Edit tour

Windows Analysis Report
https://t.ly/8cSDx

Overview

General Information

Sample URL:	https://t.ly/8cSDx
Analysis ID:	1572397
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

HTML page contains string obfuscation

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2424,i,13418119353792489953,16204478221804853054,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.ly/8cSDx" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T14:21:28.356832+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50018	104.18.26.193	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://t.ly/8cSDx

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx

HTTP Parser: Base64 decoded: 1733836861.000000

Source: https://googleads.g.doubleclick.net/pagead/html/r20241205/r20190131/zrt_lookup_fy2021.html

HTTP Parser: Found new string: script (function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AUEgyA_Sss1Uu1TgBySXtVgHFL5J5traaVxQpRWrVEJkKloqBxIj4ZGJPPENvUec8lGUl7aAjdtcY1qJsNcXvN_TdcforqV7max7OFda6r3a7Ro0GLJioENKzK__mC_rVCbRF3jhJ0Ugo0Z8B4r49D5RXpZ2JKmjCoFpR4xExQQ8brf_ld_xSQFyo2ox_AZv4ghTXbF5eggjqRY_3Mk8dO1uhOXMFzJarXTS693QYX6xlSBtk&cry=1&dbm_d=AKAmf-BjT_SJ1rePRZwIwtLZjOVTfBSd7xaAsxIyWgUBNeZfunBAt-iF2jYEqNLQAYc2rdhqZhD_oFP7ENCBbNiMhTW2LrVTe1x0VSDQDSL0s5mGEbzJPqL8aYpbN3ghnMdR0sCbXVDTbQ7uWMaNMtdJUizthvS-Nzrfyms9bgxRvtZWOXkYLFTap1F9T98q9fWd4wCgWnR7Am_6-Ab9iMfTGvAQRu-ZGW2zFKEO8UMw5Kx9YHXCRm3u_bfzkA9bl_wLNt0CNJKDfp4nmIbLHx4Jjvie50cIibPLmgXkBx6XeWOzSPBLhZAvA2Vf1DqI2psJn6Eo0OLoiPzXFgXNfRZGbZajdFQxznCEJO0dy739A6oHRFWj_y3hSmuWX_p5iibI59Ly8zo3t76AmBoAIP_pDpFA_56bp5C9Clnj89MIYUp7vMoIuVh20eS31LDdO7zv3NVc0ZS5GnDEl0vrPw0LOKpFiJZz42m7Zaqv4ty8SdpOgrEKvtRqMOkupdgimSZWkzSMBxaekqWxQnKANRhE14T3hJAHllta2C6Z-eo83qMeT3VaAqWq-XIXue10nmTuvBWQGAuHGMQIHcTo-i6LjPQo4G8Joc3i7NJB4y_Hkco4FLeBFYERHGgKCa4D9JXmfPcVM7u0t-tQ-zxkXXqcI_uAG-uRpFtaI4JS5yMUQlKf0R_5Z...

Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://t.ly/?ref=expired&url=https://t.ly/8cSDx	HTTP Parser: No favicon
Source: https://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?cid=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113-0-%EF%BF%BDid&utm_source=DV360&utm_medium=DIS&utm_content=Prospecting&utm_campaign=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113&gclid=*&gclid=EAIaIQobChMIuZWA2aWdigMV6SIGAB26iC3ZEAEYASAAEgJnRfD_BwE&_=32425113_%3D400452569_%3D224470660	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49811 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: googleads.g.doubleclick.net to https://tpt.dotomi.com/event/etc/click?vndr_id=2096&vndr_name=dcm&comp_id=62059&campaign_id=101342&dvc_id=&ggl_play_id=&idfa=&ad_id=599677993&audience=&client_campaign_id=32425113&creative_id=224470660&placement_id=400452569&s_id=8900278&site_name=n5949.4624185pmprecision-dv360&rdct_url=https://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?cid=dis-jared-dv360-gifting-prospecting-corp-trf-fy25_1103_j_lv_novdeclevian_gft_mf_nopromo_dis_static_gm_2000x1047-evergreen-collectpg-32425113-0-%ecid&utm_source=dv360&utm_medium=dis&utm_content=prospecting&utm_campaign=dis-jared-dv360-gifting-prospecting-corp-trf-fy25_1103_j_lv_novdeclevian_gft_mf_nopromo_dis_static_gm_2000x1047-evergreen-collectpg-32425113&gclid=*&gclid=eaiaiqobchmiuzwa2awdigmv6sigab26ic3zeaeyasaaegjnrfd_bwe&_=32425113_=400452569_=224470660

