75 74 3a 62 6c Data Ascii: createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i=[document.location.hostname,n.hostname];try{e=new URL(t,location.origin)}catch(t){return"about:bl
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e 49 66 42 75 6c 6b 44 6f 6d 61 69 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 2c 69 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 3d 74 2e 44 6f 6d 61 69 6e 2c 61 3d 74 2e 42 75 6c 6b 44 6f 6d 61 69 6e 43 68 65 63 6b 55 72 6c 3b 65 26 26 65 2e 43 6f 6f 6b 69 65 56 32 42 75 6c 6b 44 6f 6d 61 69 6e 4d Data Ascii: bute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomainIfBulkDomainEnabled=function(t){var e=t&&t.TenantFeatures,i=window.location.hostname,n=t.Domain,a=t.BulkDomainCheckUrl;e&&e.CookieV2BulkDomainM
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 62 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 45 6e 61 62 6c 65 64 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2e 69 73 56 61 6c 69 64 29 29 2c 74 2e 69 73 56 61 6c 69 64 26 26 28 65 2e 44 6f 6d 61 69 6e 3d 77 69 6e 64 6f 77 Data Ascii: this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage.setItem("bulkDomainMgmtEnabled",JSON.stringify(t.isValid)),t.isValid&&(e.Domain=window
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 2e 64 6f 6d 61 69 6e 4a 73 6f 6e 3b 69 28 6f 29 7d 65 6c 73 65 7b 6c 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 2e 70 75 73 68 28 74 29 3b 76 61 72 20 73 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b Data Ascii: dow.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSON.parse(o).domainJson;i(o)}else{l.mobileOnlineURL.push(t);var s=new XMLHttpRequest;
2024-12-02 10:05:36 UTC	1369	IN	Data Raw: 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 70 5b 72 5d 26 26 30 3c 3d 70 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 72 65 61 6b 7d 30 3c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 43 6f 75 6e 74 72 69 65 73 2e 69 6e 64 65 78 4f 66 28 72 29 26 26 28 65 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 29 7d 72 65 74 75 72 6e 20 69 7c 7c 65 7c 7c 6e 7d 2c 66 2e 70 72 6f 74 6f Data Ascii: r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].States;if(p[r]&&0<=p[r].indexOf(s)){i=t.RuleSet[u];break}0<=t.RuleSet[u].Countries.indexOf(r)&&(e=t.RuleSet[u])}return i\|\|e\|\|n},f.proto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49729	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HOBz34y5de7DD+B&MD=PCZ7zMOE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-02 10:05:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 146c00b2-99e0-4723-a539-0e8c605810bb MS-RequestId: 47ce4ebe-ea50-4915-9d1c-e2f6c3a89be6 MS-CV: ct+dhgj3I0OPruVS.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 02 Dec 2024 10:05:36 GMT Connection: close Content-Length: 30005
2024-12-02 10:05:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-02 10:05:37 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49730	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	610	OUT	GET /wp-content/themes/wufoo-site/js/vendor/wufoo-mixpanel.js HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:37 UTC	627	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2588 Connection: close Date: Mon, 02 Dec 2024 10:05:34 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a1c" Expires: Tue, 02 Dec 2025 10:05:34 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b93a2a063e3f94fe345bc08072aed022.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: E1oodeEWhGfvzS_KeJUoteaK_b7fchqkBCb6J37E5qB6s9pVQC6keA== Age: 3
2024-12-02 10:05:37 UTC	2588	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 72 5b 6f 5d 29 72 65 74 75 72 6e 20 72 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 72 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 3d 7b 7d 3b 74 2e 6d 3d 65 2c 74 2e 63 3d 72 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6f 29 7b 74 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c Data Ascii: !function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49733	104.18.32.137	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	433	OUT	GET /consent/86f42b6d-7a31-469c-804c-319643173d42/86f42b6d-7a31-469c-804c-319643173d42.json HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:37 UTC	827	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:37 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8eba7fe6390e8c45-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 458 Cache-Control: public, max-age=86400 Last-Modified: Wed, 04 Sep 2024 20:47:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: uFSHn6VFDyK51A6G8or01Q== x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 45b9bc1c-501e-0055-7fd8-3c4778000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-12-02 10:05:37 UTC	542	IN	Data Raw: 31 35 61 63 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 38 36 66 34 32 Data Ascii: 15ac{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202407.2.0","OptanonDataJSON":"86f42
2024-12-02 10:05:37 UTC	1369	IN	Data Raw: 53 68 6f 77 20 42 61 6e 6e 65 72 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 64 65 22 2c 22 6e 6f 22 2c 22 66 69 22 2c 22 62 65 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 6c 76 22 2c 22 68 72 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 6d 63 22 2c 22 73 69 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 63 68 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 67 72 22 2c 22 69 74 22 2c 22 65 73 22 2c 22 72 65 22 2c 22 61 74 22 2c 22 63 79 22 2c 22 61 78 22 2c 22 63 7a 22 2c 22 70 6c 22 2c 22 72 6f 22 2c 22 6c 69 22 2c 22 6e 6c 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 Data Ascii: Show Banner","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","gr","it","es","re","at","cy","ax","cz","pl","ro","li","nl"],"States":{},"LanguageSw
2024-12-02 10:05:37 UTC	1369	IN	Data Raw: 66 6f 22 2c 22 77 66 22 2c 22 67 61 22 2c 22 77 73 22 2c 22 67 64 22 2c 22 67 65 22 2c 22 67 67 22 2c 22 67 68 22 2c 22 67 69 22 2c 22 67 6c 22 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 Data Ascii: fo","wf","ga","ws","gd","ge","gg","gh","gi","gl","gm","gn","gq","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","
2024-12-02 10:05:37 UTC	1369	IN	Data Raw: 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 43 43 50 41 20 54 65 6d 70 6c 61 74 65 20 28 57 75 66 6f 6f 29 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 30 34 Data Ascii: ndors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"CCPA Template (Wufoo)","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false}],"IabData":{"cookieVersion":"1","createdTime":"2024-09-04
2024-12-02 10:05:37 UTC	907	IN	Data Raw: 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6a 65 63 74 41 6c 6c 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 61 72 67 65 74 65 64 54 65 6d 70 6c 61 74 65 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6e 73 65 6e 74 53 74 6f 72 65 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 Data Ascii: tFeatures":{"CookieV2BannerFocus":true,"CookieV2RejectAll":true,"CookieV2TargetedTemplates":true,"CookieV2GPC":true,"CookieV2GeolocationJsonApi":true,"CookieV2TCF21":true,"CookieV2BannerLogo":true,"ConsentStoreConsentStrings":true,"CookieV2AssignTemplateR
2024-12-02 10:05:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49737	104.18.32.137	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	593	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.wufoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:37 UTC	370	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:37 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba7fe6fae642b0-EWR
2024-12-02 10:05:37 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49731	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	840	OUT	GET /wp-content/themes/wufoo-site/img/bb-cert.png HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:39 UTC	584	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 9888 Connection: close Date: Mon, 02 Dec 2024 10:05:38 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:07 GMT ETag: "64e5de83-26a0" Expires: Wed, 01 Jan 2025 10:05:38 GMT Cache-Control: max-age=2592000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 bf53ab602e7d8a88d55571ca0f838cbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 0521S1RjkD6qTwcvGojTLt1eKMB-Op29ypXbESSMdwal-U_La6GXlg==
2024-12-02 10:05:39 UTC	9888	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 2d 08 06 00 00 00 ba 69 d5 89 00 00 0c 43 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 0d ad 57 67 58 53 49 17 3e b7 24 81 90 84 12 88 80 94 d0 9b 28 bd 4a ef 82 82 54 61 2d 84 24 90 50 62 08 04 15 bb eb e2 0a ae 05 15 0b 56 74 55 c4 b6 ba 02 b2 16 44 ec 2e 8a dd b5 2c ea a2 a0 ac 8b 05 1b 2a df dc 50 dc 6f 9f fd fe 7d f3 3c 33 f7 bd ef 9c 39 f7 3d 67 e6 ce 33 03 a0 69 2b 90 cb 73 71 2d 80 3c 59 a1 22 3e 22 98 3f 21 35 8d cf f8 1d d4 01 43 d5 08 78 02 61 81 3c 28 2e 2e 06 fe 67 79 7b 13 d9 a2 72 cd 91 f2 f5 3f cd fe bd 43 5b 24 2e 10 02 60 71 a8 3b 43 54 20 cc 43 f8 67 00 92 23 94 2b 0a 01 68 cd 88 b7 98 56 28 a7 70 07 c2 ba 0a 24 10 e1 4f 14 ce 52 61 3a 52 0f ba 19 fd d8 52 65 Data Ascii: PNGIHDRc-iCiCCPICC ProfileHWgXSI>$(JTa-$PbVtUD.,*Po}<39=g3i+sq-<Y">"?!5Cxa<(..gy{r?C[$.`q;CT Cg#+hV(p$ORa:RRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49736	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	801	OUT	GET /wp-content/themes/wufoo-site/js/vendor/modernizr.min.js?ver=3.3.1 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:39 UTC	621	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7611 Connection: close Date: Mon, 02 Dec 2024 10:05:38 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-1dbb" Expires: Tue, 02 Dec 2025 10:05:38 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ad4641cb3263eb2a4233d70631a033f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: R4Z5URFe1StWur7ATPoNxySL5p8qmPAqvNMcruf5B9WWoUlU-aDcLA==
2024-12-02 10:05:39 UTC	7611	IN	Data Raw: 2f 2a 21 20 6d 6f 64 65 72 6e 69 7a 72 20 33 2e 35 2e 30 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 3f 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 67 73 69 7a 65 63 6f 76 65 72 2d 62 6f 78 73 69 7a 69 6e 67 2d 63 73 73 63 61 6c 63 2d 63 73 73 67 72 61 64 69 65 6e 74 73 2d 63 73 73 70 6f 69 6e 74 65 72 65 76 65 6e 74 73 2d 63 73 73 74 72 61 6e 73 66 6f 72 6d 73 2d 66 6c 65 78 62 6f 78 2d 66 6c 65 78 62 6f 78 6c 65 67 61 63 79 2d 66 6f 6e 74 66 61 63 65 2d 6d 65 64 69 61 71 75 65 72 69 65 73 2d 6f 62 6a 65 63 74 66 69 74 2d 6f 70 61 63 69 74 79 2d 72 65 71 75 65 73 74 61 6e 69 6d 61 74 69 6f 6e 66 72 61 6d 65 2d 73 76 67 Data Ascii: /! modernizr 3.5.0 (Custom Build) \| MIT * https://modernizr.com/download/?-backgroundsize-bgsizecover-boxsizing-csscalc-cssgradients-csspointerevents-csstransforms-flexbox-flexboxlegacy-fontface-mediaqueries-objectfit-opacity-requestanimationframe-svg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49734	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	797	OUT	GET /wp-content/themes/wufoo-site/js/vendor/slick.min.js?ver=1.6.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:39 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 41953 Connection: close Date: Mon, 02 Dec 2024 10:05:39 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a3e1" Expires: Tue, 02 Dec 2025 10:05:39 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d6c161424e808aac68bf94834fb61044.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: iLa2_pPYv2r68DkSNAUqlAnz_NKtuepDU5gjHhysR99vj3EaT_knsA==
2024-12-02 10:05:39 UTC	15461	IN	Data Raw: 2f 2a 0a 20 20 20 20 20 5f 20 5f 20 20 20 20 20 20 5f 20 20 20 20 20 20 20 5f 0a 20 5f 5f 5f 7c 20 28 5f 29 20 5f 5f 5f 7c 20 7c 20 5f 5f 20 20 28 5f 29 5f 5f 5f 0a 2f 20 5f 5f 7c 20 7c 20 7c 2f 20 5f 5f 7c 20 7c 2f 20 2f 20 20 7c 20 2f 20 5f 5f 7c 0a 5c 5f 5f 20 5c 20 7c 20 7c 20 28 5f 5f 7c 20 20 20 3c 20 5f 20 7c 20 5c 5f 5f 20 5c 0a 7c 5f 5f 5f 2f 5f 7c 5f 7c 5c 5f 5f 5f 7c 5f 7c 5c 5f 28 5f 29 2f 20 7c 5f 5f 5f 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 2f 0a 0a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 36 2e 30 0a 20 20 41 75 74 68 6f 72 3a 20 4b 65 6e 20 57 68 65 65 6c 65 72 0a 20 57 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6b 65 6e 77 68 65 65 6c 65 72 2e 67 69 74 68 75 62 2e 69 6f 0a 20 20 20 20 44 6f 63 73 3a 20 68 74 Data Ascii: /* _ _ _ _ ___\| (_) ___\| \| __ (_)___/ __\| \| \|/ __\| \|/ / \| / __\|\__ \ \| \| (__\| < _ \| \__ \\|___/_\|_\|\___\|_\|\_(_)/ \|___/ \|__/ Version: 1.6.0 Author: Ken Wheeler Website: http://kenwheeler.github.io Docs: ht