Source: Network traffic

Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50018 -> 104.18.26.193:443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /8cSDx HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ref=expired&url=https://t.ly/8cSDx HTTP/1.1Host: t.lyConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/app.css?id=6e55a0bd9e1689eaf679 HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cf-fonts/s/lobster/5.0.18/latin/400/normal.woff2 HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t.lysec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t.lysec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?fb8184add5a3101ad0a321db81c70285 HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t.lysec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://t.ly/css/app.css?id=6e55a0bd9e1689eaf679Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff2?8d3cabfc66809162fb4d7109aefa44dc HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://t.lysec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://t.ly/css/app.css?id=6e55a0bd9e1689eaf679Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/sweetalert.min.js?id=abedaaba10307a01ba0d HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=5d823af68314a2848045 HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /img/tly-logo-sm.png HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rw.js HTTP/1.1Host: r.wdfl.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/tly-logo-sm.png HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /js/sweetalert.min.js?id=abedaaba10307a01ba0d HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rw.js HTTP/1.1Host: r.wdfl.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/app.js?id=5d823af68314a2848045 HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867
Source: global traffic	HTTP traffic detected: GET /img/tly-logo-sm.png HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
Source: global traffic	HTTP traffic detected: GET /td/rul/10875945736?random=1733836867034&cv=11&fst=1733836867034&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
Source: global traffic	HTTP traffic detected: GET /img/tly-logo-sm.png HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
Source: global traffic	HTTP traffic detected: GET /js/9950.js?id=3fd808fe8e73d7122f13 HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10875945736/?random=1733836867034&cv=11&fst=1733836867034&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /js/9950.js?id=3fd808fe8e73d7122f13 HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /js/8567.js?id=ff27d36c69a89659efd0 HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /js/1166.js?id=19bfd34c537a6d4aa0c4 HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10875945736/?random=1733836867034&cv=11&fst=1733835600000&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dO5efoN-V8xiRq9Ee4UlikLm79x3c5ATlDe37PaSSF5cYw7oX&random=2752506817&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10875945736/?random=1733836867034&cv=11&fst=1733836867034&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20241205/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5561763581314444&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1733836861&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&pra=5&wgl=1&aihb=0&aiof=3&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.3221&aiapmi=0.33938&aiombap=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836866989&bpp=15&bdt=6356&idt=6027&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=2977550825633&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=6065 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-5561763581314444&output=html&h=280&slotname=2321115505&adk=348108860&adf=4181732005&pi=t.ma~as.2321115505&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836867004&bpp=3&bdt=6372&idt=6062&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=77&ady=312&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=6077 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20241205&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://t.lySec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /js/1166.js?id=19bfd34c537a6d4aa0c4 HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10875945736/?random=1733836867034&cv=11&fst=1733835600000&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dO5efoN-V8xiRq9Ee4UlikLm79x3c5ATlDe37PaSSF5cYw7oX&random=2752506817&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20241205&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/18426777046261427710/14763004658117789537?w=400&h=209&tw=1&q=75 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/17147156143050066190/14763004658117789537?w=100&h=100&tw=1&q=75 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-5561763581314444?href=https%3A%2F%2Ft.ly&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8efd891efeaf15d7 HTTP/1.1Host: t.lyConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/googleadx/?google_gid=CAESEHe7ZCKibi5CAEr3oKOy5YA&google_cver=1&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/google?google_gid=CAESECFcl9Vev1dErg-ZjBNH1c8&google_cver=1&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW HTTP/1.1Host: gtrace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adxcookie?id=&google_gid=CAESELqoJB2ILVOLH5_tSMp0hks&google_cver=1&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEImQHyRRkUYMNoxTatB-flo&google_cver=1&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQsNCj0c-YhhHZ7ee0p3ZFeY_Axepm1Sxs2-aQFwmruXTtoCsHJNlSuRIe7dGNp_cWFRy-9xdFZhrM3znR9r7sCNnYQAQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/17147156143050066190/14763004658117789537?w=100&h=100&tw=1&q=75 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13KNx6GPSuGcB-kt6053IRd9hGdjSDfFqLV90KxYNVaWtPhOFF2h6koV-kBODLbdlumqQ2W0jR0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESED34_s-fwhdATnOyfGyMuaQ&google_cver=1&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/18426777046261427710/14763004658117789537?w=400&h=209&tw=1&q=75 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/googleadx/?google_cver=1&google_gid=CAESEHe7ZCKibi5CAEr3oKOy5YA&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=78_l5Zw6aUVtSW2Ox4O7
Source: global traffic	HTTP traffic detected: GET /google_pixel?google_gid=CAESEFYjuaqlRD6JjV2RcsrvwSw&google_cver=1&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEC9z4HCoDXMXDWETqDAdwFs&google_cver=1&google_push=AXcoOmS_bHIT3yJg_6opmUBsguEa0oxkRHlT-qBnmqr5nMCJXmfeTrh0DqFbRBNa8g75EeTf4aFmhspWLzeGVVoCeSpf1AdAW7ibMQ HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=3422485851&adf=2440470065&pi=t.aa~a.2817859086~rp.4&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x280&nras=2&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=77&ady=1239&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&psts=AOrYGsnH2YjzCpBRAGU6KyvDt6PiXS-xJLgIoJGD5F9st8hbmAyGO7xHRn08YQVeFzD8JHDZmGe_03Myst9GDBpY1SDlJnc&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&btvi=1&fsb=1&dtd=682 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=899877383&adf=908843369&pi=t.aa~a.1108372886~rp.3&w=350&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=350x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x280%2C1110x280&nras=3&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=456&ady=939&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&psts=AOrYGsnH2YjzCpBRAGU6KyvDt6PiXS-xJLgIoJGD5F9st8hbmAyGO7xHRn08YQVeFzD8JHDZmGe_03Myst9GDBpY1SDlJnc&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=693 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /match/?int_id=19&redir=1&google_gid=CAESEIgJ0qSMj4TxmLZl5g1bDrg&google_cver=1&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=google&google_gid=CAESEImQHyRRkUYMNoxTatB-flo&google_cver=1&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=fe599ace-232e-44cc-ad08-afae4110058f; c=1733836882; tuuid_lu=1733836882
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRhsFwBJth0m0S3VSgNw0dqOzOEjlER-KHeyXgEvdYctCUmAMMkgxmod38bUx5HQKVTR26iRTY3t5vstjpvkZcKXTisqQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CPfHxOMEEPPo2-oEGMfLnZkCMAE&v=APEucNWiFU0F_wbtzhx5H031BHMPBaYF11iZ7XdCkbfMq7Mg6GccxoMtglqtaD7Oest-LM9gBmfDrwTB0nePob92FFZ-aUufEw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/html/r20241205/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /sync?exchange=11&google_gid=CAESEGwHpV0csKajUGpgWTvQ1Ek&google_cver=1&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28 HTTP/1.1Host: dsp.adkernel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13JHDaVXl6hLjgcod5xTXVVrxkBUfG1KZ5ryGltsVAx-VMDQDecxzCDA2-BPjUSY5cgFFOy2YtA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW&google_hm=22210ca7d02b196e2njvxb00m4ihpoje HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmTWzest5pHO4UQSyJUahOzu5qAREnxSNAwgaqrPipeQgTGAqOYjuceBhei7Orku45Lwl_wEGHDmS61jiIF6c5QbEhgpbTGhLHHE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bt&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESED34_s-fwhdATnOyfGyMuaQ&google_cver=1&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=qY7E4Feb1Tl0b05
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSBfOT9ulCK3PrA9y4EdQz9KAbtN8Hiv_1j_aaYfTZT_WOrK0YpVvvliUDQkMrbIRKU_lFSH3x0SKkO8YJ9-3fie92hzw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVcGlQzfcKTB4L0bodyhNKeMXAxECbmSUhOByYuWLDO2sqBmNNkVd-Mb0uXw_0P_J3YzvsSCKsUJFqMFwUxBH8V2-3zneTQ-gA2tSv5WT4c64-pV6g7CdXY2TSrA4nFiSixPuO_kg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzMzODM2ODgwLDgwODAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly90Lmx5LyIsbnVsbCxbWzgsIng4S0pFcU5vUFdJIl0sWzksImVuLVVTIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zemanta&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&google_hm=NzhfbDVadzZhVVZ0U1cyT3g0Tzc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adkernel&google_hm=QTIyOTE1Mzk1NDM1Mjc5ODM0NzE&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CJfRrNYFEPbY6t8FGPDFnaMCMAE&v=APEucNXfFZwzoOLiXEkNNNiNJY5P7KyF9R7DUKoAm8KzM3JqEmY0xRmkwb79hh6wcotQh2svA3CcUxXiacIj76_stVfAXUfwgYDX0R7MICgTyV51NAv8cbA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=899877383&adf=908843369&pi=t.aa~a.1108372886~rp.3&w=350&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=350x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x280%2C1110x280&nras=3&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=456&ady=939&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&psts=AOrYGsnH2YjzCpBRAGU6KyvDt6PiXS-xJLgIoJGD5F9st8hbmAyGO7xHRn08YQVeFzD8JHDZmGe_03Myst9GDBpY1SDlJnc&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=693Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmRUudNuwZWE_do6PVkcRHvSV-rRYMuoMjkVlHmunBoFZasRhg5nMFyWDKwC--tLznPlkhqOdoPz5t2kf-P6uiYTOu0np7Apmw3Z&google_hm=NDYzMDI0NDUyMDY5MDcwMDAyOQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /google_pixel?google_gid=CAESEFYjuaqlRD6JjV2RcsrvwSw&google_cver=1&google_push=AXcoOmSJrFy3UtQJ72UzESzWf4NxDCOosGlxBjqp9SrQd0bqlCXu8Q-p3Wf-rr5RpOlX__osjut54xd85hY0UtgFhSQI3_x79HKInkE HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _tracker=%7B%22UUID%22%3A%22521F23B3-5E25-4671-0E7E-512BFBB73E0C%22%7D
Source: global traffic	HTTP traffic detected: GET /adxcookie?id=&google_gid=CAESELqoJB2ILVOLH5_tSMp0hks&google_cver=1&google_push=AXcoOmQZ9AdKlnbeJTyLIQOgeg_irgSNHpembbXdwR5hZTKgt71EH1K5sVztA2LZNcTwLbpA7hv1EF7GFHEe6T8OoaTYsETXYxkiBIE HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __kuid=3e7b9369-0658-4550-b77a-a6f2d90c239b.503050882