2024-12-02 10:05:40 UTC	16384	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 6b 43 75 72 72 65 6e 74 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 61 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 6f 74 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 62 3d 30 2c 63 3d 30 2c 64 3d 30 3b 69 66 28 61 2e 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 3d 3d 3d 21 30 29 66 6f 72 28 3b 62 3c 61 2e 73 6c 69 64 65 43 6f 75 6e 74 3b 29 2b 2b 64 2c 62 3d 63 2b 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 2c 63 2b 3d 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3c 3d 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 Data Ascii: .prototype.slickCurrentSlide=function(){var a=this;return a.currentSlide},b.prototype.getDotCount=function(){var a=this,b=0,c=0,d=0;if(a.options.infinite===!0)for(;b<a.slideCount;)++d,b=c+a.options.slidesToScroll,c+=a.options.slidesToScroll<=a.options.sli
2024-12-02 10:05:40 UTC	10108	IN	Data Raw: 61 6e 69 6d 54 79 70 65 21 3d 3d 21 31 26 26 28 61 2e 61 6e 69 6d 54 79 70 65 3d 22 74 72 61 6e 73 66 6f 72 6d 22 2c 61 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 3d 22 74 72 61 6e 73 66 6f 72 6d 22 2c 61 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 22 29 2c 61 2e 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 3d 61 2e 6f 70 74 69 6f 6e 73 2e 75 73 65 54 72 61 6e 73 66 6f 72 6d 26 26 6e 75 6c 6c 21 3d 3d 61 2e 61 6e 69 6d 54 79 70 65 26 26 61 2e 61 6e 69 6d 54 79 70 65 21 3d 3d 21 31 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 6c 69 64 65 43 6c 61 73 73 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 2c 62 3d 74 68 69 73 3b 64 3d 62 2e 24 73 6c 69 64 65 72 2e 66 69 6e 64 28 22 Data Ascii: animType!==!1&&(a.animType="transform",a.transformType="transform",a.transitionType="transition"),a.transformsEnabled=a.options.useTransform&&null!==a.animType&&a.animType!==!1},b.prototype.setSlideClasses=function(a){var c,d,e,f,b=this;d=b.$slider.find("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49735	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:37 UTC	801	OUT	GET /wp-content/themes/wufoo-site/js/vendor/waypoints.min.js?ver=4.0.1 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:39 UTC	621	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9028 Connection: close Date: Mon, 02 Dec 2024 10:05:39 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-2344" Expires: Tue, 02 Dec 2025 10:05:39 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4960678834c17dc1c9d3e109486b075c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: Ya3iso_MxgEZ4EEgLhzLonU84juTxjKNIsO7A1e4do9OSmaCP7SWXw==
2024-12-02 10:05:39 UTC	9028	IN	Data Raw: 2f 2a 21 0a 57 61 79 70 6f 69 6e 74 73 20 2d 20 34 2e 30 2e 31 0a 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 31 2d 32 30 31 36 20 43 61 6c 65 62 20 54 72 6f 75 67 68 74 6f 6e 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2f 77 61 79 70 6f 69 6e 74 73 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6c 69 63 65 6e 73 65 73 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 21 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e Data Ascii: /!Waypoints - 4.0.1Copyright 2011-2016 Caleb TroughtonLicensed under the MIT license.https://github.com/imakewebthings/waypoints/blob/master/licenses.txt/!function(){"use strict";function t(o){if(!o)throw new Error("No options passed to Waypoin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49739	104.18.32.137	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:39 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:39 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:39 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba7ff25ac50f46-EWR
2024-12-02 10:05:39 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49738	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:39 UTC	808	OUT	GET /wp-content/themes/wufoo-site/js/vendor/waypoints.inview.min.js?ver=1.0.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:41 UTC	620	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2621 Connection: close Date: Mon, 02 Dec 2024 10:05:40 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a3d" Expires: Tue, 02 Dec 2025 10:05:40 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 90772e5ec48c9653874b9b06fe89ab50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: N8c6yKV7p8Tn0dDzzi6-MYLpWnSnryM3yLpoiJuKHqWaxE1IE5YiCg==
2024-12-02 10:05:41 UTC	2621	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 6f 6f 70 28 29 20 7b 7d 0a 0a 20 20 76 61 72 20 57 61 79 70 6f 69 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 57 61 79 70 6f 69 6e 74 0a 0a 20 20 2f 2a 20 68 74 74 70 3a 2f 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2e 63 6f 6d 2f 77 61 79 70 6f 69 6e 74 73 2f 73 68 6f 72 74 63 75 74 73 2f 69 6e 76 69 65 77 20 2a 2f 0a 20 20 66 75 6e 63 74 69 6f 6e 20 49 6e 76 69 65 77 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 49 6e 76 69 65 77 2e 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 0a 20 20 20 20 74 68 Data Ascii: (function() { 'use strict' function noop() {} var Waypoint = window.Waypoint /* http://imakewebthings.com/waypoints/shortcuts/inview */ function Inview(options) { this.options = Waypoint.Adapter.extend({}, Inview.defaults, options) th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49740	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:40 UTC	800	OUT	GET /wp-content/themes/wufoo-site/js/vendor/ls.bgset.min.js?ver=3.0.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:41 UTC	620	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2619 Connection: close Date: Mon, 02 Dec 2024 10:05:41 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a3b" Expires: Tue, 02 Dec 2025 10:05:41 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c5e801371b1b823627ce6964a12ebf26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: xHpSXiDduNOLEHkTozaullzYoH-IgsyoKjbV1Ybse4BYGTJ1CGMyiQ==
2024-12-02 10:05:41 UTC	2619	IN	Data Raw: 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 33 2e 30 2e 30 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 76 61 72 20 61 3d 2f 5c 73 2b 2f 67 2c 62 3d 2f 5c 73 2a 5c 7c 5c 73 2b 7c 5c 73 2b 5c 7c 5c 73 2a 2f 67 2c 63 3d 2f 5e 28 2e 2b 3f 29 28 3f 3a 5c 73 2b 5c 5b 5c 73 2a 28 2e 2b 3f 29 5c 73 2a 5c 5d 29 3f 24 2f 2c 64 3d 2f 5c 28 7c 5c 29 7c 27 2f 2c 65 3d 7b 63 6f 6e 74 61 69 6e 3a 31 2c 63 6f 76 65 72 3a 31 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6c 61 7a 79 53 69 7a 65 73 2e 67 57 28 61 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3b 72 65 74 75 72 6e 28 21 61 2e 5f 6c 61 7a 79 73 69 7a 65 73 57 69 Data Ascii: /! lazysizes - v3.0.0 /!function(){"use strict";if(window.addEventListener){var a=/\s+/g,b=/\s\\|\s+\|\s+\\|\s/g,c=/^(.+?)(?:\s+\[\s(.+?)\s\])?$/,d=/$\|$\|'/,e={contain:1,cover:1},f=function(a){var b=lazySizes.gW(a,a.parentNode);return(!a._lazysizesWi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49744	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:40 UTC	801	OUT	GET /wp-content/themes/wufoo-site/js/vendor/lazysizes.min.js?ver=3.0.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:42 UTC	621	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6501 Connection: close Date: Mon, 02 Dec 2024 10:05:41 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-1965" Expires: Tue, 02 Dec 2025 10:05:41 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 680370d83a2dca8172426cfc0e48cf92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: O07GG9jKd_R-fBhz86wFp7sqjyXES3fv1xEJJiT3F2jFCsh56-5vXw==
2024-12-02 10:05:42 UTC	6501	IN	Data Raw: 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 33 2e 30 2e 30 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 28 61 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 61 2e 6c 61 7a 79 53 69 7a 65 73 3d 63 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 63 29 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 7b 76 61 72 20 63 2c 64 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 65 3d 61 2e 44 61 74 65 2c 66 3d 61 2e 48 54 4d 4c 50 69 63 74 75 72 65 45 6c 65 6d Data Ascii: /! lazysizes - v3.0.0 /!function(a,b){var c=b(a,a.document);a.lazySizes=c,"object"==typeof module&&module.exports&&(module.exports=c)}(window,function(a,b){"use strict";if(b.getElementsByClassName){var c,d=b.documentElement,e=a.Date,f=a.HTMLPictureElem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49742	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:40 UTC	598	OUT	GET /wp-content/themes/wufoo-site/img/bb-cert.png HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:42 UTC	591	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 9888 Connection: close Date: Mon, 02 Dec 2024 10:05:38 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:07 GMT ETag: "64e5de83-26a0" Expires: Wed, 01 Jan 2025 10:05:38 GMT Cache-Control: max-age=2592000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Hit from cloudfront Via: 1.1 487e773bc809cb87809f770954ce1e22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: -mxz733LTB4wkKIdebSfCqfFD2rDtwhfO6x4bomO-wYyS5CzA3RIbQ== Age: 2
2024-12-02 10:05:42 UTC	9888	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 2d 08 06 00 00 00 ba 69 d5 89 00 00 0c 43 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 0d ad 57 67 58 53 49 17 3e b7 24 81 90 84 12 88 80 94 d0 9b 28 bd 4a ef 82 82 54 61 2d 84 24 90 50 62 08 04 15 bb eb e2 0a ae 05 15 0b 56 74 55 c4 b6 ba 02 b2 16 44 ec 2e 8a dd b5 2c ea a2 a0 ac 8b 05 1b 2a df dc 50 dc 6f 9f fd fe 7d f3 3c 33 f7 bd ef 9c 39 f7 3d 67 e6 ce 33 03 a0 69 2b 90 cb 73 71 2d 80 3c 59 a1 22 3e 22 98 3f 21 35 8d cf f8 1d d4 01 43 d5 08 78 02 61 81 3c 28 2e 2e 06 fe 67 79 7b 13 d9 a2 72 cd 91 f2 f5 3f cd fe bd 43 5b 24 2e 10 02 60 71 a8 3b 43 54 20 cc 43 f8 67 00 92 23 94 2b 0a 01 68 cd 88 b7 98 56 28 a7 70 07 c2 ba 0a 24 10 e1 4f 14 ce 52 61 3a 52 0f ba 19 fd d8 52 65 Data Ascii: PNGIHDRc-iCiCCPICC ProfileHWgXSI>$(JTa-$PbVtUD.,*Po}<39=g3i+sq-<Y">"?!5Cxa<(..gy{r?C[$.`q;CT Cg#+hV(p$ORa:RRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49745	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:40 UTC	619	OUT	GET /wp-content/themes/wufoo-site/js/vendor/modernizr.min.js?ver=3.3.1 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:42 UTC	628	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7611 Connection: close Date: Mon, 02 Dec 2024 10:05:38 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-1dbb" Expires: Tue, 02 Dec 2025 10:05:38 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5c23ab9748dfedff76d0f834e4ad56b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 7Du65i3HWcOK4UNpMV_LLGmMljoa-W_XL42diziFBi38ZM0OGgHVBA== Age: 2
2024-12-02 10:05:42 UTC	7611	IN	Data Raw: 2f 2a 21 20 6d 6f 64 65 72 6e 69 7a 72 20 33 2e 35 2e 30 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 3f 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 67 73 69 7a 65 63 6f 76 65 72 2d 62 6f 78 73 69 7a 69 6e 67 2d 63 73 73 63 61 6c 63 2d 63 73 73 67 72 61 64 69 65 6e 74 73 2d 63 73 73 70 6f 69 6e 74 65 72 65 76 65 6e 74 73 2d 63 73 73 74 72 61 6e 73 66 6f 72 6d 73 2d 66 6c 65 78 62 6f 78 2d 66 6c 65 78 62 6f 78 6c 65 67 61 63 79 2d 66 6f 6e 74 66 61 63 65 2d 6d 65 64 69 61 71 75 65 72 69 65 73 2d 6f 62 6a 65 63 74 66 69 74 2d 6f 70 61 63 69 74 79 2d 72 65 71 75 65 73 74 61 6e 69 6d 61 74 69 6f 6e 66 72 61 6d 65 2d 73 76 67 Data Ascii: /! modernizr 3.5.0 (Custom Build) \| MIT * https://modernizr.com/download/?-backgroundsize-bgsizecover-boxsizing-csscalc-cssgradients-csspointerevents-csstransforms-flexbox-flexboxlegacy-fontface-mediaqueries-objectfit-opacity-requestanimationframe-svg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49743	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:40 UTC	795	OUT	GET /wp-content/themes/wufoo-site/js/dist/scripts.min.js?ver=1.3 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/endpage/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:43 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13975 Connection: close Date: Mon, 02 Dec 2024 10:05:42 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-3697" Expires: Tue, 02 Dec 2025 10:05:42 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fb6afc857f0eaed863f06738b3882546.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: DKlMVCXBL0IHnT-HLvK8fhts15XaIhWoupDEf062Gtl7KMU0Yz5UmQ==
2024-12-02 10:05:43 UTC	13975	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 73 2e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 30 2e 30 2e 31 0a 20 2a 20 41 75 74 68 6f 72 3a 20 53 6f 73 68 61 6c 20 28 40 53 6f 73 68 61 6c 47 72 6f 75 70 29 0a 20 2a 20 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6f 73 68 61 6c 2e 63 61 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 6c 61 73 73 4e 61 6d 65 2c 6e 3d 53 2e 5f 63 6f 6e 66 69 67 2e 63 6c 61 73 73 50 72 65 66 69 78 7c 7c 22 22 3b 69 66 28 54 26 26 28 74 3d 74 2e 62 61 73 65 56 61 6c 29 2c 53 2e 5f 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 4a 53 43 6c 61 73 73 29 7b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c Data Ascii: /! JavaScripts. * Version: 0.0.1 * Author: Soshal (@SoshalGroup) * Author URI: http://www.soshal.ca */!function(e,t,n){function r(e){var t=C.className,n=S._config.classPrefix\|\|"";if(T&&(t=t.baseVal),S._config.enableJSClass){var r=new RegExp("(^\|\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49746	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:40 UTC	619	OUT	GET /wp-content/themes/wufoo-site/js/vendor/waypoints.min.js?ver=4.0.1 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:42 UTC	628	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9028 Connection: close Date: Mon, 02 Dec 2024 10:05:39 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-2344" Expires: Tue, 02 Dec 2025 10:05:39 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1b300ac0fc08f49360b62bb3f1350070.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: dpKLlnkdMQlmk5svqMJQ7rUV9jw3jzfj5EjGuTIo_71ZEiaYkOx1ow== Age: 2
2024-12-02 10:05:42 UTC	9028	IN	Data Raw: 2f 2a 21 0a 57 61 79 70 6f 69 6e 74 73 20 2d 20 34 2e 30 2e 31 0a 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 31 2d 32 30 31 36 20 43 61 6c 65 62 20 54 72 6f 75 67 68 74 6f 6e 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2f 77 61 79 70 6f 69 6e 74 73 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6c 69 63 65 6e 73 65 73 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 21 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e Data Ascii: /!Waypoints - 4.0.1Copyright 2011-2016 Caleb TroughtonLicensed under the MIT license.https://github.com/imakewebthings/waypoints/blob/master/licenses.txt/!function(){"use strict";function t(o){if(!o)throw new Error("No options passed to Waypoin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49748	172.64.155.119	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:41 UTC	561	OUT	GET /scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:42 UTC	830	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:41 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: btqcTGGxKzfJ1KoWzOA9vQ== Last-Modified: Tue, 06 Aug 2024 19:31:38 GMT x-ms-request-id: 7a8c85cb-501e-006a-50d8-3c8fdb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13982 Expires: Tue, 03 Dec 2024 10:05:41 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba80012d6f41af-EWR
2024-12-02 10:05:42 UTC	539	IN	Data Raw: 37 63 36 32 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 37 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c62/** * onetrust-banner-sdk * v202407.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 Data Ascii: rototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 Data Ascii: t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=arguments.lengt
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d Data Ascii: hen;if(e instanceof z)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._value=t,J(e)}function J(e){2=
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 Data Ascii: on"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(e,t){t(o)
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 Data Ascii: turn!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 Data Ascii: })},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c Data Ascii: rSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=oe=oe\|\|
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 Data Ascii: ]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.I
2024-12-02 10:05:42 UTC	1369	IN	Data Raw: 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f Data Ascii: n",e.region="region",e.wait_for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49747	18.165.220.112	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:41 UTC	592	OUT	GET /meter/wufoo.com/202.svg HTTP/1.1 Host: cdn.ywxi.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:43 UTC	555	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Date: Mon, 02 Dec 2024 10:05:42 GMT Server: Apache x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin Cache-Control: public Expires: Mon, 02 Dec 2024 11:05:42 GMT X-Cache: Miss from cloudfront Via: 1.1 a95adf7afe468fe543cb5750140a2bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 7DwmwSnznEb4PCB0w43Bho3JNDsiH3zG6vyc6DCChVmavRxmynHMrQ==
2024-12-02 10:05:43 UTC	7821	IN	Data Raw: 31 65 38 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 35 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d Data Ascii: 1e85<?xml version="1.0" encoding="UTF-8"?><svg width="120px" height="50px" viewBox="0 0 120 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com
2024-12-02 10:05:43 UTC	40	IN	Data Raw: 32 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 35 2e 36 31 32 37 30 35 31 2c 31 32 0d 0a Data Ascii: 22 <path d="M45.6127051,12
2024-12-02 10:05:43 UTC	11882	IN	Data Raw: 32 65 36 32 0d 0a 2e 31 30 38 37 31 37 33 20 43 34 36 2e 30 39 30 32 37 32 33 2c 31 32 2e 33 39 34 39 32 37 36 20 34 37 2e 30 37 39 33 33 39 38 2c 31 32 2e 37 33 31 37 32 34 39 20 34 37 2e 38 34 36 35 39 30 32 2c 31 32 2e 37 33 31 37 32 34 39 20 43 34 38 2e 36 33 31 31 34 38 37 2c 31 32 2e 37 33 31 37 32 34 39 20 34 38 2e 39 35 35 32 32 30 33 2c 31 32 2e 34 36 32 31 35 32 31 20 34 38 2e 39 35 35 32 32 30 33 2c 31 32 2e 30 34 31 34 39 32 38 20 43 34 38 2e 39 35 35 32 32 30 33 2c 31 31 2e 36 32 30 36 30 38 36 20 34 38 2e 36 39 39 34 37 30 32 2c 31 31 2e 34 31 38 34 38 35 32 20 34 37 2e 37 32 37 34 38 33 31 2c 31 31 2e 30 39 38 37 37 35 31 20 43 34 36 2e 30 30 35 30 39 38 32 2c 31 30 2e 35 32 36 33 35 34 36 20 34 35 2e 33 33 39 38 37 34 36 2c 39 2e 36 30 30 Data Ascii: 2e62.1087173 C46.0902723,12.3949276 47.0793398,12.7317249 47.8465902,12.7317249 C48.6311487,12.7317249 48.9552203,12.4621521 48.9552203,12.0414928 C48.9552203,11.6206086 48.6994702,11.4184852 47.7274831,11.0987751 C46.0050982,10.5263546 45.3398746,9.600
2024-12-02 10:05:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49749	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:41 UTC	615	OUT	GET /wp-content/themes/wufoo-site/js/vendor/slick.min.js?ver=1.6.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:42 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 41953 Connection: close Date: Mon, 02 Dec 2024 10:05:39 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a3e1" Expires: Tue, 02 Dec 2025 10:05:39 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8970b72cbe096ea273456c181c4882ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: mJuyKxs043Yw1p2bfvS2Kex4cDknRvkJc9xUBm85O59LP9fAp0UmJw== Age: 3
2024-12-02 10:05:42 UTC	16384	IN	Data Raw: 2f 2a 0a 20 20 20 20 20 5f 20 5f 20 20 20 20 20 20 5f 20 20 20 20 20 20 20 5f 0a 20 5f 5f 5f 7c 20 28 5f 29 20 5f 5f 5f 7c 20 7c 20 5f 5f 20 20 28 5f 29 5f 5f 5f 0a 2f 20 5f 5f 7c 20 7c 20 7c 2f 20 5f 5f 7c 20 7c 2f 20 2f 20 20 7c 20 2f 20 5f 5f 7c 0a 5c 5f 5f 20 5c 20 7c 20 7c 20 28 5f 5f 7c 20 20 20 3c 20 5f 20 7c 20 5c 5f 5f 20 5c 0a 7c 5f 5f 5f 2f 5f 7c 5f 7c 5c 5f 5f 5f 7c 5f 7c 5c 5f 28 5f 29 2f 20 7c 5f 5f 5f 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 2f 0a 0a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 36 2e 30 0a 20 20 41 75 74 68 6f 72 3a 20 4b 65 6e 20 57 68 65 65 6c 65 72 0a 20 57 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6b 65 6e 77 68 65 65 6c 65 72 2e 67 69 74 68 75 62 2e 69 6f 0a 20 20 20 20 44 6f 63 73 3a 20 68 74 Data Ascii: /* _ _ _ _ ___\| (_) ___\| \| __ (_)___/ __\| \| \|/ __\| \|/ / \| / __\|\__ \ \| \| (__\| < _ \| \__ \\|___/_\|_\|\___\|_\|\_(_)/ \|___/ \|__/ Version: 1.6.0 Author: Ken Wheeler Website: http://kenwheeler.github.io Docs: ht
2024-12-02 10:05:42 UTC	1514	IN	Data Raw: 64 65 73 54 6f 53 63 72 6f 6c 6c 21 3d 3d 30 26 26 61 2b 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3e 62 2e 73 6c 69 64 65 43 6f 75 6e 74 26 26 62 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 28 61 3e 62 2e 73 6c 69 64 65 43 6f 75 6e 74 3f 28 62 2e 73 6c 69 64 65 4f 66 66 73 65 74 3d 28 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2d 28 61 2d 62 2e 73 6c 69 64 65 43 6f 75 6e 74 29 29 2a 62 2e 73 6c 69 64 65 57 69 64 74 68 2a 2d 31 2c 65 3d 28 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 2d 28 61 2d 62 2e 73 6c 69 64 65 43 6f 75 6e 74 29 29 2a 64 2a 2d 31 29 3a 28 62 2e 73 6c 69 64 65 4f 66 66 73 65 74 3d 62 2e 73 6c 69 64 Data Ascii: desToScroll!==0&&a+b.options.slidesToScroll>b.slideCount&&b.slideCount>b.options.slidesToShow&&(a>b.slideCount?(b.slideOffset=(b.options.slidesToShow-(a-b.slideCount))b.slideWidth-1,e=(b.options.slidesToShow-(a-b.slideCount))d-1):(b.slideOffset=b.slid
2024-12-02 10:05:42 UTC	16384	IN	Data Raw: 68 28 29 2d 66 2e 6f 75 74 65 72 57 69 64 74 68 28 29 29 2f 32 29 29 2c 63 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 6b 47 65 74 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 62 2e 6f 70 74 69 6f 6e 73 5b 61 5d 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4e 61 76 69 67 61 62 6c 65 49 6e 64 65 78 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 61 3d 74 68 69 73 2c 62 3d 30 2c 63 3d 30 2c 64 3d 5b 5d 3b 66 6f 72 28 61 2e 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 3d 3d 3d 21 31 3f 65 3d 61 2e 73 6c 69 64 65 43 6f 75 6e 74 3a 28 62 3d 2d 31 2a 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 Data Ascii: h()-f.outerWidth())/2)),c},b.prototype.getOption=b.prototype.slickGetOption=function(a){var b=this;return b.options[a]},b.prototype.getNavigableIndexes=function(){var e,a=this,b=0,c=0,d=[];for(a.options.infinite===!1?e=a.slideCount:(b=-1*a.options.slidesT
2024-12-02 10:05:42 UTC	7671	IN	Data Raw: 61 74 74 72 28 22 64 61 74 61 2d 73 6c 69 63 6b 2d 69 6e 64 65 78 22 29 29 3b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 30 29 2c 63 2e 73 6c 69 64 65 43 6f 75 6e 74 3c 3d 63 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 3f 28 63 2e 73 65 74 53 6c 69 64 65 43 6c 61 73 73 65 73 28 65 29 2c 76 6f 69 64 20 63 2e 61 73 4e 61 76 46 6f 72 28 65 29 29 3a 76 6f 69 64 20 63 2e 73 6c 69 64 65 48 61 6e 64 6c 65 72 28 65 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 64 65 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 67 2c 6a 2c 68 3d 6e 75 6c 6c 2c 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 62 3d 62 7c 7c 21 31 2c 69 2e 61 6e 69 6d 61 74 69 6e 67 3d 3d 3d 21 30 26 26 69 2e 6f 70 74 69 6f 6e Data Ascii: attr("data-slick-index"));return e\|\|(e=0),c.slideCount<=c.options.slidesToShow?(c.setSlideClasses(e),void c.asNavFor(e)):void c.slideHandler(e)},b.prototype.slideHandler=function(a,b,c){var d,e,f,g,j,h=null,i=this;return b=b\|\|!1,i.animating===!0&&i.option

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49751	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:43 UTC	626	OUT	GET /wp-content/themes/wufoo-site/js/vendor/waypoints.inview.min.js?ver=1.0.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:44 UTC	627	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2621 Connection: close Date: Mon, 02 Dec 2024 10:05:40 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a3d" Expires: Tue, 02 Dec 2025 10:05:40 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c966f82eb0c30997d84338e4095d627a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: v5TMIclj02CRf2-FLvVZuuiPvOW8Qy2EvNZaJ2_Ehyd-B_6PsML3Cg== Age: 3