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmTWzest5pHO4UQSyJUahOzu5qAREnxSNAwgaqrPipeQgTGAqOYjuceBhei7Orku45Lwl_wEGHDmS61jiIF6c5QbEhgpbTGhLHHE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW&google_hm=22210ca7d02b196e2njvxb00m4ihpoje HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bt&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmT6jjqhi0BrUuVNWpGVnr43MSt4bBfR9inK9Bh4wxCeM2-kcmSX4Sy4cMsg1OuvLKC9ls-o6x6rIv5BD-6D15OwP3ckElsKUFQ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=qY7E4Feb1Tl0b05; matchgoogle=5
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-AUEgyA_Sss1Uu1TgBySXtVgHFL5J5traaVxQpRWrVEJkKloqBxIj4ZGJPPENvUec8lGUl7aAjdtcY1qJsNcXvN_TdcforqV7max7OFda6r3a7Ro0GLJioENKzK__mC_rVCbRF3jhJ0Ugo0Z8B4r49D5RXpZ2JKmjCoFpR4xExQQ8brf_ld_xSQFyo2ox_AZv4ghTXbF5eggjqRY_3Mk8dO1uhOXMFzJarXTS693QYX6xlSBtk&cry=1&dbm_d=AKAmf-BjT_SJ1rePRZwIwtLZjOVTfBSd7xaAsxIyWgUBNeZfunBAt-iF2jYEqNLQAYc2rdhqZhD_oFP7ENCBbNiMhTW2LrVTe1x0VSDQDSL0s5mGEbzJPqL8aYpbN3ghnMdR0sCbXVDTbQ7uWMaNMtdJUizthvS-Nzrfyms9bgxRvtZWOXkYLFTap1F9T98q9fWd4wCgWnR7Am_6-Ab9iMfTGvAQRu-ZGW2zFKEO8UMw5Kx9YHXCRm3u_bfzkA9bl_wLNt0CNJKDfp4nmIbLHx4Jjvie50cIibPLmgXkBx6XeWOzSPBLhZAvA2Vf1DqI2psJn6Eo0OLoiPzXFgXNfRZGbZajdFQxznCEJO0dy739A6oHRFWj_y3hSmuWX_p5iibI59Ly8zo3t76AmBoAIP_pDpFA_56bp5C9Clnj89MIYUp7vMoIuVh20eS31LDdO7zv3NVc0ZS5GnDEl0vrPw0LOKpFiJZz42m7Zaqv4ty8SdpOgrEKvtRqMOkupdgimSZWkzSMBxaekqWxQnKANRhE14T3hJAHllta2C6Z-eo83qMeT3VaAqWq-XIXue10nmTuvBWQGAuHGMQIHcTo-i6LjPQo4G8Joc3i7NJB4y_Hkco4FLeBFYERHGgKCa4D9JXmfPcVM7u0t-tQ-zxkXXqcI_uAG-uRpFtaI4JS5yMUQlKf0R_5ZU4-c66aIRYUbi81--b0W5ipc112qHEPrASTGAj89ClJictpiIracdlnYoph4x8Ly-VqFzGyjpNpTQeoHBL_3DyncsQyjFK4OGsi0dyj57dsGMm7GU0wGYeGDuiMlzuP1Ravf3bTsPgwNd58BWAtiQdNYP8KyNOCG3Z-DICEgxM239sR0Afxxzg4_ZcB4mnUsYJIo-gsQtkk2bRE6O9rlhObDD5hpiJD2rZB9KALkQSQEpAHBILZOITSOCAL6ARWeCYNo9iyjTHLB_dZpYK8jHPV6TvN2sZ4Way9G_2lLxHdFGPw-oSHcmmabq0VJ52W0IFI3c3W1sJtpIVX6O7Fu-WxERJmnwp1VvM9YMPnDksa5Bmq5FnXzm0iisRIrYKUCnJ4O5zp-akpMlVBX1X_iTX4WOzKm4BEGfzrVqA01NcSTQPIGSpt2KFKwlMaBHtPTKpqp4x6X0F7XA7-CyQaB_6RwhZ5vaQAXTXFKgQHR8sNML35DzYJ_R31uGR705-HqOfE41WJSrOIm-Wr7UTkU274ghx6mozQ49gUevUVF2hb2eaQnrbspSalBocyzd7gTtv7gmmhKeqO0w5FiL6QDB8yapjujClsoI2q4-dloLd9gkAzxd5RotCzdkmppJSjG9S5iGL4Wi1KleyAkEUorWbDSSegRHeKDzOCHvSpS9Sf1te3Lbq4nX1vwrDfxYObGdhAqXru6LpJ_BRrvweQrAOuvqykzLMVcdyKL4eRlm2WTxoYU64T06QRc3FmptcdU1xKBNQvywjaKaCJUjmvNXWc7MS_cJRtCBLdaDeGWgTMUpNoTzaYRpPAxvZw5drencnyr0zlDGLZkkqdRJh0TomFLkS5Vr-s_dO6WZ3RwMnFqDeXSg-_OokYFDoG4CEzktVKZtkzu-5gQSEJSv4gi6bjGTMTRG_3Cx6jwu6brETCowPp0VbxcLcCY4-wGUSFdojyj6G8QKMr6LeNrs5RIrcJWNJdA8wy3LRbaGpPercE1z0H1ZPWfDBT4KYZ2uz0ZEUPimqIuCHdGktBCJZlwcjl5se1dfbM3vyYc-7-KVA5qjjX1V5lu-Rm5sjl7pm57ltqExE-qCoxuyQYQJdyz3vDQEPVIOP3E2PISRtMl_YpE3nbbn1R5arD5Ki7iYbYKuNWmqYzKdq2bYtaZXkY6pBMDp3axCKeKdg7ZcB_ZsJ4RVx6tzlubaDfP6GhgC_YtNzO7GqfqAZuMonHfxK-xBmWtny4-_n8nB5-ji2dN8YV1HZoA5IBH_3q339vX8yZHKCzWe7cQJXhZH6QBQOAuspLcxC4Kjp_VGtnb18icSnD_GWJ36gve_NUKI_t_nmXH4JhDM36-tb6ZhGhrkZZa4La1vr0AUalwOiBvFNJm9Z3w58UyEUdTsacP1O6N-Ptf1Gay16OvpOlXTvQ0J462w3j7oNllxenYnHQrQq4OMrB5owevlDZBN3iDbZULfBKS5suOeAG_eIq0UDlqzaPSTcxw420i-TpIgMFIktCyFsamgCVFiZShG6cCfCKW0kCB1VnLC29y2Yh_GmKlCtBcPgQIVVcNWCxwkG_03CRySqbVL_Kh80T5kIGpbxuHQWS4fxOGO-jaRDSvg9eNVo3Ka6H-xQ-ZKYDCmaVNoG3Wp-WlCPqnF9WOlQdhx-m_ccJApBlQtVWdcP_pDNXR7LDGgupTZQOw2tmK66PzjmzSI4hMb0Fbmz3fk9_fh22HlmE-h-mDhDe78sdAv2QHqWWO-txl-2YylgofPFCscOaMis3iO7IaQ9B5KAj4pIYLW4y1n5yxHIKGMkP_T66DxsAWT5wJmEjhzGowyELKoNwcZJzM7G3ZlYZ5D7OUGr8_b-2zKHomKd4EhSa5dEq2lRqwfo-VDASrtG4Oi5AvD35ChkIGfxyNUMaYUm0nMuVpPwH3rZOjqfJ7TUOGCoal_x3CqFJJ3xEslePuCl61pMA_aE0ZLds6EKh7mpl4EryTDVi8N_pPk2uU2CSRqXdQbuPpMXOkGss_nURaSDARqz3olhko6
Source: global traffic	HTTP traffic detected: GET /simgad/17489467864391934481?sqp=uqWu0g0ICPoBEKwCQGQ&rs=AOga4qlk3o5v-ImXl8o4CcATd_f-DPcAsA HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/google?google_gid=CAESECwokNfvS_HaxfSCpn49VFI&google_cver=1&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0 HTTP/1.1Host: gtracenep.admaster.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=1&acc=crimtan&google_gid=CAESEAmuOBd5VupWHSGnq2gpvYk&google_cver=1&google_push=AXcoOmQyRyNnUHFSVQHWv_-SRaTpyGhjTOUfztvh-5nR1folSWXH0ud88FM0djavSC3GeLbxCM9BcH0Yx8q_eMXgB48YgVJihFMf94Y HTTP/1.1Host: gcm.ctnsnet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsudpx28gO1C-F3gobRoocpe3L0ro5EBxRzZfRocLaK9njUnEsy_y27kG8a8pI2L33raToO5ddLwqIKSKLcWPOV_MVub2uLhkpQxuDGM_YXt4BhPSfjxfwBkrBIeBOcFu-zNPCROqAE-n5g16ruOWFgOKfo5bGaST_Vl3T6eQQ_mkV_Metw8wVyFJSH9FGoPO6gdpibJxaHfNR_zcLUCGEO7ZqOt-zPzuW_Zkcm9U4rx66Hi8yblYNWLgSvEskkD8PaWOYPjU0TATKMBeK6-jdo1lSOu8JykutGOiY8vGldmlXurZyqyKh2ZNdwNC8NmY0QF-QLQJR6prq5A5pJNcBy__oGxbdgmfbgVPOZA2AUw1Smob4bgSSTmZbb7YiGjWuEX2YHX4-ADWzRQ6uvZ_Cn24jjuHuzA7mXXNNpoJr2CoDl1lNk6ORMD-8nvVwmVtppvageM0sIPLIsLYW7ZyPtIF3uqAsOWZC-Y5cIzo2foQ3MjcTm7-IjE5zriIFaVzt0ZrF5JGtzHBblKCMm4QDTCzLer_fHLB5fzJakjAljOiN5lg4gWciB6k2QmoiT_I8OiuZqm_YIxnHZYByOUXK7GZnxCVvQfElZywMc5DL5Wz-54XEfQayjOSug0ku2cxX3t_E6O_Blu03XaZbj4LEs5tc7te_3zqW2r_VytVaiBxsOOxZ5om1JlxXUfF4ztwEHjP5WWVFtcIus95ILpxs95ts2oKTP_DkHw34I6-PaZYh9TQeQX2hkrET8dXlcam2GbXDlyzyUU_pjD8_6LJYg9JKAn9OPihh_NR9UXwqhgBIxdRMrUsvlAg03t03rnO26o-Ni_2FRBC3Hjo2-xxDnws9XnxwuZSMdd_aZNF5tcOaiVSKrj7fbBLsIFy0gbA_S24iBPBMeGyqwdRef8k442NxQXpjSuri9MEMXg8WDfsRT4Yig6B39EcZAf_rqCxqD7_8hxBusb6MN8WxJnPR-iTQoV_lzcIxlf7tsVe3XKbB_-bSUsRhw5MrlsCkRo3fQBlyb_LzgxgG2f09jZ_lPZuXtuvC4SNqZWlPpb75nFzsHoWLlVqN5rXxJ7Yoop7HkhFS97GODbCkKCqVs3KKYN4ibXWAuZ3EJEPKfA7AX1zRRJ_dOSWXsls9N1VLPK0YTksUTanqaWCtSdoz1ssCBWjJHgO8ZzvlSBICk4q5Ar3tzSpk7pYFM51IYMXpHk4G7Re-YubDxpIViPdaySO6cznEczAv8hzPyHJgK2hXOCuS_RhM_p4YehVS62O8e2XclaqVoh8SqMJEDB-itnPUG0kiBOyh52ziHyxuo5Gll5RgjgMQigKV0yINJWZju1YAohcTCyp4yEUKdu3Oeb_cFBvQ&sai=AMfl-YRnWBs8Xj2SY9Bi6jw57HDN1sIlaOSelFNhlykkMEZKK_XNnyapET6FJ-SWo58eaEWY4SjTBXTlu__k98M0jfRRpZHIgP8U8rQhz49oyBvIT_2_gLyLh2K3A58vWWiVBM7yLAEz2pG7-rnwP6jLpsC4OC6XhzFgq0dvewwv9UBHi3v5rumTv-iMevZe1QduN7PJYprMpYnKHnBayBQrMmusd4yjO7ftUMyYi-BA_PVRk_ib6metgUNJX75HddAh_NtQmgaUY2iYZUrwz3UTYR4q3P7ZxWXw9UsR15aXMjsrsQyRiexEaC-qAHFnsQw8oNUAs-jy6gHG5l0br7CcFDqMrnf5D9aS8ZffdmxxYyXBHyNu11p81rqt4HBjGhaDvxcm1Crlzn7gzbuglpaFlLGADHKKwLaw5K7LhCu0PjQjfJJJ&sig=Cg0ArKJSzHX962jwvZ8oEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly93c2ouY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241205.84007&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-navigation-source=triggerReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=119&user_id=1974054405561860756&expires=30&ssp=google HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=fe599ace-232e-44cc-ad08-afae4110058f; c=1733836882; tuuid_lu=1733836884; google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z
Source: global traffic	HTTP traffic detected: GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; CMPS=483; CMPRO=483
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&code=CAESEAucPc0n90JY6KGIBH5wU3E&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=Ubyvrw02Q4tEIu9TqokRdFVkG9JDP0rXuxTzKcL15KlPArfLNdlqKfWfILtrKaEy5WrQcVVLjNQ7laeWWYsPnk3DWfSoeVgRt2IVUQJWEzA.; receive-cookie-deprecation=1; uuid2=4930685024747777157
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Z1hAVtHM6CMAAD2aAX0B-QAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-AayAvaTe3fzhj33RFvp441GKpdS15hyl5_uhK4wF_f0ucLRwkbKOwLFZJA4lIA7O1hyjUzl2ttwXwUj7VuEgVp9JCo5INfeIRLTmyvK4_mUY_qliNzUgdze7L_aEt7sdCZLQUg15WjiFtVegW6XHSSkzYQuiJeLR9Sf--oXyzX6mjFv3UaqFfDPFwT3OKZxr5bnx8yJm8_mldSZR9y70IsXGKFrQ&dbm_d=AKAmf-D0wKsFF8bQI1KYDUJw3ZFs6exo_TNSnp9fNbQGzKJhmjHGOep3Ioftv25MVK-pWeUPYza2Bm291q-FeLm5nNARJxeLPxQt1-HxmTG537qI7UP2IiGF51SI6ikLcrR1VtSMRa1XsWvUUxdtQD8UAVNIGKGPA5GHb1oeQBvgtWITFkxWJNkRq0JGTsB9uzZyA_CrnyT-BH9Ll8OlcE8l0RMg_1zouuz2D6KrrfRCK4nEy8oglelPO2-e8zJez4SioZRqRA8b89ukWQNBDKd71gi9Z3KpAlZTeupASswamWc3b764XeS5gA31UZg63zhXhyXyno06E3M1IZ0Q2T600i-OwmHtPovi8CBwn-zDwnljcGVjHXG2HZyb1i3cpb-ikqW2M2ygfFd1unSq9M1jEXAXbmBuKiZtZahldUBXQKYzKy0CGB66VNwyHNfdQQEFXnMMAEU1-QS0w5O9xvkmzi15J0edNLL7cR5C_wCB3fq6wVLV_jGY7WGliaKEYVYL7blgaTnVbflA30C8q_IvO0nb5qaV1JqdLj2CSMHEpspdbwfMcvBnxi9u23Fhz1Orw9P_OqphFenA8FZlJPsVVK6cv7eTFVPTeoxKfesbzYuVlaXfE90XE4T8pjny2G5cqhvtpRT3j45yccldKbqANaLLik8SgaY4BYikOfqinvdtjmNOyYmkD4VpbCdZM4MBv5FX99kMMB1qBdHUdXvna4GNZCGOoBliLjP_D2jNrnxEm9JN08yxYiRiyGIbFrqAGkLLytDB7TWKDy5cbIuvb5Nz02GCtSuJ28lnNfZi03ZygYz8qz8Try7t2DH765jjdBhImh_9vHy19IeYB0zL7FBKAkjarUjVPfGICDfWm4G5lZMPYhAXiL002OvQhhTvN3utDQ9WFkwEQk8K5U0ufQ6yLoCy8pxxi4e4tKlGfJCBwxkE8TI1EyWLDuc1lAHCoxZzXT_uXo_wezPHLmvQQ1ydeEoSuJI4_Bx1g7IObNsnPJUXan2TsJ0j8K0HP2F9a8XQo4coi4AZDsA9YOrl8r4pvUUX9ii6QZsgcBc11QActUemdPKLcJ6j5CQ0uKoPtU81_65LVsQNRuZN77NfUvDjuOgOSd-exx-raTrT6jPIg0QeSbxLtzDCE8qBepS0rMdUlP2z_cHa1JHFIH313hMdnFie99q2msJV_Vi2h9HklCxvDHDfv8AbI-Ou_cFib96CB-WFgM3ys4nmTznS58XASV8Spvm9sZL8U9PNtNGQhVi9m2Ns1_6fyNOdAT42uzVZ8SSQSvpj7MyNfJG_l9DF8TIWvBvcmnsmE0vA8cYHo6zpSBnvBXOcbcHZO27BC4XwORXDWRMkDcHoFGMfj6dE2VR_wZvRuWEZCnDDLohXiIHL3axP-0Tu747n1-W47XlbmoGK_5kVDuH3DrEGtQlGZJTpiPl56usAfDnDpD3fpa2vxFTW1MJhOHGvPfg3i39svb32Dz_VYEQFxCgsiaL_nRX_3NIbKpRHfdpv1N_zAFm84ndtgZ9pLqNcdNDv04jMhmZWPjLzag_AcfMtHkucndW0WcIY3fFpNvW9JoyyOkRSzoAByA6JIaKgwmGe0dYgj-bChoip-jw-9gOe7-7GjSIBrpIMyZhMMx0ZzCyY8e1LVoFbEnlAOKV_D0Z2T0WvF8WSKyS0XI3b-R17l9rMJw6Trv6mlSRptu2VbuVzba5C35V-n5w4QF4GkHtFB6DgAKpkiwcqHEvRsp62AZ7tJ5ud7utsgvZpidpP8WqxxWXGo6OpVVnC6EdaZ9WxDiwbmyvBo9_UrbOjkq_XCZ60kduPB0_gkaBdeqV3eafoscUPMgt_IZu27EcwklUO6GJyPzEHKZt3ZviMw5kPr81oBOuRbrUocgsZMyMjCTE5qCQREtVE_WdURiL83J_9wECw9qS1wCcfeTK6Il7_8kV7jziXR8-Lblglwnj6pafgbUZuW550yiD1gCBY2v_bTpM4TDi--881n3XLMJjCV0oLjmseCZv1FcPOMfHyImi74Z2CUWhEtgYMRPsnHGwbESV80fDOCJxxTN5rAo1_Awl4qNIxpMF18rw2qQW3JL1HRvAPJk8zWGt1j78PRIF_c5t7RTTSTA3vzRrVpkKLBCLwymUa_CGPRSaifCn-PdwyqG7oWkxbE0sksBei4--Lkpz6hS9omHB5DOW92z0qoQw2vjPhRjL3_IknSz7s40Gc84BPgtrWddJy6lYlDKRI3E3znrhGq3cq2A1euBKHqKcvv1SQP3MSmeanwGJsBaJAJeez3JU8ihHut6L93kYQhqmJ7RshZ3OChLktQqo9BuieFh7vJPEfrX869fE3uA-d7BR2IU8jOqkXmgEnhPdJOQQyj0nGGr3h5cdTM1Zg1iR0ju1d6PeVXw82d4yOnQTceAXAa4_LjXfsnFFkCsY2g3Kg673VnOmY92fqYihF6z7pfIUEO7XXaHECEBSLDIo3YxnQDEzEFkiE7P5kpnT0_L3J4aWuKidkyJ8f5NrD8tvAwMP5cxDK3NKOxYq9ErjAt5_cWMv5djm6dDlfjnedgvIpQZgfHsmG7P2JtZ2U3WecqTxEbLOuoSo3uiTwkoIfcNfXeVQaN_IiGZJ_TjgruuYCcgHDxPyLQBl0Yc3rnR0zuisURO0dqNMLO2KOzgrhiXyVecUTzei2iQmX3JczJUYUsokAdpInMn4_johHyq3dgRz1-Bff2O3bIJ1DzlcQfirRr37trEMLV
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_ab&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My&google_push=AXcoOmSX-XkZULzWEXRVPIAMqGYOL4W1I9M5f4gWA_ax3Q9BcNEjyd7kLnvD-o6n_uR53aVpdSryP550aR0GAnr9Fq9cJudz-LPaO6Y HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zemanta&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&google_hm=NzhfbDVadzZhVVZ0U1cyT3g0Tzc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adkernel&google_hm=QTIyOTE1Mzk1NDM1Mjc5ODM0NzE&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmRUudNuwZWE_do6PVkcRHvSV-rRYMuoMjkVlHmunBoFZasRhg5nMFyWDKwC--tLznPlkhqOdoPz5t2kf-P6uiYTOu0np7Apmw3Z&google_hm=NDYzMDI0NDUyMDY5MDcwMDAyOQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1hAWNHM66QAABZXA6erCwAA; CMPS=1322; CMPRO=1322