2024-12-02 10:05:44 UTC	2621	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 6f 6f 70 28 29 20 7b 7d 0a 0a 20 20 76 61 72 20 57 61 79 70 6f 69 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 57 61 79 70 6f 69 6e 74 0a 0a 20 20 2f 2a 20 68 74 74 70 3a 2f 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2e 63 6f 6d 2f 77 61 79 70 6f 69 6e 74 73 2f 73 68 6f 72 74 63 75 74 73 2f 69 6e 76 69 65 77 20 2a 2f 0a 20 20 66 75 6e 63 74 69 6f 6e 20 49 6e 76 69 65 77 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 49 6e 76 69 65 77 2e 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 0a 20 20 20 20 74 68 Data Ascii: (function() { 'use strict' function noop() {} var Waypoint = window.Waypoint /* http://imakewebthings.com/waypoints/shortcuts/inview */ function Inview(options) { this.options = Waypoint.Adapter.extend({}, Inview.defaults, options) th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49750	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:43 UTC	860	OUT	GET /wp-content/themes/wufoo-site/font/National2Web-Regular.woff2 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.wufoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.wufoo.com/wp-content/themes/wufoo-site/style.css?ver=1.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:44 UTC	654	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 34775 Connection: close Date: Sun, 01 Dec 2024 08:49:46 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:07 GMT ETag: "64e5de83-87d7" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Hit from cloudfront Via: 1.1 01ff2b265b9f2ac4574d3d644dd9dd26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: _3aYEBcDh92KifhhKd0k1M6HE06ITT-iTrbk6MmK1excJry1EQ98rA== Age: 90956
2024-12-02 10:05:44 UTC	15730	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 87 d7 00 11 00 00 00 01 81 10 00 00 78 40 00 01 00 00 00 00 78 a4 00 00 0f 33 00 00 33 b0 00 00 00 00 00 00 00 00 1b 81 b2 48 1c 97 34 06 60 16 8b 60 00 8a 5a 08 52 09 82 61 11 10 0a 83 a9 50 82 f8 3b 01 36 02 24 03 90 04 0b 88 04 00 04 20 05 ba 13 07 9c 08 0c 82 22 5b 4e 63 71 07 d5 eb be 8b 43 c0 6d 03 00 e8 d3 b7 aa 5f 57 32 91 6b 07 f4 dc 6c 7d 79 88 58 05 1f 60 dc fe 24 dc 0e 56 cd 2f ef da d9 ff ff ff 7f 7a 52 91 31 d3 0c d2 75 63 00 0e e4 aa f8 ff 87 5c 70 cf e1 51 6c 8d 84 9a 27 92 87 8b c6 bc 54 26 88 e6 d9 91 b1 28 22 cc 8a 30 ab b6 1b 1c b5 4f 19 bb 10 f9 d8 42 ab 47 d5 ae 16 72 d9 b8 9f 36 0e 33 8f ef 2b e3 71 9c 05 6b d9 f0 74 f4 39 bd 8a ea e0 a2 ce 97 17 24 fb 9e 4d c3 85 dc a9 4c 33 ab 32 cd 10 93 dd ac 3e dc Data Ascii: wOF2x@x33H4``ZRaP;6$ "[NcqCm_W2kl}yX`$V/zR1uc\pQl'T&("0OBGr63+qkt9$ML32>
2024-12-02 10:05:44 UTC	16384	IN	Data Raw: 11 40 e9 f0 51 9a 4f 75 5a 7d e1 35 6a c4 c2 f4 14 f4 52 0f b5 fb a4 2e 46 5c 4b 7c 5d bd 2d 82 27 d5 4c e7 53 b3 f7 3e 12 47 1d 5a 40 99 cf c3 72 8c db 4a 1c 34 6a d6 28 7e 35 15 14 f8 75 59 67 c0 c2 16 fe 9d 9c 49 1b 2e 23 43 45 a3 24 69 24 0f aa bc e7 23 3c c6 a1 9c 43 4e 2e 09 76 eb 0c be 6b 0e 51 d6 da f1 8b 33 75 2b 64 8a 4e 8a f2 41 ef 5c 29 5b 39 39 0b cd 48 10 8e 2b 2e f1 91 a0 68 9f 17 80 5c 42 13 ca e0 3a eb 05 05 a5 ec 3c 44 e9 b9 3b bb 4f f1 04 3d c8 71 db 39 fa 5a 9c d4 cf db 6b 16 34 f9 4b de 3c 26 46 84 3d 1f da 92 89 ea ab ad 56 73 2d 9a b3 6a 46 20 28 5e c7 cd 24 b2 58 ac 1f b2 f3 58 88 4c 56 08 da ef d3 35 76 8f cd 66 f7 68 04 98 04 02 c3 68 35 b4 bc 02 44 26 2d 44 18 34 4f 32 14 d1 a1 14 2a 1f 79 b2 ff 2c 12 33 fc 32 f3 58 28 28 66 82 Data Ascii: @QOuZ}5jR.F\K\|]-'LS>GZ@rJ4j(~5uYgI.#CE$i$#<CN.vkQ3u+dNA\)[99H+.h\B:<D;O=q9Zk4K<&F=Vs-jF (^$XXLV5vfhh5D&-D4O2*y,32X((f
2024-12-02 10:05:44 UTC	2661	IN	Data Raw: 4b 68 6d 5d b5 92 b8 4d 66 8d ff 28 99 12 e4 56 12 3b c8 53 f0 b9 96 49 8f 55 85 d8 5c 7d c0 87 10 76 f1 f2 e5 eb 13 da 21 d1 3a ab 84 2c 1d 7d d0 89 eb 5a ac 3c 91 a8 25 42 d9 b7 de 1c 3e 27 06 25 5c b4 67 d4 ac 1c bc 0d ed c9 3e b1 e1 a5 ea 56 5f d9 bf 76 7c d1 e4 fa c6 0a 83 98 6b 11 09 15 07 ca cc c2 25 7b 23 24 0a 0f 29 88 d4 e7 c2 8a 9d 7b 73 25 0c e7 f7 a0 f5 d3 b1 77 89 15 99 ef ad 8c c2 3c d3 02 88 4f cf 16 96 c1 bf 37 05 5a bd bd 7c d4 30 e7 8a 34 ca da 3e fe 49 62 ad 1d 8f 37 f0 e0 8e dd a7 cc 1f a8 3c c4 fb 55 5e ff ae 29 c7 82 ff 76 99 11 6d 06 36 f0 d3 ce 97 b7 46 9e cc ab c9 d4 42 3b 92 39 96 b7 e6 8c 1b d3 0a ad 5d d5 01 08 d3 db 2d 20 71 0a fd 3c 6a bd 3b 2d c4 21 6e 03 21 b2 5c ff 1e 21 7a f1 9c da c6 f5 31 2c 48 c5 84 53 f6 bd 61 dc 62 Data Ascii: Khm]Mf(V;SIU\}v!:,}Z<%B>'%\g>V_v\|k%{#$){s%w<O7Z\|04>Ib7<U^)vm6FB;9]- q<j;-!n!\!z1,HSab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49752	18.165.220.67	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:43 UTC	859	OUT	GET /wp-content/themes/wufoo-site/font/National2Web-Medium.woff2 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.wufoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.wufoo.com/wp-content/themes/wufoo-site/style.css?ver=1.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:44 UTC	654	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 37339 Connection: close Date: Sun, 01 Dec 2024 08:49:46 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:07 GMT ETag: "64e5de83-91db" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Hit from cloudfront Via: 1.1 53a0f975e2490ceb7823ef71fea7315a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: XkvKCiUKTto5vzb_C-zW_D5GyWp326CUnfow9IZJXUnbeweKc7UNog== Age: 90956
2024-12-02 10:05:44 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 91 db 00 11 00 00 00 01 8c bc 00 00 82 44 00 01 00 00 00 00 82 a8 00 00 0f 33 00 00 33 b0 00 00 00 00 00 00 00 00 1b 81 c9 08 1c 97 34 06 60 16 8b 60 00 8a 5a 08 52 09 82 61 11 10 0a 83 aa 44 82 f9 03 01 36 02 24 03 90 04 0b 88 04 00 04 20 05 ba 10 07 9c 08 0c 82 1d 5b ce 6e 91 01 96 87 ed 89 47 02 9b de ac 7a b9 37 18 fe b7 e2 05 f4 b4 5d c0 73 9d 37 e9 29 52 60 9a 4b c6 31 47 71 3b 0e 7e 54 ff c7 9b fd ff ff ff 7f 76 b2 18 63 fe 1d 78 ff 80 98 5a 15 65 ae 6d 26 26 93 8b 44 b8 49 c5 c1 ab 37 77 98 5b ad 56 a0 2b 14 02 5f dc 24 0b 0c c5 25 6c 59 1d b6 7d 87 ab f7 22 1a e2 e2 4a f5 e5 66 77 f2 78 d2 79 50 75 26 32 40 58 50 19 3a 6d 36 5e ef 07 8e 20 77 5b dd 1a 73 cf 74 cb 70 3c 9b c9 76 6b 9f 9d f9 d4 84 ef 2a 73 ac b4 24 df Data Ascii: wOF2D334``ZRaD6$ [nGz7]s7)R`K1Gq;~TvcxZem&&DI7w[V+_$%lY}"JfwxyPu&2@XP:m6^ w[stp<vk*s$
2024-12-02 10:05:44 UTC	16384	IN	Data Raw: db 7e 0c df fa e3 98 72 0e c9 93 27 86 fe 93 8d 10 32 3c a7 f5 66 54 e9 29 50 e6 21 34 55 24 61 31 76 26 5d 67 46 35 11 c3 79 5b de 4f 85 be 14 3c ba b6 88 f4 09 8e 62 61 ea a2 7f 05 20 4d 76 e4 e6 bc 10 67 4b 14 aa 99 df ff d5 0b a2 76 7e bc 5f eb a8 b5 58 1c b5 5a 6d 55 8d d5 52 55 ab c1 23 1a 18 0c 1f 02 e1 63 30 1a de 78 bf 7e d7 91 71 f1 3c 17 ee f3 de 4a 22 4d 6a 56 f1 54 fd 86 8e b0 96 b9 14 95 71 ba 08 b1 2d 6b cf 6c c0 c9 c0 8d 8f 55 60 4c be 3c 85 74 a1 9c 0d 08 0f 62 2b 28 f9 f4 41 ca f3 49 13 2a 30 c5 68 3c 53 d0 74 63 55 38 e3 cd 3e e8 70 41 e1 ba 71 18 3b a9 30 40 88 be 9e fd 22 93 69 35 03 1d fc 93 3f df 8f c8 76 b1 98 16 0b 48 ce 3b f9 f4 31 2b e2 58 d9 78 5b 19 c1 4b 3d 46 16 65 52 65 6f 82 ab 98 bd 83 b3 cd 48 7e ea f1 64 11 49 74 1c 64 Data Ascii: ~r'2<fT)P!4U$a1v&]gF5y[O<ba MvgKv~_XZmURU#c0x~q<J"MjVTq-klU`L<tb+(AI*0h<StcU8>pAq;0@"i5?vH;1+Xx[K=FeReoH~dItd
2024-12-02 10:05:44 UTC	4571	IN	Data Raw: 74 93 f3 ea 5c 3b 97 7f ce 78 29 2c d0 55 80 b4 d6 8f 17 ba aa 91 21 93 31 29 92 cd 5a 6f b5 25 4f 3e e3 29 e8 90 09 2e 52 bc 41 dc 7e 87 94 4d 3e f9 84 44 89 7a dd 53 3f df eb 4c 99 56 8d ed ab a7 25 bf b1 29 5d 96 33 82 84 d4 56 15 39 a7 81 b3 06 e4 8f 86 d6 32 2c e7 2f 2f 88 92 4e ef 9f bc ad 7e 92 85 b9 5a 9b cb 49 61 70 a6 6c 2f cc 15 42 aa 2f b2 e9 14 32 b6 d0 2f 85 32 6b 77 e9 f0 d0 dc 7a ab 90 37 6c fb 5a 11 1c bb 99 fb 51 89 9e 5c 10 b8 74 d4 0f d5 22 b1 72 3e 2d df 08 8c e5 36 56 0f 8c 7c e4 5e 94 00 c1 55 4a 88 7b 50 82 84 40 cf 5b 0c 7c 0d 0f 06 46 2a 41 2c 1f 5d 16 34 45 89 0a b0 72 55 15 c2 bf ce 95 c3 3e b3 e9 c1 75 88 7f a8 29 31 d4 fa 2c 88 f2 92 53 02 2b 57 5e 9a 83 4b 4c 5d 0a 84 88 4d d9 af 78 6d 02 f8 ca 2d 74 e5 ba 51 dd c4 9c 85 0e Data Ascii: t\;x),U!1)Zo%O>).RA~M>DzS?LV%)]3V92,//N~ZIapl/B/2/2kwz7lZQ\t"r>-6V\|^UJ{P@[\|F*A,]4ErU>u)1,S+W^KL]Mxm-tQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49753	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:43 UTC	618	OUT	GET /wp-content/themes/wufoo-site/js/vendor/ls.bgset.min.js?ver=3.0.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:44 UTC	627	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2619 Connection: close Date: Mon, 02 Dec 2024 10:05:41 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-a3b" Expires: Tue, 02 Dec 2025 10:05:41 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c966f82eb0c30997d84338e4095d627a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: NUrrbl-_02q9uZUYy8QITCmccBkwOx_kZpRtZoQ6LFARBLhtkicbFw== Age: 2
2024-12-02 10:05:44 UTC	2619	IN	Data Raw: 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 33 2e 30 2e 30 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 76 61 72 20 61 3d 2f 5c 73 2b 2f 67 2c 62 3d 2f 5c 73 2a 5c 7c 5c 73 2b 7c 5c 73 2b 5c 7c 5c 73 2a 2f 67 2c 63 3d 2f 5e 28 2e 2b 3f 29 28 3f 3a 5c 73 2b 5c 5b 5c 73 2a 28 2e 2b 3f 29 5c 73 2a 5c 5d 29 3f 24 2f 2c 64 3d 2f 5c 28 7c 5c 29 7c 27 2f 2c 65 3d 7b 63 6f 6e 74 61 69 6e 3a 31 2c 63 6f 76 65 72 3a 31 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6c 61 7a 79 53 69 7a 65 73 2e 67 57 28 61 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3b 72 65 74 75 72 6e 28 21 61 2e 5f 6c 61 7a 79 73 69 7a 65 73 57 69 Data Ascii: /! lazysizes - v3.0.0 /!function(){"use strict";if(window.addEventListener){var a=/\s+/g,b=/\s\\|\s+\|\s+\\|\s/g,c=/^(.+?)(?:\s+\[\s(.+?)\s\])?$/,d=/$\|$\|'/,e={contain:1,cover:1},f=function(a){var b=lazySizes.gW(a,a.parentNode);return(!a._lazysizesWi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49754	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:43 UTC	619	OUT	GET /wp-content/themes/wufoo-site/js/vendor/lazysizes.min.js?ver=3.0.0 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:44 UTC	628	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6501 Connection: close Date: Mon, 02 Dec 2024 10:05:41 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-1965" Expires: Tue, 02 Dec 2025 10:05:41 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fb6afc857f0eaed863f06738b3882546.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: h0dpgUdBhA5sdq-N9i1rcNieJxVIK1biqYESCnScRK_GEeX9sDfMMg== Age: 2
2024-12-02 10:05:44 UTC	6501	IN	Data Raw: 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 33 2e 30 2e 30 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 28 61 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 61 2e 6c 61 7a 79 53 69 7a 65 73 3d 63 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 63 29 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 7b 76 61 72 20 63 2c 64 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 65 3d 61 2e 44 61 74 65 2c 66 3d 61 2e 48 54 4d 4c 50 69 63 74 75 72 65 45 6c 65 6d Data Ascii: /! lazysizes - v3.0.0 /!function(a,b){var c=b(a,a.document);a.lazySizes=c,"object"==typeof module&&module.exports&&(module.exports=c)}(window,function(a,b){"use strict";if(b.getElementsByClassName){var c,d=b.documentElement,e=a.Date,f=a.HTMLPictureElem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49755	18.165.220.115	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:44 UTC	613	OUT	GET /wp-content/themes/wufoo-site/js/dist/scripts.min.js?ver=1.3 HTTP/1.1 Host: www.wufoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: endpage=%7B%22Username%22%3A%22authbset%22%2C%22FormHash%22%3A%22ztefh951y2ux4k%22%7D; ep201=wSdzRrwp/ExEhHT1w2SjL/ZGH2w=; ep202=pDGkfCnHfW8a+VwMgYdyRe8zUws=; submission-authbset-1=submitted; wuConfirmPage=1
2024-12-02 10:05:45 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13975 Connection: close Date: Mon, 02 Dec 2024 10:05:42 GMT Server: nginx Last-Modified: Wed, 23 Aug 2023 10:25:08 GMT ETag: "64e5de84-3697" Expires: Tue, 02 Dec 2025 10:05:42 GMT Cache-Control: max-age=31536000 Cache-Control: public Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1cfee74ca8783b126318bfb563367846.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: H2_ywhrX5pF_ykDtxO31Z6YycHtQJoZSnmrhEMYpfEbBxOjKyfeneQ== Age: 3