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsudpx28gO1C-F3gobRoocpe3L0ro5EBxRzZfRocLaK9njUnEsy_y27kG8a8pI2L33raToO5ddLwqIKSKLcWPOV_MVub2uLhkpQxuDGM_YXt4BhPSfjxfwBkrBIeBOcFu-zNPCROqAE-n5g16ruOWFgOKfo5bGaST_Vl3T6eQQ_mkV_Metw8wVyFJSH9FGoPO6gdpibJxaHfNR_zcLUCGEO7ZqOt-zPzuW_Zkcm9U4rx66Hi8yblYNWLgSvEskkD8PaWOYPjU0TATKMBeK6-jdo1lSOu8JykutGOiY8vGldmlXurZyqyKh2ZNdwNC8NmY0QF-QLQJR6prq5A5pJNcBy__oGxbdgmfbgVPOZA2AUw1Smob4bgSSTmZbb7YiGjWuEX2YHX4-ADWzRQ6uvZ_Cn24jjuHuzA7mXXNNpoJr2CoDl1lNk6ORMD-8nvVwmVtppvageM0sIPLIsLYW7ZyPtIF3uqAsOWZC-Y5cIzo2foQ3MjcTm7-IjE5zriIFaVzt0ZrF5JGtzHBblKCMm4QDTCzLer_fHLB5fzJakjAljOiN5lg4gWciB6k2QmoiT_I8OiuZqm_YIxnHZYByOUXK7GZnxCVvQfElZywMc5DL5Wz-54XEfQayjOSug0ku2cxX3t_E6O_Blu03XaZbj4LEs5tc7te_3zqW2r_VytVaiBxsOOxZ5om1JlxXUfF4ztwEHjP5WWVFtcIus95ILpxs95ts2oKTP_DkHw34I6-PaZYh9TQeQX2hkrET8dXlcam2GbXDlyzyUU_pjD8_6LJYg9JKAn9OPihh_NR9UXwqhgBIxdRMrUsvlAg03t03rnO26o-Ni_2FRBC3Hjo2-xxDnws9XnxwuZSMdd_aZNF5tcOaiVSKrj7fbBLsIFy0gbA_S24iBPBMeGyqwdRef8k442NxQXpjSuri9MEMXg8WDfsRT4Yig6B39EcZAf_rqCxqD7_8hxBusb6MN8WxJnPR-iTQoV_lzcIxlf7tsVe3XKbB_-bSUsRhw5MrlsCkRo3fQBlyb_LzgxgG2f09jZ_lPZuXtuvC4SNqZWlPpb75nFzsHoWLlVqN5rXxJ7Yoop7HkhFS97GODbCkKCqVs3KKYN4ibXWAuZ3EJEPKfA7AX1zRRJ_dOSWXsls9N1VLPK0YTksUTanqaWCtSdoz1ssCBWjJHgO8ZzvlSBICk4q5Ar3tzSpk7pYFM51IYMXpHk4G7Re-YubDxpIViPdaySO6cznEczAv8hzPyHJgK2hXOCuS_RhM_p4YehVS62O8e2XclaqVoh8SqMJEDB-itnPUG0kiBOyh52ziHyxuo5Gll5RgjgMQigKV0yINJWZju1YAohcTCyp4yEUKdu3Oeb_cFBvQ&sai=AMfl-YRnWBs8Xj2SY9Bi6jw57HDN1sIlaOSelFNhlykkMEZKK_XNnyapET6FJ-SWo58eaEWY4SjTBXTlu__k98M0jfRRpZHIgP8U8rQhz49oyBvIT_2_gLyLh2K3A58vWWiVBM7yLAEz2pG7-rnwP6jLpsC4OC6XhzFgq0dvewwv9UBHi3v5rumTv-iMevZe1QduN7PJYprMpYnKHnBayBQrMmusd4yjO7ftUMyYi-BA_PVRk_ib6metgUNJX75HddAh_NtQmgaUY2iYZUrwz3UTYR4q3P7ZxWXw9UsR15aXMjsrsQyRiexEaC-qAHFnsQw8oNUAs-jy6gHG5l0br7CcFDqMrnf5D9aS8ZffdmxxYyXBHyNu11p81rqt4HBjGhaDvxcm1Crlzn7gzbuglpaFlLGADHKKwLaw5K7LhCu0PjQjfJJJ&sig=Cg0ArKJSzHX962jwvZ8oEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly93c2ouY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2792&vt=11&dtpt=2790&dett=2&cstd=0&cisv=r20241205.84007&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;navigation-source, not-triggerReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCy
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v103.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-AUEgyA_Sss1Uu1TgBySXtVgHFL5J5traaVxQpRWrVEJkKloqBxIj4ZGJPPENvUec8lGUl7aAjdtcY1qJsNcXvN_TdcforqV7max7OFda6r3a7Ro0GLJioENKzK__mC_rVCbRF3jhJ0Ugo0Z8B4r49D5RXpZ2JKmjCoFpR4xExQQ8brf_ld_xSQFyo2ox_AZv4ghTXbF5eggjqRY_3Mk8dO1uhOXMFzJarXTS693QYX6xlSBtk&cry=1&dbm_d=AKAmf-BjT_SJ1rePRZwIwtLZjOVTfBSd7xaAsxIyWgUBNeZfunBAt-iF2jYEqNLQAYc2rdhqZhD_oFP7ENCBbNiMhTW2LrVTe1x0VSDQDSL0s5mGEbzJPqL8aYpbN3ghnMdR0sCbXVDTbQ7uWMaNMtdJUizthvS-Nzrfyms9bgxRvtZWOXkYLFTap1F9T98q9fWd4wCgWnR7Am_6-Ab9iMfTGvAQRu-ZGW2zFKEO8UMw5Kx9YHXCRm3u_bfzkA9bl_wLNt0CNJKDfp4nmIbLHx4Jjvie50cIibPLmgXkBx6XeWOzSPBLhZAvA2Vf1DqI2psJn6Eo0OLoiPzXFgXNfRZGbZajdFQxznCEJO0dy739A6oHRFWj_y3hSmuWX_p5iibI59Ly8zo3t76AmBoAIP_pDpFA_56bp5C9Clnj89MIYUp7vMoIuVh20eS31LDdO7zv3NVc0ZS5GnDEl0vrPw0LOKpFiJZz42m7Zaqv4ty8SdpOgrEKvtRqMOkupdgimSZWkzSMBxaekqWxQnKANRhE14T3hJAHllta2C6Z-eo83qMeT3VaAqWq-XIXue10nmTuvBWQGAuHGMQIHcTo-i6LjPQo4G8Joc3i7NJB4y_Hkco4FLeBFYERHGgKCa4D9JXmfPcVM7u0t-tQ-zxkXXqcI_uAG-uRpFtaI4JS5yMUQlKf0R_5ZU4-c66aIRYUbi81--b0W5ipc112qHEPrASTGAj89ClJictpiIracdlnYoph4x8Ly-VqFzGyjpNpTQeoHBL_3DyncsQyjFK4OGsi0dyj57dsGMm7GU0wGYeGDuiMlzuP1Ravf3bTsPgwNd58BWAtiQdNYP8KyNOCG3Z-DICEgxM239sR0Afxxzg4_ZcB4mnUsYJIo-gsQtkk2bRE6O9rlhObDD5hpiJD2rZB9KALkQSQEpAHBILZOITSOCAL6ARWeCYNo9iyjTHLB_dZpYK8jHPV6TvN2sZ4Way9G_2lLxHdFGPw-oSHcmmabq0VJ52W0IFI3c3W1sJtpIVX6O7Fu-WxERJmnwp1VvM9YMPnDksa5Bmq5FnXzm0iisRIrYKUCnJ4O5zp-akpMlVBX1X_iTX4WOzKm4BEGfzrVqA01NcSTQPIGSpt2KFKwlMaBHtPTKpqp4x6X0F7XA7-CyQaB_6RwhZ5vaQAXTXFKgQHR8sNML35DzYJ_R31uGR705-HqOfE41WJSrOIm-Wr7UTkU274ghx6mozQ49gUevUVF2hb2eaQnrbspSalBocyzd7gTtv7gmmhKeqO0w5FiL6QDB8yapjujClsoI2q4-dloLd9gkAzxd5RotCzdkmppJSjG9S5iGL4Wi1KleyAkEUorWbDSSegRHeKDzOCHvSpS9Sf1te3Lbq4nX1vwrDfxYObGdhAqXru6LpJ_BRrvweQrAOuvqykzLMVcdyKL4eRlm2WTxoYU64T06QRc3FmptcdU1xKBNQvywjaKaCJUjmvNXWc7MS_cJRtCBLdaDeGWgTMUpNoTzaYRpPAxvZw5drencnyr0zlDGLZkkqdRJh0TomFLkS5Vr-s_dO6WZ3RwMnFqDeXSg-_OokYFDoG4CEzktVKZtkzu-5gQSEJSv4gi6bjGTMTRG_3Cx6jwu6brETCowPp0VbxcLcCY4-wGUSFdojyj6G8QKMr6LeNrs5RIrcJWNJdA8wy3LRbaGpPercE1z0H1ZPWfDBT4KYZ2uz0ZEUPimqIuCHdGktBCJZlwcjl5se1dfbM3vyYc-7-KVA5qjjX1V5lu-Rm5sjl7pm57ltqExE-qCoxuyQYQJdyz3vDQEPVIOP3E2PISRtMl_YpE3nbbn1R5arD5Ki7iYbYKuNWmqYzKdq2bYtaZXkY6pBMDp3axCKeKdg7ZcB_ZsJ4RVx6tzlubaDfP6GhgC_YtNzO7GqfqAZuMonHfxK-xBmWtny4-_n8nB5-ji2dN8YV1HZoA5IBH_3q339vX8yZHKCzWe7cQJXhZH6QBQOAuspLcxC4Kjp_VGtnb18icSnD_GWJ36gve_NUKI_t_nmXH4JhDM36-tb6ZhGhrkZZa4La1vr0AUalwOiBvFNJm9Z3w58UyEUdTsacP1O6N-Ptf1Gay16OvpOlXTvQ0J462w3j7oNllxenYnHQrQq4OMrB5owevlDZBN3iDbZULfBKS5suOeAG_eIq0UDlqzaPSTcxw420i-TpIgMFIktCyFsamgCVFiZShG6cCfCKW0kCB1VnLC29y2Yh_GmKlCtBcPgQIVVcNWCxwkG_03CRySqbVL_Kh80T5kIGpbxuHQWS4fxOGO-jaRDSvg9eNVo3Ka6H-xQ-ZKYDCmaVNoG3Wp-WlCPqnF9WOlQdhx-m_ccJApBlQtVWdcP_pDNXR7LDGgupTZQOw2tmK66PzjmzSI4hMb0Fbmz3fk9_fh22HlmE-h-mDhDe78sdAv2QHqWWO-txl-2YylgofPFCscOaMis3iO7IaQ9B5KAj4pIYLW4y1n5yxHIKGMkP_T66DxsAWT5wJmEjhzGowyELKoNwcZJzM7G3ZlYZ5D7OUGr8_b-2zKHomKd4EhSa5dEq2lRqwfo-VDASrtG4Oi5AvD35ChkIGfxyNUMaYUm0nMuVpPwH3rZOjqfJ7TUOGCoal_x3CqFJJ3xEslePuCl61pMA_aE0ZLds6EKh7mpl4EryTDVi8N_pPk2uU2CSRqXdQbuPpMXOkGss_nURaSDARqz3olhko6
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSJVtxsEBjenWZY09JBi7pI5-ljXSWytq0RzRC9rE-l5sPo1hVL3CJ8KgsvZP1GOK8bEMVTyoQxklSmrK0nwb7GK-Vvew HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /simgad/17489467864391934481?sqp=uqWu0g0ICPoBEKwCQGQ&rs=AOga4qlk3o5v-ImXl8o4CcATd_f-DPcAsA HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsudpx28gO1C-F3gobRoocpe3L0ro5EBxRzZfRocLaK9njUnEsy_y27kG8a8pI2L33raToO5ddLwqIKSKLcWPOV_MVub2uLhkpQxuDGM_YXt4BhPSfjxfwBkrBIeBOcFu-zNPCROqAE-n5g16ruOWFgOKfo5bGaST_Vl3T6eQQ_mkV_Metw8wVyFJSH9FGoPO6gdpibJxaHfNR_zcLUCGEO7ZqOt-zPzuW_Zkcm9U4rx66Hi8yblYNWLgSvEskkD8PaWOYPjU0TATKMBeK6-jdo1lSOu8JykutGOiY8vGldmlXurZyqyKh2ZNdwNC8NmY0QF-QLQJR6prq5A5pJNcBy__oGxbdgmfbgVPOZA2AUw1Smob4bgSSTmZbb7YiGjWuEX2YHX4-ADWzRQ6uvZ_Cn24jjuHuzA7mXXNNpoJr2CoDl1lNk6ORMD-8nvVwmVtppvageM0sIPLIsLYW7ZyPtIF3uqAsOWZC-Y5cIzo2foQ3MjcTm7-IjE5zriIFaVzt0ZrF5JGtzHBblKCMm4QDTCzLer_fHLB5fzJakjAljOiN5lg4gWciB6k2QmoiT_I8OiuZqm_YIxnHZYByOUXK7GZnxCVvQfElZywMc5DL5Wz-54XEfQayjOSug0ku2cxX3t_E6O_Blu03XaZbj4LEs5tc7te_3zqW2r_VytVaiBxsOOxZ5om1JlxXUfF4ztwEHjP5WWVFtcIus95ILpxs95ts2oKTP_DkHw34I6-PaZYh9TQeQX2hkrET8dXlcam2GbXDlyzyUU_pjD8_6LJYg9JKAn9OPihh_NR9UXwqhgBIxdRMrUsvlAg03t03rnO26o-Ni_2FRBC3Hjo2-xxDnws9XnxwuZSMdd_aZNF5tcOaiVSKrj7fbBLsIFy0gbA_S24iBPBMeGyqwdRef8k442NxQXpjSuri9MEMXg8WDfsRT4Yig6B39EcZAf_rqCxqD7_8hxBusb6MN8WxJnPR-iTQoV_lzcIxlf7tsVe3XKbB_-bSUsRhw5MrlsCkRo3fQBlyb_LzgxgG2f09jZ_lPZuXtuvC4SNqZWlPpb75nFzsHoWLlVqN5rXxJ7Yoop7HkhFS97GODbCkKCqVs3KKYN4ibXWAuZ3EJEPKfA7AX1zRRJ_dOSWXsls9N1VLPK0YTksUTanqaWCtSdoz1ssCBWjJHgO8ZzvlSBICk4q5Ar3tzSpk7pYFM51IYMXpHk4G7Re-YubDxpIViPdaySO6cznEczAv8hzPyHJgK2hXOCuS_RhM_p4YehVS62O8e2XclaqVoh8SqMJEDB-itnPUG0kiBOyh52ziHyxuo5Gll5RgjgMQigKV0yINJWZju1YAohcTCyp4yEUKdu3Oeb_cFBvQ&sai=AMfl-YRnWBs8Xj2SY9Bi6jw57HDN1sIlaOSelFNhlykkMEZKK_XNnyapET6FJ-SWo58eaEWY4SjTBXTlu__k98M0jfRRpZHIgP8U8rQhz49oyBvIT_2_gLyLh2K3A58vWWiVBM7yLAEz2pG7-rnwP6jLpsC4OC6XhzFgq0dvewwv9UBHi3v5rumTv-iMevZe1QduN7PJYprMpYnKHnBayBQrMmusd4yjO7ftUMyYi-BA_PVRk_ib6metgUNJX75HddAh_NtQmgaUY2iYZUrwz3UTYR4q3P7ZxWXw9UsR15aXMjsrsQyRiexEaC-qAHFnsQw8oNUAs-jy6gHG5l0br7CcFDqMrnf5D9aS8ZffdmxxYyXBHyNu11p81rqt4HBjGhaDvxcm1Crlzn7gzbuglpaFlLGADHKKwLaw5K7LhCu0PjQjfJJJ&sig=Cg0ArKJSzHX962jwvZ8oEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly93c2ouY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241205.84007&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEAucPc0n90JY6KGIBH5wU3E%26google_cver%3D1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=Y7hTAPrn2ELIQ6YJbzrkE4hENPh7UtHMQuhi-eizxunHsAjuUNMaSAdcME5MTykXIu71tvWzXWJFYOk3V54OaErFvVyN1td8cViT5Y_zOCU.; uuid2=3306488306757890960
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbm/clk?sa=L&ai=CNReRTEBYZ7m_IenFmLAPupG2yQ2vhKWgecPlv7O8E5Peg4vvQxABILmdyQ9gyQagAZvW090pyAEJqAMBqgTfAU_QWaI6AlJ3XzB7VKh8PJxS79kKHbVpynr754lS0Y8Bi9-3RSUJrfD95D1x231m2FZgJ3VNYl01AvWnyDmc1tPecR4vduXHEqaiPO6uacxaHoOw_FDZ7GLRxjfwa_-s7SBqQrwH6sBSK0f7krGEbW8AvEp-dydSKBnESFxFI0sJlXq_e9SJ5ZaFTs_5xemkjhwFYrX6qyVPev9YjijlF8iyVpA17KU6Jo3uCTzj7nZbzftOSbtRUV4QZFlALdRjOXM06xOOi6pFQacuoWVjhiYQdcUuWuNQTW9TaXk_cdPABLukh6rmBOAEA4gFm5ekjFCQBgGgBi6AB5uOpL0EqAfVyRuoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WLX4_9ilnYoDgAoBmAsByAsBgAwBqg0CVVOwE9-KsRq4E-QD2BMNiBQB2BQB0BUBmBYB-BYBgBcBshcCGAKyGAkSArtPGC4iAQA&ae=1&num=1&cid=CAQSOwCa7L7dS-YOXk-96uWTT8tWY2TcAGO55FFq5hGnIo9EA9rYFa33ZK3Et4Lp7btte4fg3w_vGhJEiz0XGAE&sig=AOD64_0AXGpWxuecfG-j0LKabeph_xd8wQ&client=ca-pub-5561763581314444&dbm_c=AKAmf-Cl0ywYV_PZuf4GBGN7ib6ZiMM3K_T9Vu49_adTIt2JzV28iwgs2S7QJzD8rgsVcz9T9n77pENYMR6QA8IbMHxYGec-AUqClbaHG9A5Nw3vJiszqEKqiN83jo7rbuLMEwseeEt3S1SyaQ_aJpCjIbWc_UYugyGeJAPL0vtXWktPQgnTE9mO7efrv44aZOzYvX72gw1pyJaqmVthaTrIcd1pQDK71g&dbm_d=AKAmf-Bdr0VQRc-LJ65SRTZVefbSoNrYI6_JAc9m8MmD16rd8Ijmf01vv2aGUMtN71QRbkM0qubEZzhhOPLUiZLyTCGNc1bOJYdSYwxPpn5vbf6t0ndHzJjAKmU3FBxvQkp5bVOmxiHsx_g5hom28fIXOB08yH6AjU_ZZxThsRWyCTHxvtBLNLmVYHDfcPXckf52il1-8MBOz49u7Pglzf4rs0drQfcafL0ExEwYIzTDLkOULA0nkbRgjcCcdQyurvllEBz5T0GAYQE7mP2JsDb6XWLm29WXKjcg7nlzzD_hetq49S7UPSn2GobR99fyy1k8KcbGrs09v5UI7D-lSpaYzXWjB3j2zg&rf=1&nb=8&nx=999&ny=237&mb=1&nb=8&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&adurl=https://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?cid=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113-0-%ECid&utm_source=DV360&utm_medium=DIS&utm_content=Prospecting&utm_campaign=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113&gclid=EAIaIQobChMIuZWA2aWdigMV6SIGAB26iC3ZEAEYASAAEgJnRfD_BwE HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://googleads.g.doubleclick.net
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b15d8a59-f58c-4441-bec4-2831dcde48e9\|1733836889
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=NDkzMDY4NTAyNDc0Nzc3NzE1Nw%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMPS=1322; CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; CMPRO=483
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMPS=1322; CMID=Z1hAWNHM66QAABZXA6erCwAA; CMPRO=1322
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVLi3OjIL6YVRpVpOH82daPeNkU1wjvm4ZifdEGaqG1CZrC-iGTFl7ZH2MKWKljMmeb7PMWc-dnNsYV0yAMFgXbZ23bZ5MqhK1-3JtAPQQFZSLl9eqCWV3MQc4bibUyBAddF_hJ4w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzMzODM2ODg2LDEwOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuIl0sImh0dHBzOi8vdC5seS8iLG51bGwsW1s4LCJ4OEtKRXFOb1BXSSJdLFs5LCJlbi1VUyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/sodar?id=sodar2&v=232&t=2&li=gda_r20241205&jk=2276850004632465&bg=!BQalBknNAAbFeMsx5Xg7ADQBe5WfOD2J0DfeE_kpNaJLBubDbyp_JHxEIydZ_h6hcFIIAzn5EpVJE3rAt111EmhBsJUDAgAAAzFSAAAABmgBB34ANqZMyRnaBCEUAe350vR_2nOWXJNDSRSCvr5YuzHioS-RmMgvqT612mWljAbEk6hJ3FFei5U2qQoAiuEiqXxNSqulAuLHsphQKF9uX8iFigtqLDmsyaFVePbJS6pHb7KxnCioNdu1z5Gi3KL8beSaPZfWAUGTD7Zk1CJyHV-Upi7peMw5RR7ovt7MRch31KTjHLWFVP6nUq4M5RnD7oddC3_02UBeuQ4dMMKTyZxjgH55BapG6_rRtDKaqJ9hrl1vFoWk75kCd4FlPbDfOAcXmeFtTxPlZoPzAISFoQDshJq_0YpHa4523UV4eV_6LNmX_j4zepSPeL5mpIMvk1ClRhIHb9fncEVk5Mo35ai5puwuX5FgS1S3QWKBthO3nv2iKoQN3e4pdy3gtb7Jiaw9JK5M6h3nLwcNaFlq2U5Hs347PWmWxZaIygbOiK-Uyh5K1EcxjQHGlgxKmGmNexuA0wNSel905oeynUTIHmhmQVmZRAjOUzspAsfALvccSFRgsckjZ8BvsBXYHZaitsIv9EJhiXR_1dxPejwCVEkX8t_3TKya08P6KVbhbiCougesDfZBjGXHAhozU7Waq0Bevoi7XJJ6zqmyQpvHZP2U7MSowDctiDeQFUAYP_vxWKeV3ILX15MF1HYQ-faE9oFpYy9PJmPP0c_VoEb0qiXtHGErstNYNLvEhV8Akax6DMhJx52Mu0xwkZciZhJW3LbOuG9LmyhqHoDWwzxR2cIGOo4Z2caDaxvoeHZOIp4S9KJwCj0F_jH4IupI1pVv4Pm7L6tTY45MD0wj6tn68aNG4Iu_VeItldj0J32iCpRZpxGsM9bVcVSo22caC5cZYTJZx6clZtX7l2qqWUsyKcSWO2FNUSFYlCe8y4Iicl5TcvRF57ix2ZfRIhqFduIp3zMAldluqg-8zW2qvq69jeOweKXA2Ix3S9_JcO0H-KiDU2t6-izndd51WNN1S5kgZgVMBmTvdobjuVX4Jgs3RWRoQBd1CkBLUXsF6fJ4eEreE5ztc1OYEUFFU6BSOW4aisezULgO0DUM3frIVgjInMLF4z1fQim_KpEyPJHNZp0RnhCPxqW-ybfouqD5mWKOrM0 HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NGU5ZTY2Y2EtOTU3Yy0yNTEyLWYxZjItYmE2MDcyMWJiNTc0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-AayAvaTe3fzhj33RFvp441GKpdS15hyl5_uhK4wF_f0ucLRwkbKOwLFZJA4lIA7O1hyjUzl2ttwXwUj7VuEgVp9JCo5INfeIRLTmyvK4_mUY_qliNzUgdze7L_aEt7sdCZLQUg15WjiFtVegW6XHSSkzYQuiJeLR9Sf--oXyzX6mjFv3UaqFfDPFwT3OKZxr5bnx8yJm8_mldSZR9y70IsXGKFrQ&dbm_d=AKAmf-D0wKsFF8bQI1KYDUJw3ZFs6exo_TNSnp9fNbQGzKJhmjHGOep3Ioftv25MVK-pWeUPYza2Bm291q-FeLm5nNARJxeLPxQt1-HxmTG537qI7UP2IiGF51SI6ikLcrR1VtSMRa1XsWvUUxdtQD8UAVNIGKGPA5GHb1oeQBvgtWITFkxWJNkRq0JGTsB9uzZyA_CrnyT-BH9Ll8OlcE8l0RMg_1zouuz2D6KrrfRCK4nEy8oglelPO2-e8zJez4SioZRqRA8b89ukWQNBDKd71gi9Z3KpAlZTeupASswamWc3b764XeS5gA31UZg63zhXhyXyno06E3M1IZ0Q2T600i-OwmHtPovi8CBwn-zDwnljcGVjHXG2HZyb1i3cpb-ikqW2M2ygfFd1unSq9M1jEXAXbmBuKiZtZahldUBXQKYzKy0CGB66VNwyHNfdQQEFXnMMAEU1-QS0w5O9xvkmzi15J0edNLL7cR5C_wCB3fq6wVLV_jGY7WGliaKEYVYL7blgaTnVbflA30C8q_IvO0nb5qaV1JqdLj2CSMHEpspdbwfMcvBnxi9u23Fhz1Orw9P_OqphFenA8FZlJPsVVK6cv7eTFVPTeoxKfesbzYuVlaXfE90XE4T8pjny2G5cqhvtpRT3j45yccldKbqANaLLik8SgaY4BYikOfqinvdtjmNOyYmkD4VpbCdZM4MBv5FX99kMMB1qBdHUdXvna4GNZCGOoBliLjP_D2jNrnxEm9JN08yxYiRiyGIbFrqAGkLLytDB7TWKDy5cbIuvb5Nz02GCtSuJ28lnNfZi03ZygYz8qz8Try7t2DH765jjdBhImh_9vHy19IeYB0zL7FBKAkjarUjVPfGICDfWm4G5lZMPYhAXiL002OvQhhTvN3utDQ9WFkwEQk8K5U0ufQ6yLoCy8pxxi4e4tKlGfJCBwxkE8TI1EyWLDuc1lAHCoxZzXT_uXo_wezPHLmvQQ1ydeEoSuJI4_Bx1g7IObNsnPJUXan2TsJ0j8K0HP2F9a8XQo4coi4AZDsA9YOrl8r4pvUUX9ii6QZsgcBc11QActUemdPKLcJ6j5CQ0uKoPtU81_65LVsQNRuZN77NfUvDjuOgOSd-exx-raTrT6jPIg0QeSbxLtzDCE8qBepS0rMdUlP2z_cHa1JHFIH313hMdnFie99q2msJV_Vi2h9HklCxvDHDfv8AbI-Ou_cFib96CB-WFgM3ys4nmTznS58XASV8Spvm9sZL8U9PNtNGQhVi9m2Ns1_6fyNOdAT42uzVZ8SSQSvpj7MyNfJG_l9DF8TIWvBvcmnsmE0vA8cYHo6zpSBnvBXOcbcHZO27BC4XwORXDWRMkDcHoFGMfj6dE2VR_wZvRuWEZCnDDLohXiIHL3axP-0Tu747n1-W47XlbmoGK_5kVDuH3DrEGtQlGZJTpiPl56usAfDnDpD3fpa2vxFTW1MJhOHGvPfg3i39svb32Dz_VYEQFxCgsiaL_nRX_3NIbKpRHfdpv1N_zAFm84ndtgZ9pLqNcdNDv04jMhmZWPjLzag_AcfMtHkucndW0WcIY3fFpNvW9JoyyOkRSzoAByA6JIaKgwmGe0dYgj-bChoip-jw-9gOe7-7GjSIBrpIMyZhMMx0ZzCyY8e1LVoFbEnlAOKV_D0Z2T0WvF8WSKyS0XI3b-R17l9rMJw6Trv6mlSRptu2VbuVzba5C35V-n5w4QF4GkHtFB6DgAKpkiwcqHEvRsp62AZ7tJ5ud7utsgvZpidpP8WqxxWXGo6OpVVnC6EdaZ9WxDiwbmyvBo9_UrbOjkq_XCZ60kduPB0_gkaBdeqV3eafoscUPMgt_IZu27EcwklUO6GJyPzEHKZt3ZviMw5kPr81oBOuRbrUocgsZMyMjCTE5qCQREtVE_WdURiL83J_9wECw9qS1wCcfeTK6Il7_8kV7jziXR8-Lblglwnj6pafgbUZuW550yiD1gCBY2v_bTpM4TDi--881n3XLMJjCV0oLjmseCZv1FcPOMfHyImi74Z2CUWhEtgYMRPsnHGwbESV80fDOCJxxTN5rAo1_Awl4qNIxpMF18rw2qQW3JL1HRvAPJk8zWGt1j78PRIF_c5t7RTTSTA3vzRrVpkKLBCLwymUa_CGPRSaifCn-PdwyqG7oWkxbE0sksBei4--Lkpz6hS9omHB5DOW92z0qoQw2vjPhRjL3_IknSz7s40Gc84BPgtrWddJy6lYlDKRI3E3znrhGq3cq2A1euBKHqKcvv1SQP3MSmeanwGJsBaJAJeez3JU8ihHut6L93kYQhqmJ7RshZ3OChLktQqo9BuieFh7vJPEfrX869fE3uA-d7BR2IU8jOqkXmgEnhPdJOQQyj0nGGr3h5cdTM1Zg1iR0ju1d6PeVXw82d4yOnQTceAXAa4_LjXfsnFFkCsY2g3Kg673VnOmY92fqYihF6z7pfIUEO7XXaHECEBSLDIo3YxnQDEzEFkiE7P5kpnT0_L3J4aWuKidkyJ8f5NrD8tvAwMP5cxDK3NKOxYq9ErjAt5_cWMv5djm6dDlfjnedgvIpQZgfHsmG7P2JtZ2U3WecqTxEbLOuoSo3uiTwkoIfcNfXeVQaN_IiGZJ_TjgruuYCcgHDxPyLQBl0Yc3rnR0zuisURO0dqNMLO2KOzgrhiXyVecUTzei2iQmX3JczJUYUsokAdpInMn4_johHyq3dgRz1-Bff2O3bIJ1DzlcQfirRr37trEMLV
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13LG2A0rG2_exmqrkYkTdQlWNOxs8U4cv_Bj5cHKXmhBuEbx9Z7BvT4tXyiU1fXkaGLMDUS5aw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=NjUzMzk3NjM4NjkwMzYzODU1&google_push=AXcoOmTHioI32_aOfS8-flcAxONWjS7eFWDfJEDvvr4P28yztt3x0fQZ5xgAJAwea5cg8pag7TNGbT3W5XE-F6qnq6CsUvG-bx7u8g HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=f446cf2f-ade2-472a-87e5-bc41c2514140\|1733836890
Source: global traffic	HTTP traffic detected: GET /ju/cs/google?google_gid=CAESECFcl9Vev1dErg-ZjBNH1c8&google_cver=1&google_push=AXcoOmTY772ALm93a0DVVyKpboW2PzfqMPKY1LWuwxXOdYpcD29P14mSGt0GY6LZqynwLUmPVxvsRmG40_1Oj2DmAteHEuUQfTx5sFH7Dw HTTP/1.1Host: gtrace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __mguid_=22210ca7d02b196e2njvxb00m4ihpoje
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsudpx28gO1C-F3gobRoocpe3L0ro5EBxRzZfRocLaK9njUnEsy_y27kG8a8pI2L33raToO5ddLwqIKSKLcWPOV_MVub2uLhkpQxuDGM_YXt4BhPSfjxfwBkrBIeBOcFu-zNPCROqAE-n5g16ruOWFgOKfo5bGaST_Vl3T6eQQ_mkV_Metw8wVyFJSH9FGoPO6gdpibJxaHfNR_zcLUCGEO7ZqOt-zPzuW_Zkcm9U4rx66Hi8yblYNWLgSvEskkD8PaWOYPjU0TATKMBeK6-jdo1lSOu8JykutGOiY8vGldmlXurZyqyKh2ZNdwNC8NmY0QF-QLQJR6prq5A5pJNcBy__oGxbdgmfbgVPOZA2AUw1Smob4bgSSTmZbb7YiGjWuEX2YHX4-ADWzRQ6uvZ_Cn24jjuHuzA7mXXNNpoJr2CoDl1lNk6ORMD-8nvVwmVtppvageM0sIPLIsLYW7ZyPtIF3uqAsOWZC-Y5cIzo2foQ3MjcTm7-IjE5zriIFaVzt0ZrF5JGtzHBblKCMm4QDTCzLer_fHLB5fzJakjAljOiN5lg4gWciB6k2QmoiT_I8OiuZqm_YIxnHZYByOUXK7GZnxCVvQfElZywMc5DL5Wz-54XEfQayjOSug0ku2cxX3t_E6O_Blu03XaZbj4LEs5tc7te_3zqW2r_VytVaiBxsOOxZ5om1JlxXUfF4ztwEHjP5WWVFtcIus95ILpxs95ts2oKTP_DkHw34I6-PaZYh9TQeQX2hkrET8dXlcam2GbXDlyzyUU_pjD8_6LJYg9JKAn9OPihh_NR9UXwqhgBIxdRMrUsvlAg03t03rnO26o-Ni_2FRBC3Hjo2-xxDnws9XnxwuZSMdd_aZNF5tcOaiVSKrj7fbBLsIFy0gbA_S24iBPBMeGyqwdRef8k442NxQXpjSuri9MEMXg8WDfsRT4Yig6B39EcZAf_rqCxqD7_8hxBusb6MN8WxJnPR-iTQoV_lzcIxlf7tsVe3XKbB_-bSUsRhw5MrlsCkRo3fQBlyb_LzgxgG2f09jZ_lPZuXtuvC4SNqZWlPpb75nFzsHoWLlVqN5rXxJ7Yoop7HkhFS97GODbCkKCqVs3KKYN4ibXWAuZ3EJEPKfA7AX1zRRJ_dOSWXsls9N1VLPK0YTksUTanqaWCtSdoz1ssCBWjJHgO8ZzvlSBICk4q5Ar3tzSpk7pYFM51IYMXpHk4G7Re-YubDxpIViPdaySO6cznEczAv8hzPyHJgK2hXOCuS_RhM_p4YehVS62O8e2XclaqVoh8SqMJEDB-itnPUG0kiBOyh52ziHyxuo5Gll5RgjgMQigKV0yINJWZju1YAohcTCyp4yEUKdu3Oeb_cFBvQ&sai=AMfl-YRnWBs8Xj2SY9Bi6jw57HDN1sIlaOSelFNhlykkMEZKK_XNnyapET6FJ-SWo58eaEWY4SjTBXTlu__k98M0jfRRpZHIgP8U8rQhz49oyBvIT_2_gLyLh2K3A58vWWiVBM7yLAEz2pG7-rnwP6jLpsC4OC6XhzFgq0dvewwv9UBHi3v5rumTv-iMevZe1QduN7PJYprMpYnKHnBayBQrMmusd4yjO7ftUMyYi-BA_PVRk_ib6metgUNJX75HddAh_NtQmgaUY2iYZUrwz3UTYR4q3P7ZxWXw9UsR15aXMjsrsQyRiexEaC-qAHFnsQw8oNUAs-jy6gHG5l0br7CcFDqMrnf5D9aS8ZffdmxxYyXBHyNu11p81rqt4HBjGhaDvxcm1Crlzn7gzbuglpaFlLGADHKKwLaw5K7LhCu0PjQjfJJJ&sig=Cg0ArKJSzHX962jwvZ8oEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly93c2ouY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2792&vt=11&dtpt=2790&dett=2&cstd=0&cisv=r20241205.84007&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7t6G2LJzt6x_ZUP46RQGN-2we08hntItSUGv4rvq3BGXdymQ
Source: global traffic	HTTP traffic detected: GET /adxcookie?id=&google_gid=CAESELqoJB2ILVOLH5_tSMp0hks&google_cver=1&google_push=AXcoOmSyvtNEqTIrdP0MB45Eyibq5SJ6jnGCgb8NN9CW02MmVcnqHpXw50WoOSRfQb92IQxqFTbuZRNqpETKm-ohquyLQ36Ox9LFzSw HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __kuid=3e7b9369-0658-4550-b77a-a6f2d90c239b.503050887
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESED34_s-fwhdATnOyfGyMuaQ&google_cver=1&google_push=AXcoOmQN9CbKMl-JBph1LqSNUaztMqzIULXhqVHTO7lkLWDPc360kfnIC0VcKla-gt_CzegXC-kfGOh4Yg8nB36RL-1_RlXYU6Ee_Zis HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AACFsU7OsIEAABcC-2-snQ; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHXluU4MV8k6x_JDzQyB-kc&google_cver=1&google_push=AXcoOmSDU2MlkJW6XxLBLoTwACZkVcK0mQiPYIEd1hBC2R6nTmyyHLVqwG1QX01gs_OUgshi7wBTTqNjV0TvBQNYbuTIMYUmE1ZfarHW HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://cm.g.doubleclick.net/pixel?google_nid=adelphic_mobile&google_gid=CAESEJiTTycozT-BhtecgGINDbQ&google_cver=1&google_push=AXcoOmTr0ZUQS-GAnkyAuLBskHiOG79y5zMUVHHkNTjuduVPysz0fUDIpja75Xv2UMltnximQiHDaW-6QrLXcOUBeXoTObYhfOYFx_c&google_hm=${ADELPHIC_CUID_B64} HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMPS=1322; CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; CMPRO=483
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N5949.4624185PMPRECISION-DV360/B32425113.400711641;dc_ver=103.302;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Ft.ly%2F;dsp_campaignid_0_=1017595187;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0hKuPU0yYoTYh-ZhtyXBFU0;dsp_placementid_0_=21513784982;dsp_publisherid_0_=pub-5561763581314444;dc_adk=1405019980;ord=5zrz5j;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC4Ub0TEBYZ8_OIY-YhcIPj6im0Aaq98ylebbthYaDE2QQASC5nckPYMkGoAGb1tPdKcgBCagDAcgDmwSqBN8BT9DG0duVKtXdQYiUAbjqGP1uclkyLi30HxPQ0fR-MG_YTqjSXHLwOZrgrta8ILi2Yp1S9N8_CZdO_uSDFrlV1WD8MYYZgivpyN2XHeZj60nyZVPHVJTQSLAeCnrG5J0BLswc7Mf4gswFDx8SvcQiszHEGeVAstGOm_deum1EAxRbUM9seCKyundH1zGq71Ry-HD3fLH0lLl49QIzIKrrPm8LcEXErbg5ae_sDLsuHf9NENF-1PH9PMl3hRw-5ynOlgIn3ZMXuO7ESv5dQzOlyHni_rEC-PpJRfxKCeOHPMAE85aznvME4AQDiAWWncmSUJAGAaAGTYAHm46kvQSoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAf4wrECqAf7wrEC2AcA0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpY4fH_2KWdigOACgGYCwHICwGADAGqDQJVU7ATuIq8GtgTDdgUAdAVAfgWAYAXAbIXAhgCshgJEgK7TxhNIgEA%26ae%3D1%26num%3D1%26cid%3DCAQSOwCa7L7du75pWWf1GMmsnF8r36B_4iuH19IJxLQ0701gyxwaFZ9kIBkylWZYkBjpPNMdAXBn3zcZdR9hGAE%26sig%3DAOD64_0ryg_1FPO5wvjLLgKk-5Wx2v_X1A%26client%3Dca-pub-5561763581314444%26dbm_c%3DAKAmf-DeVfsioVc7XmEvK0D2g1mXM6KijrROHyTngA2C8acIMnttADzJuQxD2QzSSpXkGTL6CykMcIUh_hB25f5I3cHfbBGKiluQSDRdYqMokHEk7IONDpF6Ow0n0VEUe869RAgPGgyzL8ni8zSMhWGg_lq6A-aOrelHFUdTF8EY9hPalwf2xdY1S0I7XpIvPSex4Y1B93ILCAj2wONbTp93TtJTmw--MlddfBun1zek4eTv4vrhJHM%26cry%3D1%26dbm_d%3DAKAmf-DsxJ5F3iBT9_LEzOmdiF0uB0set9AN25uWdr6bnIHTf8lHjiU813iz7NckyfhLmJ0RFQhEF4E1MQkBux1vvkdo1iINgNKj6qt6SNcVjvE56Y4QN1puc2yjUvnTBxRNRKopI6580Wc4jjaxX7lIJJXFS9iEo5eMNeQqO-QT3l3EgGux7g_h-M9cIQAQCZ4omhzO8FgSmfZfSOW-pJuair4Q6gRPmCHWLdC19CWzy0h5SABAR4XZpcTD0w1CU_K25HU8NLU0a2MsTvOX7Xo7i1C8X61bhCT9tnJE_guYO9V1jys9wqy_eUIR1LNhPLZ1WNfO5i9v2_JuaOI8ySA38CIrjbkxCqbcT7Jxqup1JtY9xT--1apn5TVPDufTnOdN1oz3KSIhryZnhxBSj0bnKqOy9TwOQO6Urj0jXWQIEU5OJQgmIU4tKD-DabgTh8olUodtqi0Pt-8KfOpC9JWtSbBflddBr9hR3Irxg29phZYm4dPVWnuzBfiimTa8gkoEE3IB0D7KVdEb9l8JNzT-gyScrDlfxUt0NtGaoUhy2XTIwq8NupDKUq3uN1DHPJrCMFNr4Bi6zzOs25VMgasaaLv1bVVLEjt27P0pv3LemkiKgSFzsh_Aw_DAH6zGIxIgNaSTZOG3qXCKfwnKYHJ6MsRLrtiTgA%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.;dc_rfl=2,https%3A%2F%2Ft.ly%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=J7JNF)Ss-k;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=2915;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlK
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEAucPc0n90JY6KGIBH5wU3E%26google_cver%3D1 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anj=dTM7k!M41.D>6NRF']wIg2GUbscB^!@wnfH8K6pQK`!5=E<L5?%Lf4h_b6.SEOS2*5^wm>)Oe_tqoo@X%tvdi1)p%nugO%v4VB%nmcX)r3OZ; uuid2=3306488306757890960
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v103.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/2175/?google_gid=CAESEGjfFYyi3LygSK8Bsp03cbc&google_cver=1&google_push=AXcoOmSR7TM3PGi2RhGlfJJ1_3_kaBGj-w2eJj0gAmMwRtMIjrnrj2Y5sfFvOhhCydBcCUeoW9i1zy7CXCn-7ZDAo8SH90EiU5WuubE HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmSJrFy3UtQJ72UzESzWf4NxDCOosGlxBjqp9SrQd0bqlCXu8Q-p3Wf-rr5RpOlX__osjut54xd85hY0UtgFhSQI3_x79HKInkE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7t6G2LJzt6x_ZUP46RQGN-2we08hntItSUGv4rvq3BGXdymQ; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bt&google_push=AXcoOmQZ9AdKlnbeJTyLIQOgeg_irgSNHpembbXdwR5hZTKgt71EH1K5sVztA2LZNcTwLbpA7hv1EF7GFHEe6T8OoaTYsETXYxkiBIE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=NDkzMDY4NTAyNDc0Nzc3NzE1Nw%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7t6G2LJzt6x_ZUP46RQGN-2we08hntItSUGv4rvq3BGXdymQ; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b15d8a59-f58c-4441-bec4-2831dcde48e9\|1733836889