2024-12-02 10:05:45 UTC	13975	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 73 2e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 30 2e 30 2e 31 0a 20 2a 20 41 75 74 68 6f 72 3a 20 53 6f 73 68 61 6c 20 28 40 53 6f 73 68 61 6c 47 72 6f 75 70 29 0a 20 2a 20 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6f 73 68 61 6c 2e 63 61 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 6c 61 73 73 4e 61 6d 65 2c 6e 3d 53 2e 5f 63 6f 6e 66 69 67 2e 63 6c 61 73 73 50 72 65 66 69 78 7c 7c 22 22 3b 69 66 28 54 26 26 28 74 3d 74 2e 62 61 73 65 56 61 6c 29 2c 53 2e 5f 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 4a 53 43 6c 61 73 73 29 7b 76 61 72 20 72 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c Data Ascii: /! JavaScripts. * Version: 0.0.1 * Author: Soshal (@SoshalGroup) * Author URI: http://www.soshal.ca */!function(e,t,n){function r(e){var t=C.className,n=S._config.classPrefix\|\|"";if(T&&(t=t.baseVal),S._config.enableJSClass){var r=new RegExp("(^\|\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49761	104.18.32.137	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:44 UTC	388	OUT	GET /scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:45 UTC	830	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: btqcTGGxKzfJ1KoWzOA9vQ== Last-Modified: Tue, 06 Aug 2024 19:31:38 GMT x-ms-request-id: 7a8c85cb-501e-006a-50d8-3c8fdb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13986 Expires: Tue, 03 Dec 2024 10:05:45 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba801568a419cf-EWR
2024-12-02 10:05:45 UTC	539	IN	Data Raw: 37 63 36 32 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 37 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c62/** * onetrust-banner-sdk * v202407.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 Data Ascii: rototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 Data Ascii: t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=arguments.lengt
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d Data Ascii: hen;if(e instanceof z)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._value=t,J(e)}function J(e){2=
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 Data Ascii: on"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(e,t){t(o)
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 Data Ascii: turn!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 Data Ascii: })},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c Data Ascii: rSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=oe=oe\|\|
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 Data Ascii: ]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.I
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f Data Ascii: n",e.region="region",e.wait_for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49762	172.64.155.119	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:44 UTC	636	OUT	GET /consent/86f42b6d-7a31-469c-804c-319643173d42/018dfc06-450f-70ae-81ef-536da56b2895/en.json HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wufoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:45 UTC	829	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:45 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8eba80157e568cca-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 73898 Cache-Control: public, max-age=86400 Last-Modified: Wed, 04 Sep 2024 20:47:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 5Fb7c2168X8tV1Coc0Zcog== x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4a344901-801e-0069-02d8-3c6ebf000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-12-02 10:05:45 UTC	540	IN	Data Raw: 31 64 61 66 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 72 65 66 Data Ascii: 1daf{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Pref
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 69 6d 65 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 77 68 61 74 20 77 65 20 75 73 65 20 69 74 20 66 6f 72 2e 3c 2f 70 3e 5c 6e 3c 70 3e 49 6e 20 6f 75 72 20 43 6f 6f 6b 69 65 73 20 4e 6f 74 69 63 65 2c 20 77 65 20 75 73 65 20 74 68 65 20 77 6f 72 64 20 e2 80 9c 63 6f 6f 6b 69 65 73 e2 80 9d 20 61 73 20 61 20 63 61 74 63 68 61 6c 6c 20 74 65 72 6d 20 74 6f 20 69 6e 63 6c 75 64 65 20 6e 6f 74 20 6f 6e 6c 79 20 63 6f 6f 6b 69 65 73 2c 20 62 75 74 20 61 6c 73 6f 20 6f 74 68 65 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 73 75 63 68 20 61 73 20 70 69 78 65 6c 73 2c 20 77 65 62 20 62 65 61 63 6f 6e 73 20 61 6e 64 20 70 61 67 65 20 74 61 67 73 2e 20 4c 69 6b 65 20 6d 6f 73 74 20 63 6f 6d 6d 65 72 63 69 61 6c 20 77 65 62 73 69 74 65 73 20 77 65 20 75 73 65 20 62 Data Ascii: ime depending on what we use it for.</p>\n<p>In our Cookies Notice, we use the word cookies as a catchall term to include not only cookies, but also other technologies such as pixels, web beacons and page tags. Like most commercial websites we use b
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 6e 74 2c 20 74 61 69 6c 6f 72 20 61 6e 64 20 6d 65 61 73 75 72 65 20 61 64 73 20 61 6e 64 20 6b 65 65 70 20 74 68 69 73 20 73 69 74 65 20 73 65 63 75 72 65 2e 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 75 72 76 65 79 6d 6f 6e 6b 65 79 2e 63 6f 6d 2f 6d 70 2f 6c 65 67 61 6c 2f 70 72 69 76 61 63 79 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 50 72 69 76 61 63 79 20 4e 6f 74 69 63 65 3c 2f 61 3e 5c 6e 20 20 3c 61 20 63 6c 61 73 73 3d 5c 22 6f 74 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6c 69 6e 6b 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 75 72 76 65 79 6d 6f 6e 6b 65 79 2e 63 6f 6d 2f 6d 70 2f 6c 65 67 61 6c 2f 63 6f 6f 6b 69 65 73 2f 3e 43 6f 6f 6b 69 65 73 20 4e 6f 74 69 63 65 3c Data Ascii: nt, tailor and measure ads and keep this site secure. <a href=\"https://www.surveymonkey.com/mp/legal/privacy/\" target=\"_blank\">Privacy Notice</a>\n <a class=\"ot-cookie-policy-link\" href=https://www.surveymonkey.com/mp/legal/cookies/>Cookies Notice<
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 6c 6f 67 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 6f 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 73 65 74 20 62 79 20 75 73 20 61 6e 64 20 63 61 6c 6c 65 64 20 66 69 72 73 74 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2e 20 57 65 20 61 6c 73 6f 20 75 73 65 20 74 68 69 72 64 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 20 e2 80 93 20 77 68 69 63 68 20 61 72 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 61 20 64 6f 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6f 66 20 74 68 65 20 77 65 62 73 69 74 65 20 79 6f 75 20 61 72 65 20 76 69 73 69 74 69 6e 67 20 e2 80 93 20 66 6f 72 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 6d 61 72 6b 65 74 69 6e 67 20 65 66 66 6f 72 74 73 2e 20 4d 6f 72 Data Ascii: login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies which are cookies from a domain different than the domain of the website you are visiting for our advertising and marketing efforts. Mor
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 32 33 65 31 64 36 37 34 2d 38 62 61 39 2d 34 31 33 31 2d 39 65 63 65 2d 64 62 35 32 64 34 61 32 36 35 36 32 22 2c 22 4e 61 6d 65 22 3a 22 65 6e 64 70 61 67 65 22 2c 22 48 6f 73 74 22 3a 22 77 75 66 75 6f 6f 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6e 74 72 6f 6c 20 72 65 64 69 72 65 63 74 73 20 6f 66 20 73 75 62 6d 69 73 73 69 6f 6e 73 20 74 6f 20 65 6d 62 65 64 64 65 64 20 66 6f 72 6d 73 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 Data Ascii: "GeneralVendorsIds":[],"FirstPartyCookies":[{"id":"23e1d674-8ba9-4131-9ece-db52d4a26562","Name":"endpage","Host":"wufuoo.com","IsSession":true,"Length":"0","description":"Control redirects of submissions to embedded forms","thirdPartyDescription":"","patt
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 77 65 62 73 69 74 65 73 20 75 73 69 6e 67 20 63 65 72 74 61 69 6e 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 74 68 65 20 63 6f 6f 6b 69 65 20 6c 61 77 20 63 6f 6d 70 6c 69 61 6e 63 65 20 73 6f 6c 75 74 69 6f 6e 20 66 72 6f 6d 20 4f 6e 65 54 72 75 73 74 2e 20 20 49 74 20 69 73 20 73 65 74 20 61 66 74 65 72 20 76 69 73 69 74 6f 72 73 20 68 61 76 65 20 73 65 65 6e 20 61 20 63 6f 6f 6b 69 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 74 69 63 65 20 61 6e 64 20 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 Data Ascii: cription":"This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enab
2024-12-02 10:05:45 UTC	222	IN	Data Raw: 67 74 68 22 3a 22 33 36 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 74 65 72 6d 69 6e 65 20 63 6f 6f 6b 69 65 20 62 61 6e 6e 65 72 20 72 65 73 70 6f 6e 73 65 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 34 39 34 66 64 37 39 2d 35 64 33 64 2d 34 0d 0a Data Ascii: gth":"365","description":"Determine cookie banner response","thirdPartyDescription":"","patternKey":null,"thirdPartyKey":"","firstPartyKey":"","DurationType":1,"category":null,"isThirdParty":false},{"id":"f494fd79-5d3d-4
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 62 66 35 2d 39 36 66 37 2d 37 36 33 61 63 38 64 39 31 34 31 37 22 2c 22 4e 61 6d 65 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 48 6f 73 74 22 3a 22 77 75 66 6f 6f 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6e 74 72 6f 6c 73 20 53 53 4f 20 6c 6f 67 69 6e 20 66 6f 72 20 77 75 66 6f 6f 20 61 64 6d 69 6e 20 74 6f 6f 6c 73 20 28 69 6e 74 65 72 6e 61 6c 20 6f 6e 6c 79 29 2e 20 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 72 65 71 75 69 72 65 64 20 6f 74 68 65 72 77 69 73 65 20 75 73 65 72 73 20 61 72 65 20 6e 6f 74 20 61 62 6c 65 20 74 6f 20 6c 6f 67 69 6e 20 74 6f 20 61 64 6d 69 6e 20 74 6f 6f 6c 73 2e 22 2c 22 74 68 69 72 64 50 61 Data Ascii: 7ff9bf5-96f7-763ac8d91417","Name":"session","Host":"wufoo.com","IsSession":true,"Length":"0","description":"Controls SSO login for wufoo admin tools (internal only). This cookie is required otherwise users are not able to login to admin tools.","thirdPa
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 33 39 2d 32 38 63 65 2d 34 31 32 61 2d 39 63 36 61 2d 38 65 39 63 63 62 66 63 62 37 39 35 22 2c 22 4e 61 6d 65 22 3a 22 5f 73 70 6c 75 6e 6b 5f 72 75 6d 5f 73 69 64 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 73 75 72 76 65 79 6d 6f 6e 6b 65 79 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 Data Ascii: 39-28ce-412a-9c6a-8e9ccbfcb795","Name":"_splunk_rum_sid","Host":"www.surveymonkey.com","IsSession":false,"Length":"0","description":"","thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"","DurationType":1,"category":null,"i
2024-12-02 10:05:45 UTC	1369	IN	Data Raw: 65 6e 74 20 61 62 75 73 65 20 62 79 20 6c 69 6d 69 74 69 6e 67 20 6e 75 6d 62 65 72 20 6f 66 20 61 63 63 6f 75 6e 74 73 20 63 72 65 61 74 65 64 20 62 79 20 61 20 73 69 6e 67 6c 65 20 75 73 65 72 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 62 34 39 34 36 64 39 31 2d 39 32 63 36 2d 34 39 61 32 2d 61 34 31 34 2d 39 62 66 62 31 36 39 64 36 32 32 63 22 2c 22 4e 61 6d 65 Data Ascii: ent abuse by limiting number of accounts created by a single user","thirdPartyDescription":"","patternKey":null,"thirdPartyKey":"","firstPartyKey":"","DurationType":1,"category":null,"isThirdParty":false},{"id":"b4946d91-92c6-49a2-a414-9bfb169d622c","Name

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49764	157.240.196.15	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:45 UTC	534	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:45 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-GWA5VNOE' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-12-02 10:05:45 UTC	1779	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-12-02 10:05:45 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-12-02 10:05:46 UTC	14571	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-12-02 10:05:46 UTC	16384	IN	Data Raw: 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 Data Ascii: SON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(
2024-12-02 10:05:46 UTC	16384	IN	Data Raw: 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e Data Ascii: ,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.