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmT6jjqhi0BrUuVNWpGVnr43MSt4bBfR9inK9Bh4wxCeM2-kcmSX4Sy4cMsg1OuvLKC9ls-o6x6rIv5BD-6D15OwP3ckElsKUFQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=crimtan&google_push=AXcoOmQyRyNnUHFSVQHWv_-SRaTpyGhjTOUfztvh-5nR1folSWXH0ud88FM0djavSC3GeLbxCM9BcH0Yx8q_eMXgB48YgVJihFMf94Y&google_hm=krkd6CXtS5yGRgZY0Cwu368 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESEDsEhJC4yk_LUJ14xvLuCJs&google_push=AXcoOmQ_gQ37xYL2nmXRiB-XBdJ-cVb5KYWWseVMkhnc7ODCaCpAvXjdF1CoyRZk0T8qWXEv6A4dxKXXpeBpy0u8urj58Qz9eM20r-0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=admaster&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0&google_hm=22210ca7aca1932b2gdr4400m4ihpsjo HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NGU5ZTY2Y2EtOTU3Yy0yNTEyLWYxZjItYmE2MDcyMWJiNTc0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=NjUzMzk3NjM4NjkwMzYzODU1&google_push=AXcoOmTHioI32_aOfS8-flcAxONWjS7eFWDfJEDvvr4P28yztt3x0fQZ5xgAJAwea5cg8pag7TNGbT3W5XE-F6qnq6CsUvG-bx7u8g HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHXluU4MV8k6x_JDzQyB-kc&google_cver=1&google_push=AXcoOmSDU2MlkJW6XxLBLoTwACZkVcK0mQiPYIEd1hBC2R6nTmyyHLVqwG1QX01gs_OUgshi7wBTTqNjV0TvBQNYbuTIMYUmE1ZfarHW&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=xxqkPP9lBQ3g8jjdKhSv_1733836893010; ts=1733836893
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVWmBNTr1QDG5ZtyzQPkfFHDuKbGHHprpNqlLA4FHPcSquaUrSbiFXvd9Tunj4MmOV8YBPpq-zZ2Rs1T0XywjCOyUUhNKQhZwqhoyn4E454Q_IT6QuMkhCuD6iee__UzuvthTxHFRoePLfyL2NK-q8XaOB1xQYah5Nd79yhlv-g1yqH8edMyRdR20Z5/_/adMarketplace./common/ad_.php?zoneid=/dynamicvideoad?_js_ads/ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://t.ly/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z&google_hm=_lmaziMuRMytCK-uQRAFjw==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13K5zd5tC72rYU6Cuob5vDTzCZwFmbJRADoT9TNXSgJ-uVdogPLeNxJ7IH4kKMRCoAWSbOxU32Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA
Source: global traffic	HTTP traffic detected: GET /simgad/17404902169808334130 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuG3lVSgMEpuf0F1py0zdTsmo2gRNUmp3X674TNTvkxVW7b_gCerQ0DVkvD_0YiQg5jXQp6cGKf2yd2W9oJHMxa2XRfK1tWIQK4ePk5GHpy99qlInMGLvMs6XfO8y0bHOktnmolgFvgBoxVjH3Ob8ly6zxGLPwJm7zS-lvoBxzchgLnOH84DluJQ2C7NwVVnXk&sai=AMfl-YTvl9EhU_FTfuvq02mqMMQEjZxeBRld69m8HRifiUvka2_kctRiSnXJfzoS2-0ldFfOqgTvX5uqSufkbE_xcbQDXCjPAXw_xss&sig=Cg0ArKJSzCnHfXym8Z19EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9qYXJlZC5jb20&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241205.12645&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;navigation-source;triggerReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /rjss/st/2169889/81613668/skeleton.js?bundleId=${BUNDLE_ID}&ias_dspID=3&ias_campId=1017595187&ias_pubId=pub-5561763581314444&ias_chanId=1&ias_placementId=21513784982&bidurl=https%3A%2F%2Ft.ly%2F&ias_dealId=&ias_xappb=&adsafe_par&ias_impId=v4~~ABAjH0hKuPU0yYoTYh-ZhtyXBFU0 HTTP/1.1Host: fw.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmSJrFy3UtQJ72UzESzWf4NxDCOosGlxBjqp9SrQd0bqlCXu8Q-p3Wf-rr5RpOlX__osjut54xd85hY0UtgFhSQI3_x79HKInkE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N5949.4624185PMPRECISION-DV360/B32425113.400711641;dc_ver=103.302;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Ft.ly%2F;dsp_campaignid_0_=1017595187;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0hKuPU0yYoTYh-ZhtyXBFU0;dsp_placementid_0_=21513784982;dsp_publisherid_0_=pub-5561763581314444;dc_adk=1405019980;ord=5zrz5j;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC4Ub0TEBYZ8_OIY-YhcIPj6im0Aaq98ylebbthYaDE2QQASC5nckPYMkGoAGb1tPdKcgBCagDAcgDmwSqBN8BT9DG0duVKtXdQYiUAbjqGP1uclkyLi30HxPQ0fR-MG_YTqjSXHLwOZrgrta8ILi2Yp1S9N8_CZdO_uSDFrlV1WD8MYYZgivpyN2XHeZj60nyZVPHVJTQSLAeCnrG5J0BLswc7Mf4gswFDx8SvcQiszHEGeVAstGOm_deum1EAxRbUM9seCKyundH1zGq71Ry-HD3fLH0lLl49QIzIKrrPm8LcEXErbg5ae_sDLsuHf9NENF-1PH9PMl3hRw-5ynOlgIn3ZMXuO7ESv5dQzOlyHni_rEC-PpJRfxKCeOHPMAE85aznvME4AQDiAWWncmSUJAGAaAGTYAHm46kvQSoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAf4wrECqAf7wrEC2AcA0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpY4fH_2KWdigOACgGYCwHICwGADAGqDQJVU7ATuIq8GtgTDdgUAdAVAfgWAYAXAbIXAhgCshgJEgK7TxhNIgEA%26ae%3D1%26num%3D1%26cid%3DCAQSOwCa7L7du75pWWf1GMmsnF8r36B_4iuH19IJxLQ0701gyxwaFZ9kIBkylWZYkBjpPNMdAXBn3zcZdR9hGAE%26sig%3DAOD64_0ryg_1FPO5wvjLLgKk-5Wx2v_X1A%26client%3Dca-pub-5561763581314444%26dbm_c%3DAKAmf-DeVfsioVc7XmEvK0D2g1mXM6KijrROHyTngA2C8acIMnttADzJuQxD2QzSSpXkGTL6CykMcIUh_hB25f5I3cHfbBGKiluQSDRdYqMokHEk7IONDpF6Ow0n0VEUe869RAgPGgyzL8ni8zSMhWGg_lq6A-aOrelHFUdTF8EY9hPalwf2xdY1S0I7XpIvPSex4Y1B93ILCAj2wONbTp93TtJTmw--MlddfBun1zek4eTv4vrhJHM%26cry%3D1%26dbm_d%3DAKAmf-DsxJ5F3iBT9_LEzOmdiF0uB0set9AN25uWdr6bnIHTf8lHjiU813iz7NckyfhLmJ0RFQhEF4E1MQkBux1vvkdo1iINgNKj6qt6SNcVjvE56Y4QN1puc2yjUvnTBxRNRKopI6580Wc4jjaxX7lIJJXFS9iEo5eMNeQqO-QT3l3EgGux7g_h-M9cIQAQCZ4omhzO8FgSmfZfSOW-pJuair4Q6gRPmCHWLdC19CWzy0h5SABAR4XZpcTD0w1CU_K25HU8NLU0a2MsTvOX7Xo7i1C8X61bhCT9tnJE_guYO9V1jys9wqy_eUIR1LNhPLZ1WNfO5i9v2_JuaOI8ySA38CIrjbkxCqbcT7Jxqup1JtY9xT--1apn5TVPDufTnOdN1oz3KSIhryZnhxBSj0bnKqOy9TwOQO6Urj0jXWQIEU5OJQgmIU4tKD-DabgTh8olUodtqi0Pt-8KfOpC9JWtSbBflddBr9hR3Irxg29phZYm4dPVWnuzBfiimTa8gkoEE3IB0D7KVdEb9l8JNzT-gyScrDlfxUt0NtGaoUhy2XTIwq8NupDKUq3uN1DHPJrCMFNr4Bi6zzOs25VMgasaaLv1bVVLEjt27P0pv3LemkiKgSFzsh_Aw_DAH6zGIxIgNaSTZOG3qXCKfwnKYHJ6MsRLrtiTgA%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.;dc_rfl=2,https%3A%2F%2Ft.ly%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=J7JNF)Ss-k;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=2915;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip,
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bt&google_push=AXcoOmQZ9AdKlnbeJTyLIQOgeg_irgSNHpembbXdwR5hZTKgt71EH1K5sVztA2LZNcTwLbpA7hv1EF7GFHEe6T8OoaTYsETXYxkiBIE HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmRknDDpw7X_vzsJQkka1hWUZus22LhIH2xpmIkbYAcfJzAd1SyxM7PltGeqgkyK-jeS2j64IDYHn1cbo6PLXy1s0P0qFHXcG3GLAw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmTY772ALm93a0DVVyKpboW2PzfqMPKY1LWuwxXOdYpcD29P14mSGt0GY6LZqynwLUmPVxvsRmG40_1Oj2DmAteHEuUQfTx5sFH7Dw&google_hm=22210ca7d02b196e2njvxb00m4ihpoje HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bt&google_push=AXcoOmSyvtNEqTIrdP0MB45Eyibq5SJ6jnGCgb8NN9CW02MmVcnqHpXw50WoOSRfQb92IQxqFTbuZRNqpETKm-ohquyLQ36Ox9LFzSw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmQN9CbKMl-JBph1LqSNUaztMqzIULXhqVHTO7lkLWDPc360kfnIC0VcKla-gt_CzegXC-kfGOh4Yg8nB36RL-1_RlXYU6Ee_Zis&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=admaster&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0&google_hm=22210ca7aca1932b2gdr4400m4ihpsjo HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESEDsEhJC4yk_LUJ14xvLuCJs&google_push=AXcoOmQ_gQ37xYL2nmXRiB-XBdJ-cVb5KYWWseVMkhnc7ODCaCpAvXjdF1CoyRZk0T8qWXEv6A4dxKXXpeBpy0u8urj58Qz9eM20r-0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=crimtan&google_push=AXcoOmQyRyNnUHFSVQHWv_-SRaTpyGhjTOUfztvh-5nR1folSWXH0ud88FM0djavSC3GeLbxCM9BcH0Yx8q_eMXgB48YgVJihFMf94Y&google_hm=krkd6CXtS5yGRgZY0Cwu368 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmT6jjqhi0BrUuVNWpGVnr43MSt4bBfR9inK9Bh4wxCeM2-kcmSX4Sy4cMsg1OuvLKC9ls-o6x6rIv5BD-6D15OwP3ckElsKUFQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuG3lVSgMEpuf0F1py0zdTsmo2gRNUmp3X674TNTvkxVW7b_gCerQ0DVkvD_0YiQg5jXQp6cGKf2yd2W9oJHMxa2XRfK1tWIQK4ePk5GHpy99qlInMGLvMs6XfO8y0bHOktnmolgFvgBoxVjH3Ob8ly6zxGLPwJm7zS-lvoBxzchgLnOH84DluJQ2C7NwVVnXk&sai=AMfl-YTvl9EhU_FTfuvq02mqMMQEjZxeBRld69m8HRifiUvka2_kctRiSnXJfzoS2-0ldFfOqgTvX5uqSufkbE_xcbQDXCjPAXw_xss&sig=Cg0ArKJSzCnHfXym8Z19EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9qYXJlZC5jb20&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241205.12645&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /rjss/st/2169889/81613668/skeleton.js?bundleId=${BUNDLE_ID}&ias_dspID=3&ias_campId=1017595187&ias_pubId=pub-5561763581314444&ias_chanId=1&ias_placementId=21513784982&bidurl=https%3A%2F%2Ft.ly%2F&ias_dealId=&ias_xappb=&adsafe_par&ias_impId=v4~~ABAjH0hKuPU0yYoTYh-ZhtyXBFU0 HTTP/1.1Host: fw.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adelphic_mobile&google_gid=CAESEJiTTycozT-BhtecgGINDbQ&google_cver=1&google_push=AXcoOmTr0ZUQS-GAnkyAuLBskHiOG79y5zMUVHHkNTjuduVPysz0fUDIpja75Xv2UMltnximQiHDaW-6QrLXcOUBeXoTObYhfOYFx_c&google_hm=I7B6ckThTZmnCI6EpDhnug== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ak_dmp&google_push=AXcoOmSR7TM3PGi2RhGlfJJ1_3_kaBGj-w2eJj0gAmMwRtMIjrnrj2Y5sfFvOhhCydBcCUeoW9i1zy7CXCn-7ZDAo8SH90EiU5WuubE&google_hm=Q0FFU0VHamZGWXlpM0x5Z1NLOEJzcDAzY2Jj HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuG3lVSgMEpuf0F1py0zdTsmo2gRNUmp3X674TNTvkxVW7b_gCerQ0DVkvD_0YiQg5jXQp6cGKf2yd2W9oJHMxa2XRfK1tWIQK4ePk5GHpy99qlInMGLvMs6XfO8y0bHOktnmolgFvgBoxVjH3Ob8ly6zxGLPwJm7zS-lvoBxzchgLnOH84DluJQ2C7NwVVnXk&sai=AMfl-YTvl9EhU_FTfuvq02mqMMQEjZxeBRld69m8HRifiUvka2_kctRiSnXJfzoS2-0ldFfOqgTvX5uqSufkbE_xcbQDXCjPAXw_xss&sig=Cg0ArKJSzCnHfXym8Z19EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9qYXJlZC5jb20&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2699&vt=11&dtpt=2697&dett=2&cstd=0&cisv=r20241205.12645&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;navigation-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /simgad/17404902169808334130 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.19.8.556.js HTTP/1.1Host: static.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z&google_hm=_lmaziMuRMytCK-uQRAFjw==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=Mju7znnTTG9fP0rBkcIMC1NuPMG0_8EnzzjTr67EBhU&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHXluU4MV8k6x_JDzQyB-kc&google_cver=1&google_push=AXcoOmSDU2MlkJW6XxLBLoTwACZkVcK0mQiPYIEd1hBC2R6nTmyyHLVqwG1QX01gs_OUgshi7wBTTqNjV0TvBQNYbuTIMYUmE1ZfarHW&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmRknDDpw7X_vzsJQkka1hWUZus22LhIH2xpmIkbYAcfJzAd1SyxM7PltGeqgkyK-jeS2j64IDYHn1cbo6PLXy1s0P0qFHXcG3GLAw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmTY772ALm93a0DVVyKpboW2PzfqMPKY1LWuwxXOdYpcD29P14mSGt0GY6LZqynwLUmPVxvsRmG40_1Oj2DmAteHEuUQfTx5sFH7Dw&google_hm=22210ca7d02b196e2njvxb00m4ihpoje HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bt&google_push=AXcoOmSyvtNEqTIrdP0MB45Eyibq5SJ6jnGCgb8NN9CW02MmVcnqHpXw50WoOSRfQb92IQxqFTbuZRNqpETKm-ohquyLQ36Ox9LFzSw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmQN9CbKMl-JBph1LqSNUaztMqzIULXhqVHTO7lkLWDPc360kfnIC0VcKla-gt_CzegXC-kfGOh4Yg8nB36RL-1_RlXYU6Ee_Zis&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ak_dmp&google_push=AXcoOmSR7TM3PGi2RhGlfJJ1_3_kaBGj-w2eJj0gAmMwRtMIjrnrj2Y5sfFvOhhCydBcCUeoW9i1zy7CXCn-7ZDAo8SH90EiU5WuubE&google_hm=Q0FFU0VHamZGWXlpM0x5Z1NLOEJzcDAzY2Jj HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsuG3lVSgMEpuf0F1py0zdTsmo2gRNUmp3X674TNTvkxVW7b_gCerQ0DVkvD_0YiQg5jXQp6cGKf2yd2W9oJHMxa2XRfK1tWIQK4ePk5GHpy99qlInMGLvMs6XfO8y0bHOktnmolgFvgBoxVjH3Ob8ly6zxGLPwJm7zS-lvoBxzchgLnOH84DluJQ2C7NwVVnXk&sai=AMfl-YTvl9EhU_FTfuvq02mqMMQEjZxeBRld69m8HRifiUvka2_kctRiSnXJfzoS2-0ldFfOqgTvX5uqSufkbE_xcbQDXCjPAXw_xss&sig=Cg0ArKJSzCnHfXym8Z19EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9qYXJlZC5jb20&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2699&vt=11&dtpt=2697&dett=2&cstd=0&cisv=r20241205.12645&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adelphic_mobile&google_gid=CAESEJiTTycozT-BhtecgGINDbQ&google_cver=1&google_push=AXcoOmTr0ZUQS-GAnkyAuLBskHiOG79y5zMUVHHkNTjuduVPysz0fUDIpja75Xv2UMltnximQiHDaW-6QrLXcOUBeXoTObYhfOYFx_c&google_hm=I7B6ckThTZmnCI6EpDhnug== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA
Source: global traffic	HTTP traffic detected: GET /main.19.8.556.js HTTP/1.1Host: static.adsafeprotected.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=Mju7znnTTG9fP0rBkcIMC1NuPMG0_8EnzzjTr67EBhU&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHXluU4MV8k6x_JDzQyB-kc&google_cver=1&google_push=AXcoOmSDU2MlkJW6XxLBLoTwACZkVcK0mQiPYIEd1hBC2R6nTmyyHLVqwG1QX01gs_OUgshi7wBTTqNjV0TvBQNYbuTIMYUmE1ZfarHW&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; APC=AfxxVi47Y_N7tb0gJqP3z9GeYE46O0awZBo0jMH9ghVeVr0_rrSKrA

Source: chromecache_183.2.dr	String found in binary or memory: "https://www.facebook.com/TLYShortener", equals www.facebook.com (Facebook)
Source: chromecache_183.2.dr	String found in binary or memory: "https://www.linkedin.com/company/tlyshortener/", equals www.linkedin.com (Linkedin)
Source: chromecache_183.2.dr	String found in binary or memory: "https://www.youtube.com/@tlyshortener" equals www.youtube.com (Youtube)
Source: chromecache_303.2.dr, chromecache_180.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Bk:function(){e=qb()},zd:function(){d()}}};var Xb=xa(["data-gtm-yt-inspected-"]),ND=["www.youtube.com","www.youtube-nocookie.com"],OD,PD=!1; equals www.youtube.com (Youtube)
Source: chromecache_303.2.dr, chromecache_180.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Dh:e,Bh:f,Ch:g,ji:k,ki:m,Re:n,Jb:b},q=B.YT;if(q)return q.ready&&q.ready(d),b;var r=B.onYouTubeIframeAPIReady;B.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(YD(w,"iframe_api")\|\|YD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!PD&&WD(x[A],p.Re))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr, chromecache_333.2.dr, chromecache_297.2.dr, chromecache_280.2.dr, chromecache_211.2.dr, chromecache_176.2.dr	String found in binary or memory: return b}LD.F="internal.enableAutoEventOnTimer";var Xb=xa(["data-gtm-yt-inspected-"]),ND=["www.youtube.com","www.youtube-nocookie.com"],OD,PD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: t.ly
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: r.wdfl.co
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: match.adsby.bidtheatre.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: gtrace.mediago.io
Source: global traffic	DNS traffic detected: DNS query: analytics.pangle-ads.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: tr.blismedia.com
Source: global traffic	DNS traffic detected: DNS query: ads.travelaudience.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: dsp.adkernel.com
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: a.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: sync.teads.tv
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: gcm.ctnsnet.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: gtracenep.admaster.cc
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: tpt.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: tpt.mediaplex.com
Source: global traffic	DNS traffic detected: DNS query: fw.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: www.jared.com
Source: global traffic	DNS traffic detected: DNS query: static.adsafeprotected.com
Source: global traffic	DNS traffic detected: DNS query: dt.adsafeprotected.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: t.lyConnection: keep-aliveContent-Length: 1614sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://t.lySec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://t.ly/?ref=expired&url=https://t.ly/8cSDxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York