2024-12-02 10:05:46 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2024-12-02 10:05:46 UTC	1812	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2024-12-02 10:05:46 UTC	14572	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-12-02 10:05:46 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModu
2024-12-02 10:05:46 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 Data Ascii: eturn a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49758	150.171.27.10	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:45 UTC	515	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:45 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A296D273F3FC4541871D15F9689FE5A6 Ref B: EWR30EDGE1009 Ref C: 2024-12-02T10:05:45Z Date: Mon, 02 Dec 2024 10:05:45 GMT Connection: close
2024-12-02 10:05:45 UTC	1837	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-12-02 10:05:45 UTC	8192	IN	Data Raw: 61 74 65 22 7d 2c 68 63 74 5f 6c 65 6e 67 74 68 5f 6f 66 5f 73 74 61 79 3a 7b 74 79 70 65 3a 22 68 63 74 5f 6c 6f 73 22 7d 2c 68 63 74 5f 70 61 72 74 6e 65 72 5f 68 6f 74 65 6c 5f 69 64 3a 7b 7d 2c 68 63 74 5f 74 6f 74 61 6c 5f 70 72 69 63 65 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 68 63 74 5f 70 61 67 65 74 79 70 65 3a 7b 74 79 70 65 3a 22 65 6e 75 6d 22 2c 76 61 6c 75 65 73 3a 5b 22 68 6f 6d 65 22 2c 22 73 65 61 72 63 68 72 65 73 75 6c 74 73 22 2c 22 6f 66 66 65 72 64 65 74 61 69 6c 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 69 6e 74 65 6e 74 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 22 2c 22 70 72 6f 70 65 72 74 79 22 2c 22 63 61 72 74 22 2c 22 70 75 72 63 68 61 73 65 22 2c 22 63 61 6e 63 65 6c 22 2c 22 6f 74 68 65 72 22 5d 7d 2c 74 72 61 76 65 6c Data Ascii: ate"},hct_length_of_stay:{type:"hct_los"},hct_partner_hotel_id:{},hct_total_price:{type:"number"},hct_pagetype:{type:"enum",values:["home","searchresults","offerdetail","conversionintent","conversion","property","cart","purchase","cancel","other"]},travel
2024-12-02 10:05:46 UTC	5979	IN	Data Raw: 65 74 75 72 6e 21 31 7d 7d 3b 74 68 69 73 2e 6c 6f 61 64 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 2c 6c 2c 65 2c 61 2c 69 2c 73 2c 76 2c 66 2c 74 2c 79 2c 6b 2c 70 2c 6e 2c 77 2c 68 2c 72 2c 64 2c 62 2c 63 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 41 6c 6c 6f 77 65 64 3d 21 30 3b 6f 2e 73 74 6f 72 65 43 6f 6e 76 54 72 61 63 6b 43 6f 6f 6b 69 65 73 3d 3d 3d 21 31 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 41 6c 6c 6f 77 65 64 3d 21 31 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 3d 22 22 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 29 26 26 6f 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 26 Data Ascii: eturn!1}};this.loadConfig=function(){var u,l,e,a,i,s,v,f,t,y,k,p,n,w,h,r,d,b,c;this.uetConfig.cookieAllowed=!0;o.storeConvTrackCookies===!1&&(this.uetConfig.cookieAllowed=!1);this.uetConfig.cookieDomain="";o.hasOwnProperty("cookieDomain")&&o.cookieDomain&
2024-12-02 10:05:46 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-12-02 10:05:46 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-12-02 10:05:46 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-12-02 10:05:46 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-12-02 10:05:46 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49760	172.217.21.36	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:45 UTC	1025	OUT	POST /ccm/collect?en=page_view&dr=espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space&dl=https%3A%2F%2Fwww.wufoo.com%2Fendpage%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1090178785.1733133942&auid=1925629715.1733133942&npa=0&gtm=45He4bk0v78253463za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&tft=1733133942190&tfd=19940&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wufoo.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:47 UTC	577	IN	HTTP/1.1 200 OK Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: text/plain Date: Mon, 02 Dec 2024 10:05:46 GMT Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.wufoo.com Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49765	18.165.220.93	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:45 UTC	359	OUT	GET /meter/wufoo.com/202.svg HTTP/1.1 Host: cdn.ywxi.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:47 UTC	562	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Date: Mon, 02 Dec 2024 10:05:42 GMT Server: Apache x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin Cache-Control: public Expires: Mon, 02 Dec 2024 11:05:42 GMT X-Cache: Hit from cloudfront Via: 1.1 5c23ab9748dfedff76d0f834e4ad56b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: eYTWOa7Jl6wnBlS2IYvy_VcaQpkN9sBkrxjpd1l9CxXJ5P1mA2V9Kw== Age: 4
2024-12-02 10:05:47 UTC	16384	IN	Data Raw: 34 64 30 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 35 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d Data Ascii: 4d09<?xml version="1.0" encoding="UTF-8"?><svg width="120px" height="50px" viewBox="0 0 120 50" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com
2024-12-02 10:05:47 UTC	3345	IN	Data Raw: 31 33 31 31 34 35 2c 34 30 2e 31 38 39 37 37 39 37 20 37 33 2e 34 39 37 32 32 35 33 2c 34 30 2e 33 39 33 32 32 38 32 20 37 33 2e 37 34 31 33 36 37 31 2c 34 30 2e 35 38 32 30 33 31 32 20 43 37 33 2e 39 38 35 35 30 38 39 2c 34 30 2e 37 37 30 38 33 34 33 20 37 34 2e 31 36 34 35 34 33 36 2c 34 30 2e 39 38 34 30 34 38 33 20 37 34 2e 32 37 38 34 37 36 35 2c 34 31 2e 32 32 31 36 37 39 37 20 43 37 34 2e 33 39 32 34 30 39 33 2c 34 31 2e 34 35 39 33 31 31 31 20 37 34 2e 34 34 39 33 37 34 39 2c 34 31 2e 37 33 39 32 35 36 32 20 37 34 2e 34 34 39 33 37 34 39 2c 34 32 2e 30 36 31 35 32 33 34 20 5a 20 4d 38 31 2e 30 33 39 32 39 36 37 2c 34 34 20 4c 37 37 2e 30 30 31 32 31 30 38 2c 34 34 20 4c 37 37 2e 30 30 31 32 31 30 38 2c 33 36 2e 38 36 31 33 32 38 31 20 4c 38 31 2e Data Ascii: 131145,40.1897797 73.4972253,40.3932282 73.7413671,40.5820312 C73.9855089,40.7708343 74.1645436,40.9840483 74.2784765,41.2216797 C74.3924093,41.4593111 74.4493749,41.7392562 74.4493749,42.0615234 Z M81.0392967,44 L77.0012108,44 L77.0012108,36.8613281 L81.
2024-12-02 10:05:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49766	13.227.2.22	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:45 UTC	528	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:46 UTC	510	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15579 Connection: close Date: Sun, 01 Dec 2024 21:14:35 GMT Last-Modified: Sun, 01 Dec 2024 12:07:20 GMT ETag: "ca10a83376fd9bc0ab90281b9867f488" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 37feb669efce06be9b61f39bbb729cae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: HkAsprG7It-agllOa1IKh58e4C2Ock9BPhExI5Jf5FRgkpyNPMQN1w== Age: 46272
2024-12-02 10:05:47 UTC	15579	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 73 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 6c 3d 73 2e 72 65 64 75 63 65 28 28 65 2c 61 2c 64 29 3d 3e 28 65 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 61 3f 22 6c 6f 67 22 3a 61 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 73 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const s=["debug","info","warn","error"];let l=s.reduce((e,a,d)=>(e[a]=function(){var e="debug"===a?"log":a;if(c&&console&&"function"==typeof console[e]){var t=s.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49773	172.64.155.119	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:48 UTC	603	OUT	GET /scripttemplates/202407.2.0/assets/otFloatingRounded.json HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wufoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:48 UTC	824	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:48 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: 1ohc1iVbPdrvy7L5T5Qkww== Last-Modified: Tue, 06 Aug 2024 19:31:27 GMT x-ms-request-id: 7de5866e-901e-004a-0ed8-3cf47c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 73900 Expires: Tue, 03 Dec 2024 10:05:48 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba8029df6b0f37-EWR
2024-12-02 10:05:48 UTC	545	IN	Data Raw: 32 37 39 35 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 76 59 58 52 70 62 6d 64 53 62 33 56 75 5a 47 56 6b 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 69 42 79 62 32 78 6c 50 53 4a 6b 61 57 46 73 62 32 63 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 79 62 33 63 69 Data Ascii: 2795 { "name": "otFloatingRounded", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxvYXRpbmdSb3VuZGVkIj48ZGl2IGNsYXNzPSJvdC1zZGstY29udGFpbmVyIiByb2xlPSJkaWFsb2ciPjxkaXYgY2xhc3M9Im90LXNkay1yb3ci
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 31 6b 63 47 51 74 59 32 39 75 64 47 46 70 62 6d 56 79 49 6a 34 38 61 44 4d 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 77 5a 43 31 30 61 58 52 73 5a 53 49 2b 50 43 39 6f 4d 7a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 59 32 39 75 64 47 56 75 64 43 49 2b 50 48 41 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 77 5a 43 31 6b 5a 58 4e 6a 49 6a 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 70 5a 44 30 69 59 6d 46 75 62 6d 56 79 4c 57 39 77 64 47 6c 76 62 6e 4d 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 4a 68 62 6d 35 6c 63 69 31 76 63 48 52 70 62 32 34 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 4a 68 62 6d 35 6c 63 Data Ascii: 1kcGQtY29udGFpbmVyIj48aDMgY2xhc3M9Im90LWRwZC10aXRsZSI+PC9oMz48ZGl2IGNsYXNzPSJvdC1kcGQtY29udGVudCI+PHAgY2xhc3M9Im90LWRwZC1kZXNjIj48L3A+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBpZD0iYmFubmVyLW9wdGlvbnMiPjxkaXYgY2xhc3M9ImJhbm5lci1vcHRpb24iPjxidXR0b24gY2xhc3M9ImJhbm5lc
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 36 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6c 65 66 74 3a 31 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 39 30 25 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e Data Ascii: rgba(0,0,0,.2)}#onetrust-banner-sdk.otFloatingRounded{position:fixed;background-color:#fff;width:60%;max-width:700px;z-index:2147483645;border-radius:2.5px;bottom:2em;left:1em;font-size:16px;max-height:90%;overflow-y:auto;overflow-x:hidden}#onetrust-bann
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6b 20 2e 6f 74 2d 67 76 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 33 30 70 78 20 31 30 70 78 20 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 70 61 64 64 69 6e 67 3a 30 20 33 30 70 78 20 31 30 70 78 20 33 30 70 78 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 66 6f 6e 74 2d 73 69 7a Data Ascii: k .ot-gv-list-handler{padding:0 30px 10px 30px;font-size:.812em;margin-bottom:0;border:0;line-height:normal;height:auto;width:auto}#onetrust-banner-sdk #onetrust-policy-text,#onetrust-banner-sdk .ot-b-addl-desc{padding:0 30px 10px 30px;clear:both;font-siz
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 36 38 62 36 33 31 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 37 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 34 30 25 7d 23 6f Data Ascii: ord-wrap:break-word;padding:12px 10px;line-height:1.2;font-weight:600;font-size:.813em}#onetrust-banner-sdk #onetrust-accept-btn-handler{margin-right:0}#onetrust-banner-sdk #onetrust-pc-btn-handler{border:1px solid #68b631;min-width:175px;max-width:40%}#o
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 7e 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 64 69 73 70 6c 61 Data Ascii: ts:none;font-size:inherit;line-height:inherit}#onetrust-banner-sdk .banner-option-input[aria-expanded=true] .ot-arrow-container{transform:rotate(90deg)}#onetrust-banner-sdk .banner-option-input[aria-expanded=true]~.banner-option-details{height:auto;displa
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 73 63 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 Data Ascii: sc{font-size:.813em;line-height:1.5}#onetrust-banner-sdk .ot-dpd-desc .onetrust-vendors-list-handler{display:block;margin-left:0px;margin-top:5px;padding:0;margin-bottom:0;border:0;line-height:normal;height:auto;width:auto}#onetrust-banner-sdk #onetrust-p
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 61 6c 7b 6d 61 72 67 69 6e 3a 30 20 31 2e 38 37 35 72 65 6d 20 2e 36 32 35 72 65 6d 20 31 2e 38 37 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 67 76 2d 6c 69 6e 6b 2d 63 74 6e 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 73 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 30 20 31 35 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 30 70 78 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 Data Ascii: al{margin:0 1.875rem .625rem 1.875rem}#onetrust-banner-sdk #ot-gv-link-ctnr{margin-bottom:15px}#onetrust-banner-sdk #onetrust-button-group button{width:100%}#onetrust-banner-sdk #banner-options{padding:0 15px 0 15px;width:calc(100% - 30px)}#onetrust-banne
2024-12-02 10:05:48 UTC	13	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: }
2024-12-02 10:05:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49771	104.18.32.137	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:48 UTC	436	OUT	GET /consent/86f42b6d-7a31-469c-804c-319643173d42/018dfc06-450f-70ae-81ef-536da56b2895/en.json HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:48 UTC	829	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:48 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8eba802a1ad5c33a-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 48657 Cache-Control: public, max-age=86400 Last-Modified: Wed, 04 Sep 2024 20:47:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 5Fb7c2168X8tV1Coc0Zcog== x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5738fb28-601e-0061-79da-3c74b0000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-12-02 10:05:48 UTC	540	IN	Data Raw: 37 63 36 33 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 72 65 66 Data Ascii: 7c63{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Pref
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 69 6d 65 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 77 68 61 74 20 77 65 20 75 73 65 20 69 74 20 66 6f 72 2e 3c 2f 70 3e 5c 6e 3c 70 3e 49 6e 20 6f 75 72 20 43 6f 6f 6b 69 65 73 20 4e 6f 74 69 63 65 2c 20 77 65 20 75 73 65 20 74 68 65 20 77 6f 72 64 20 e2 80 9c 63 6f 6f 6b 69 65 73 e2 80 9d 20 61 73 20 61 20 63 61 74 63 68 61 6c 6c 20 74 65 72 6d 20 74 6f 20 69 6e 63 6c 75 64 65 20 6e 6f 74 20 6f 6e 6c 79 20 63 6f 6f 6b 69 65 73 2c 20 62 75 74 20 61 6c 73 6f 20 6f 74 68 65 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 73 75 63 68 20 61 73 20 70 69 78 65 6c 73 2c 20 77 65 62 20 62 65 61 63 6f 6e 73 20 61 6e 64 20 70 61 67 65 20 74 61 67 73 2e 20 4c 69 6b 65 20 6d 6f 73 74 20 63 6f 6d 6d 65 72 63 69 61 6c 20 77 65 62 73 69 74 65 73 20 77 65 20 75 73 65 20 62 Data Ascii: ime depending on what we use it for.</p>\n<p>In our Cookies Notice, we use the word cookies as a catchall term to include not only cookies, but also other technologies such as pixels, web beacons and page tags. Like most commercial websites we use b
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6e 74 2c 20 74 61 69 6c 6f 72 20 61 6e 64 20 6d 65 61 73 75 72 65 20 61 64 73 20 61 6e 64 20 6b 65 65 70 20 74 68 69 73 20 73 69 74 65 20 73 65 63 75 72 65 2e 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 75 72 76 65 79 6d 6f 6e 6b 65 79 2e 63 6f 6d 2f 6d 70 2f 6c 65 67 61 6c 2f 70 72 69 76 61 63 79 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 50 72 69 76 61 63 79 20 4e 6f 74 69 63 65 3c 2f 61 3e 5c 6e 20 20 3c 61 20 63 6c 61 73 73 3d 5c 22 6f 74 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6c 69 6e 6b 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 75 72 76 65 79 6d 6f 6e 6b 65 79 2e 63 6f 6d 2f 6d 70 2f 6c 65 67 61 6c 2f 63 6f 6f 6b 69 65 73 2f 3e 43 6f 6f 6b 69 65 73 20 4e 6f 74 69 63 65 3c Data Ascii: nt, tailor and measure ads and keep this site secure. <a href=\"https://www.surveymonkey.com/mp/legal/privacy/\" target=\"_blank\">Privacy Notice</a>\n <a class=\"ot-cookie-policy-link\" href=https://www.surveymonkey.com/mp/legal/cookies/>Cookies Notice<
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6c 6f 67 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 6f 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 73 65 74 20 62 79 20 75 73 20 61 6e 64 20 63 61 6c 6c 65 64 20 66 69 72 73 74 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2e 20 57 65 20 61 6c 73 6f 20 75 73 65 20 74 68 69 72 64 2d 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 20 e2 80 93 20 77 68 69 63 68 20 61 72 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 61 20 64 6f 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6f 66 20 74 68 65 20 77 65 62 73 69 74 65 20 79 6f 75 20 61 72 65 20 76 69 73 69 74 69 6e 67 20 e2 80 93 20 66 6f 72 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 6d 61 72 6b 65 74 69 6e 67 20 65 66 66 6f 72 74 73 2e 20 4d 6f 72 Data Ascii: login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies which are cookies from a domain different than the domain of the website you are visiting for our advertising and marketing efforts. Mor
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 32 33 65 31 64 36 37 34 2d 38 62 61 39 2d 34 31 33 31 2d 39 65 63 65 2d 64 62 35 32 64 34 61 32 36 35 36 32 22 2c 22 4e 61 6d 65 22 3a 22 65 6e 64 70 61 67 65 22 2c 22 48 6f 73 74 22 3a 22 77 75 66 75 6f 6f 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6e 74 72 6f 6c 20 72 65 64 69 72 65 63 74 73 20 6f 66 20 73 75 62 6d 69 73 73 69 6f 6e 73 20 74 6f 20 65 6d 62 65 64 64 65 64 20 66 6f 72 6d 73 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 Data Ascii: "GeneralVendorsIds":[],"FirstPartyCookies":[{"id":"23e1d674-8ba9-4131-9ece-db52d4a26562","Name":"endpage","Host":"wufuoo.com","IsSession":true,"Length":"0","description":"Control redirects of submissions to embedded forms","thirdPartyDescription":"","patt
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 77 65 62 73 69 74 65 73 20 75 73 69 6e 67 20 63 65 72 74 61 69 6e 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 74 68 65 20 63 6f 6f 6b 69 65 20 6c 61 77 20 63 6f 6d 70 6c 69 61 6e 63 65 20 73 6f 6c 75 74 69 6f 6e 20 66 72 6f 6d 20 4f 6e 65 54 72 75 73 74 2e 20 20 49 74 20 69 73 20 73 65 74 20 61 66 74 65 72 20 76 69 73 69 74 6f 72 73 20 68 61 76 65 20 73 65 65 6e 20 61 20 63 6f 6f 6b 69 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 74 69 63 65 20 61 6e 64 20 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 Data Ascii: cription":"This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enab
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 67 74 68 22 3a 22 33 36 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 65 74 65 72 6d 69 6e 65 20 63 6f 6f 6b 69 65 20 62 61 6e 6e 65 72 20 72 65 73 70 6f 6e 73 65 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 34 39 34 66 64 37 39 2d 35 64 33 64 2d 34 62 66 35 2d 39 36 66 37 2d 37 36 33 61 63 38 64 39 31 34 31 37 22 2c 22 4e 61 6d 65 22 3a 22 73 65 73 73 Data Ascii: gth":"365","description":"Determine cookie banner response","thirdPartyDescription":"","patternKey":null,"thirdPartyKey":"","firstPartyKey":"","DurationType":1,"category":null,"isThirdParty":false},{"id":"f494fd79-5d3d-4bf5-96f7-763ac8d91417","Name":"sess
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6e 74 72 6f 6c 20 65 78 70 65 72 69 65 6e 63 65 20 77 68 65 6e 20 6e 65 77 20 66 6f 72 6d 20 69 73 20 63 72 65 61 74 65 64 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 33 30 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 35 38 62 31 63 62 33 39 2d 32 38 63 65 2d 34 31 32 61 2d 39 63 36 61 2d 38 65 39 63 63 62 66 63 62 37 39 35 22 2c 22 4e 61 6d 65 22 3a 22 5f Data Ascii: ","description":"Control experience when new form is created","thirdPartyDescription":"","patternKey":null,"thirdPartyKey":"","firstPartyKey":"","DurationType":30,"category":null,"isThirdParty":false},{"id":"58b1cb39-28ce-412a-9c6a-8e9ccbfcb795","Name":"_
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6e 75 6c 6c 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 38 34 39 31 64 30 61 62 2d 33 64 34 32 2d 34 61 61 63 2d 61 62 35 38 2d 37 32 38 63 62 66 63 35 33 35 38 61 22 2c 22 4e 61 6d 65 22 3a 22 77 75 53 69 67 6e 75 70 22 2c 22 48 6f 73 74 22 3a 22 77 75 66 6f 6f 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 72 65 76 65 6e 74 20 61 62 75 73 65 20 62 79 20 6c 69 6d 69 74 69 6e 67 20 6e 75 6d 62 65 72 20 6f 66 20 61 63 63 6f 75 6e 74 73 20 Data Ascii: null,"firstPartyKey":null,"DurationType":1,"category":null,"isThirdParty":false},{"id":"8491d0ab-3d42-4aac-ab58-728cbfc5358a","Name":"wuSignup","Host":"wufoo.com","IsSession":false,"Length":"30","description":"Prevent abuse by limiting number of accounts
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 77 75 66 6f 6f 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6e 74 72 6f 6c 73 20 70 61 67 65 20 6e 75 6d 62 65 72 20 69 6e 20 66 6f 72 6d 20 6d 61 6e 61 67 65 72 2e 20 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 72 65 71 75 69 72 65 64 20 6f 74 68 65 72 77 69 73 65 20 75 73 65 72 73 20 61 72 65 20 6e 6f 74 20 61 62 6c 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 70 61 67 65 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 6f 77 6e 65 64 20 62 79 20 53 75 72 76 65 79 4d 6f 6e 6b 65 79 20 49 6e 63 2e 20 61 20 63 6f 6d 70 61 6e 79 20 62 61 73 65 64 20 69 Data Ascii: wufoo.com","IsSession":false,"Length":"365","description":"Controls page number in form manager. This cookie is required otherwise users are not able to change the page.","thirdPartyDescription":"This domain is owned by SurveyMonkey Inc. a company based i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49774	172.64.155.119	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:48 UTC	599	OUT	GET /scripttemplates/202407.2.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wufoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:48 UTC	824	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:48 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: gHD/hbq7+H1F/GSzLFMxSw== Last-Modified: Tue, 06 Aug 2024 19:31:29 GMT x-ms-request-id: 37bc776f-401e-0014-37d8-3c1f9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 73900 Expires: Tue, 03 Dec 2024 10:05:48 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba802a3af07292-EWR
2024-12-02 10:05:48 UTC	545	IN	Data Raw: 37 63 36 39 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 5a 47 6c 68 62 47 39 6e 49 69 42 68 63 6d 6c 68 4c 57 31 76 5a 47 46 73 50 53 4a 30 63 6e 56 6c 49 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 41 74 4c 54 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 Data Ascii: 7c69 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iZGlhbG9nIiBhcmlhLW1vZGFsPSJ0cnVlIj48IS0tIENsb3NlIEJ1dHRvbiAtLT48ZGl2IGNsYXNzPSJvdC1
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 58 42 6a 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6f 4d 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 64 47 6c 30 62 47 55 69 50 6c 6c 76 64 58 49 67 55 48 4a 70 64 6d 46 6a 65 54 77 76 61 44 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 5a 47 56 7a 59 79 49 2b 50 43 39 6b 61 58 59 2b 50 47 4a 31 64 48 52 76 62 69 42 70 5a 44 30 69 59 57 4e 6a 5a 58 42 30 4c 58 4a 6c 59 32 39 74 62 57 56 75 5a 47 56 6b 4c 57 4a 30 62 69 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 42 62 47 78 76 64 79 42 68 62 47 77 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a 76 64 79 42 76 Data Ascii: XBjLWNvbnRlbnQiIGNsYXNzPSJvdC1wYy1zY3JvbGxiYXIiPjxoMiBpZD0ib3QtcGMtdGl0bGUiPllvdXIgUHJpdmFjeTwvaDI+PGRpdiBpZD0ib3QtcGMtZGVzYyI+PC9kaXY+PGJ1dHRvbiBpZD0iYWNjZXB0LXJlY29tbWVuZGVkLWJ0bi1oYW5kbGVyIj5BbGxvdyBhbGw8L2J1dHRvbj48c2VjdGlvbiBjbGFzcz0ib3Qtc2RrLXJvdyBv
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 34 67 5a 57 35 6b 63 79 41 74 4c 54 34 38 4c 33 4e 6c 59 33 52 70 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 48 4e 6c 59 33 52 70 62 32 34 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 78 7a 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 70 5a 47 55 67 62 33 51 74 61 47 39 7a 64 48 4d 74 64 57 6b 67 62 33 51 74 63 47 4d 74 63 32 4e 79 62 32 78 73 59 6d 46 79 49 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6f 5a 48 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 57 78 7a 64 43 31 30 61 58 52 73 5a 53 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 6d 46 6a 61 79 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 67 59 58 4a 70 59 53 31 73 59 57 4a 6c 62 Data Ascii: 4gZW5kcyAtLT48L3NlY3Rpb24+PC9kaXY+PHNlY3Rpb24gaWQ9Im90LXBjLWxzdCIgY2xhc3M9Im90LWhpZGUgb3QtaG9zdHMtdWkgb3QtcGMtc2Nyb2xsYmFyIj48ZGl2IGlkPSJvdC1wYy1oZHIiPjxkaXYgaWQ9Im90LWxzdC10aXRsZSI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gYmFjay1idG4taGFuZGxlciIgYXJpYS1sYWJlb
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 30 4c 58 4e 31 59 6d 68 6b 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 56 68 63 6d 4e 6f 4c 57 4e 75 64 48 49 69 50 6a 78 77 49 48 4a 76 62 47 55 39 49 6e 4e 30 59 58 52 31 63 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6a 63 6d 34 74 63 6d 52 79 49 6a 34 38 4c 33 41 2b 50 47 6c 75 63 48 56 30 49 47 6c 6b 50 53 4a 32 5a 57 35 6b 62 33 49 74 63 32 56 68 63 6d 4e 6f 4c 57 68 68 62 6d 52 73 5a 58 49 69 49 48 52 35 63 47 55 39 49 6e 52 6c 65 48 51 69 49 47 35 68 62 57 55 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 49 44 78 7a 64 6d 63 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 Data Ascii: 0LXN1YmhkciI+PGRpdiBjbGFzcz0ib3Qtc2VhcmNoLWNudHIiPjxwIHJvbGU9InN0YXR1cyIgY2xhc3M9Im90LXNjcm4tcmRyIj48L3A+PGlucHV0IGlkPSJ2ZW5kb3Itc2VhcmNoLWhhbmRsZXIiIHR5cGU9InRleHQiIG5hbWU9InZlbmRvci1zZWFyY2gtaGFuZGxlciI+IDxzdmcgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 49 69 42 34 62 57 77 36 63 33 42 68 59 32 55 39 49 6e 42 79 5a 58 4e 6c 63 6e 5a 6c 49 6a 34 38 64 47 6c 30 62 47 55 2b 52 6d 6c 73 64 47 56 79 49 45 6c 6a 62 32 34 38 4c 33 52 70 64 47 78 6c 50 6a 78 6e 50 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 69 4e 6d 5a 6d 59 69 49 47 51 39 49 6b 30 30 4d 44 41 75 4f 44 55 34 4c 44 45 78 4c 6a 51 79 4e 32 4d 74 4d 79 34 79 4e 44 45 74 4e 79 34 30 4d 6a 45 74 4f 43 34 34 4e 53 30 78 4d 53 34 78 4d 7a 49 74 4d 54 59 75 4f 44 55 30 4c 54 45 78 4c 6a 45 7a 4e 6b 67 78 4f 43 34 31 4e 6a 52 6a 4c 54 63 75 4f 54 6b 7a 4c 44 41 74 4d 54 4d 75 4e 6a 45 73 4d 79 34 33 4d 54 55 74 4d 54 59 75 4f 44 51 32 4c 44 45 78 4c 6a 45 7a 4e 67 6f 67 49 43 41 67 49 43 42 6a 4c 54 4d 75 4d 6a 4d 30 4c 44 63 75 4f 44 41 78 4c 54 45 Data Ascii: IiB4bWw6c3BhY2U9InByZXNlcnZlIj48dGl0bGU+RmlsdGVyIEljb248L3RpdGxlPjxnPjxwYXRoIGZpbGw9IiNmZmYiIGQ9Ik00MDAuODU4LDExLjQyN2MtMy4yNDEtNy40MjEtOC44NS0xMS4xMzItMTYuODU0LTExLjEzNkgxOC41NjRjLTcuOTkzLDAtMTMuNjEsMy43MTUtMTYuODQ2LDExLjEzNgogICAgICBjLTMuMjM0LDcuODAxLTE
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 57 68 6b 63 69 49 2b 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 4e 76 62 6e 4e 6c 62 6e 51 74 61 47 52 79 49 6a 35 44 62 32 35 7a 5a 57 35 30 50 43 39 7a 63 47 46 75 50 69 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6b 74 61 47 52 79 49 6a 35 4d 5a 57 63 75 53 57 35 30 5a 58 4a 6c 63 33 51 38 4c 33 4e 77 59 57 34 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 56 73 4c 57 46 73 62 43 31 6a 61 47 74 69 62 33 67 69 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 79 62 33 63 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a Data Ascii: WhkciI+PHNwYW4gY2xhc3M9Im90LWNvbnNlbnQtaGRyIj5Db25zZW50PC9zcGFuPiA8c3BhbiBjbGFzcz0ib3QtbGktaGRyIj5MZWcuSW50ZXJlc3Q8L3NwYW4+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2VsLWFsbC1jaGtib3giPjwvZGl2PjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9Im90LXNkay1yb3ciPjxkaXYgY2xhc3M9Im90LXNkay1j
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 68 79 5a 57 59 39 49 69 4d 69 50 6c 5a 70 5a 58 63 67 55 48 4a 70 64 6d 46 6a 65 53 42 4f 62 33 52 70 59 32 55 38 4c 32 45 2b 50 47 4a 79 50 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 56 6e 59 32 78 68 61 57 30 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 4d 5a 57 63 67 53 57 35 30 49 45 4e 73 59 57 6c 74 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 48 52 76 5a 32 64 73 5a 58 4d 67 59 57 35 6b 49 47 46 79 63 6d 39 33 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 52 6e 62 43 31 6a 62 6e 52 79 49 6a 34 38 4c 32 52 70 64 6a 34 38 4c 33 4e 6c 59 33 52 70 62 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 Data Ascii: hyZWY9IiMiPlZpZXcgUHJpdmFjeSBOb3RpY2U8L2E+PGJyPjxhIGNsYXNzPSJvdC12ZW4tbGVnY2xhaW0tbGluayIgaHJlZj0iIyI+VmlldyBMZWcgSW50IENsYWltIE5vdGljZTwvYT48L2Rpdj48IS0tIHRvZ2dsZXMgYW5kIGFycm93IC0tPjxkaXYgY2xhc3M9Im90LXRnbC1jbnRyIj48L2Rpdj48L3NlY3Rpb24+PGRpdiBjbGFzcz0ib
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 32 62 48 4e 30 4c 57 4e 75 64 48 49 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 70 62 6d 73 74 59 6e 52 75 49 47 4e 68 64 47 56 6e 62 33 4a 35 4c 58 5a 6c 62 6d 52 76 63 6e 4d 74 62 47 6c 7a 64 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 57 61 57 56 33 49 46 5a 6c 62 6d 52 76 63 69 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 32 39 72 61 57 55 67 62 47 39 7a 64 43 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 61 47 39 7a 64 43 Data Ascii: 2bHN0LWNudHIiPjxidXR0b24gY2xhc3M9Im90LWxpbmstYnRuIGNhdGVnb3J5LXZlbmRvcnMtbGlzdC1oYW5kbGVyIj5WaWV3IFZlbmRvciBMaXN0PC9idXR0b24+PC9kaXY+PCEtLSBDb29raWUgbG9zdCBsaW5rIC0tPjxkaXYgY2xhc3M9Im90LWhsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktaG9zdC
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 4f 54 49 67 4e 54 45 79 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 4a 6a 64 58 4a 79 5a 57 35 30 51 32 39 73 62 33 49 69 49 47 51 39 49 6b 30 78 4e 6a 59 75 4f 53 41 79 4e 6a 51 75 4e 57 77 74 4d 54 45 33 4c 6a 67 67 4d 54 45 32 59 79 30 30 4c 6a 63 67 4e 43 34 33 4c 54 45 79 4c 6a 4d 67 4e 43 34 33 4c 54 45 33 49 44 42 73 4c 54 63 75 4d 53 30 33 4c 6a 46 6a 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 45 79 4c 6a 4d 67 4d 43 30 78 4e 30 77 78 4d 6a 63 75 4d 79 41 79 4e 54 59 67 4d 6a 55 75 4d 53 41 78 4e 54 55 75 4e 6d 4d 74 4e 43 34 33 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4d 54 49 75 4d 79 41 77 4c 54 45 33 62 44 63 75 4d 53 30 33 4c 6a 46 6a 4e 43 34 33 4c 54 51 75 4e 79 41 78 4d 69 34 7a 4c 54 51 75 4e 79 41 78 4e 79 41 77 62 44 45 Data Ascii: OTIgNTEyIj48cGF0aCBmaWxsPSJjdXJyZW50Q29sb3IiIGQ9Ik0xNjYuOSAyNjQuNWwtMTE3LjggMTE2Yy00LjcgNC43LTEyLjMgNC43LTE3IDBsLTcuMS03LjFjLTQuNy00LjctNC43LTEyLjMgMC0xN0wxMjcuMyAyNTYgMjUuMSAxNTUuNmMtNC43LTQuNy00LjctMTIuMyAwLTE3bDcuMS03LjFjNC43LTQuNyAxMi4zLTQuNyAxNyAwbDE
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 57 64 79 63 47 4e 75 64 48 49 67 62 33 51 74 59 57 4e 6a 4c 58 52 34 64 43 42 76 64 43 31 32 62 6d 51 74 61 57 35 6d 62 79 31 6a 62 6e 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 62 6d 51 74 61 57 35 6d 62 79 49 2b 50 47 67 31 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 62 6d 51 74 62 47 4a 73 49 6a 35 54 5a 58 4a 32 61 57 4e 6c 49 45 35 68 62 57 55 38 4c 32 67 31 50 6a 78 6f 4e 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 4e 75 64 43 49 2b 52 32 39 76 5a 32 78 6c 49 45 31 68 63 48 4d 38 4c 32 67 32 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 Data Ascii: iBjbGFzcz0ib3QtYWNjLWdycGNudHIgb3QtYWNjLXR4dCBvdC12bmQtaW5mby1jbnRyIj48ZGl2IGNsYXNzPSJvdC12bmQtaW5mbyI+PGg1IGNsYXNzPSJvdC12bmQtbGJsIj5TZXJ2aWNlIE5hbWU8L2g1PjxoNiBjbGFzcz0ib3Qtdm5kLWNudCI+R29vZ2xlIE1hcHM8L2g2PjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2Pjwvc2VjdGlvbj48

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49775	172.64.155.119	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:48 UTC	599	OUT	GET /scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn-ukwest.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wufoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:48 UTC	841	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 10:05:48 GMT Content-Type: text/css Content-Length: 24745 Connection: close Content-MD5: HyPJ72TNHxdfOI82cqKVqA== Last-Modified: Tue, 06 Aug 2024 19:31:46 GMT ETag: 0x8DCB64E6905C5C0 x-ms-request-id: 49db77a1-a01e-006e-5dd8-3c02dc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 73900 Expires: Tue, 03 Dec 2024 10:05:48 GMT Cache-Control: public, max-age=86400 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8eba802a3c804246-EWR
2024-12-02 10:05:48 UTC	528	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 3a 66 6f 63 75 73 7b 6f 75 74 Data Ascii: #onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{out
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 Data Ascii: -sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;backgr
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 2e 6f Data Ascii: inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#onetrust-pc-sdk button.ot-link-btn:hover,#ot-sync-ntfy button.o
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 6f 6e 6c 79 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 63 72 6e 2d 72 64 72 2c 2e 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 Data Ascii: epeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .screen-reader-only,#onetrust-pc-sdk .ot-scrn-rdr,.ot-sdk-cookie-p
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2b 6c 61 62 65 6c 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 61 75 74 6f 7d 2e 63 61 74 65 Data Ascii: text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-input:focus+label{outline:1px solid #000;outline-style:auto}.cate
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 38 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 67 65 6e 65 72 61 6c 2d 6d 6f 64 61 6c 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 Data Ascii: nal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae88}#onetrust-consent-sdk .ot-general-modal{overflow:hidden;pos
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 7b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d Data Ascii: ature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signature-paragraph,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-paragraph{margin:0;line-height:20px;font-
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 61 78 28 31 34 70 78 2c 2e 38 37 35 72 65 6d 29 7d 40 6d 65 64 69 Data Ascii: ld-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{margin-bottom:0;line-height:20px;font-size:max(14px,.875rem)}@medi
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 62 6f 64 79 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 Data Ascii: put,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-banner-sdk tbody,#onetrust-banner-sdk .ot-main-content,#onetrust-b
2024-12-02 10:05:48 UTC	1369	IN	Data Raw: 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 68 65 61 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d Data Ascii: on,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-sdk-cookie-policy thead,#ot-sdk-cookie-policy tr,#ot-sdk-cookie-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49770	150.171.27.10	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:48 UTC	528	OUT	GET /p/action/5549426.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wufoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:49 UTC	570	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 363 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F67D8F32313946CE86CA895EF8F4D79F Ref B: EWR30EDGE0218 Ref C: 2024-12-02T10:05:48Z Date: Mon, 02 Dec 2024 10:05:48 GMT Connection: close
2024-12-02 10:05:49 UTC	363	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 65 61 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a 20 61 2c 20 27 Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49772	150.171.27.10	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:48 UTC	342	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:49 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F8BAA294E2C74D7FAF73FB42718A61AC Ref B: EWR30EDGE1419 Ref C: 2024-12-02T10:05:48Z Date: Mon, 02 Dec 2024 10:05:47 GMT Connection: close
2024-12-02 10:05:49 UTC	1988	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-12-02 10:05:49 UTC	8192	IN	Data Raw: 74 73 22 2c 22 6f 66 66 65 72 64 65 74 61 69 6c 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 69 6e 74 65 6e 74 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 22 2c 22 70 72 6f 70 65 72 74 79 22 2c 22 63 61 72 74 22 2c 22 70 75 72 63 68 61 73 65 22 2c 22 63 61 6e 63 65 6c 22 2c 22 6f 74 68 65 72 22 5d 7d 2c 74 72 61 76 65 6c 5f 64 65 73 74 69 64 3a 7b 7d 2c 74 72 61 76 65 6c 5f 6f 72 69 67 69 6e 69 64 3a 7b 7d 2c 74 72 61 76 65 6c 5f 70 61 67 65 74 79 70 65 3a 7b 74 79 70 65 3a 22 65 6e 75 6d 22 2c 76 61 6c 75 65 73 3a 5b 22 68 6f 6d 65 22 2c 22 73 65 61 72 63 68 72 65 73 75 6c 74 73 22 2c 22 6f 66 66 65 72 64 65 74 61 69 6c 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 69 6e 74 65 6e 74 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 22 2c 22 63 61 6e 63 65 6c 22 2c 22 6f 74 68 65 72 Data Ascii: ts","offerdetail","conversionintent","conversion","property","cart","purchase","cancel","other"]},travel_destid:{},travel_originid:{},travel_pagetype:{type:"enum",values:["home","searchresults","offerdetail","conversionintent","conversion","cancel","other
2024-12-02 10:05:49 UTC	5828	IN	Data Raw: 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 41 6c 6c 6f 77 65 64 3d 21 31 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 3d 22 22 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 29 26 26 6f 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 26 26 74 79 70 65 6f 66 20 6f 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 3d 6f 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 3d 22 22 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6f 6f 6b 69 65 46 6c 61 67 73 22 29 26 26 6f 2e 63 6f 6f 6b 69 65 46 Data Ascii: onfig.cookieAllowed=!1);this.uetConfig.cookieDomain="";o.hasOwnProperty("cookieDomain")&&o.cookieDomain&&typeof o.cookieDomain=="string"&&(this.uetConfig.cookieDomain=o.cookieDomain);this.uetConfig.cookieFlags="";o.hasOwnProperty("cookieFlags")&&o.cookieF
2024-12-02 10:05:49 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-12-02 10:05:49 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-12-02 10:05:49 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-12-02 10:05:49 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-12-02 10:05:49 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49780	13.227.2.22	443	6644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 10:05:48 UTC	355	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 10:05:49 UTC	510	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15579 Connection: close Date: Sun, 01 Dec 2024 21:14:35 GMT Last-Modified: Sun, 01 Dec 2024 12:07:20 GMT ETag: "ca10a83376fd9bc0ab90281b9867f488" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4166c47260b95e2ec3436a0df75c7f38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: igojlcKeFb42qCqntsLBbzrAyPr54ENT-ArZM-2FdhV9GUVdi_E2Kw== Age: 46275
2024-12-02 10:05:49 UTC	15579	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 73 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 6c 3d 73 2e 72 65 64 75 63 65 28 28 65 2c 61 2c 64 29 3d 3e 28 65 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 61 3f 22 6c 6f 67 22 3a 61 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 73 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const s=["debug","info","warn","error"];let l=s.reduce((e,a,d)=>(e[a]=function(){var e="debug"===a?"log":a;if(c&&console&&"function"==typeof console[e]){var t=s.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Target ID:	0
Start time:	05:04:42
Start date:	02/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:04:42
Start date:	02/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11958565083669481681,14402194825252490213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:04:43
Start date:	02/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
http://espanyol-hjfcghmvhjvmhcdhxtxhsallkkkjjggdsd.static.hf.space