Source: chromecache_227.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_227.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: http://google.com
Source: chromecache_200.2.dr, chromecache_289.2.dr, chromecache_300.2.dr, chromecache_215.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_200.2.dr, chromecache_289.2.dr, chromecache_300.2.dr, chromecache_215.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_305.2.dr, chromecache_374.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_183.2.dr	String found in binary or memory: https://addons.mozilla.org/en-US/firefox/addon/link-shortener/
Source: chromecache_183.2.dr	String found in binary or memory: https://addons.opera.com/en/extensions/details/url-shortener-4/
Source: chromecache_177.2.dr, chromecache_275.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_176.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_226.2.dr, chromecache_256.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_183.2.dr	String found in binary or memory: https://api.t.ly/api/
Source: chromecache_183.2.dr	String found in binary or memory: https://blog.t.ly/wp-content/uploads/2022/11/How-do-I-shorten-a-URL-for-free.jpg
Source: chromecache_183.2.dr	String found in binary or memory: https://blog.t.ly/wp-content/uploads/2022/11/URL-Shortener-API.jpg
Source: chromecache_183.2.dr	String found in binary or memory: https://blog.t.ly/wp-content/uploads/2022/12/The-Hidden-Benefits-Of-Using-a-Link-Shortener.jpg
Source: chromecache_183.2.dr	String found in binary or memory: https://blog.t.ly/wp-content/uploads/2023/01/What-is-a-Url-Shortener-1.jpg
Source: chromecache_183.2.dr	String found in binary or memory: https://blog.t.ly/wp-content/uploads/2023/03/How-to-Create-a-Tiny-URL.jpg
Source: chromecache_183.2.dr	String found in binary or memory: https://blog.t.ly/wp-content/uploads/2023/04/Best-URL-Shortener.jpg
Source: chromecache_303.2.dr, chromecache_334.2.dr, chromecache_333.2.dr, chromecache_180.2.dr, chromecache_297.2.dr, chromecache_280.2.dr, chromecache_211.2.dr, chromecache_176.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_352.2.dr, chromecache_200.2.dr, chromecache_235.2.dr, chromecache_215.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_352.2.dr, chromecache_235.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_183.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Source: chromecache_183.2.dr	String found in binary or memory: https://chromewebstore.google.com/detail/url-shortener/oodfdmglhbbkkcngodjjagblikmoegpa
Source: chromecache_282.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm
Source: chromecache_282.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm
Source: chromecache_233.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm&gdpr=0
Source: chromecache_233.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_305.2.dr, chromecache_374.2.dr	String found in binary or memory: https://developers.google.com/ad-placement
Source: chromecache_282.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix
Source: chromecache_217.2.dr, chromecache_258.2.dr, chromecache_306.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_258.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_217.2.dr, chromecache_306.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_258.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_217.2.dr, chromecache_306.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_306.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_217.2.dr, chromecache_306.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_299.2.dr, chromecache_319.2.dr, chromecache_369.2.dr, chromecache_219.2.dr, chromecache_255.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2)
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2)
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvD9oS_a.woff2)
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2)
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2)
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB77TKx9.woff2
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2)
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBP7TKx9.woff2
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBT7TKx9.woff2
Source: chromecache_299.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB_7TKx9.woff2
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_369.2.dr, chromecache_219.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesymbols/v309/HhyAU5Ak9u-oMExPeInvcuEmPosC9zSpYaEEU68cdvrHJg.woff2)
Source: chromecache_255.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesymbols/v309/HhzZU5Ak9u-oMExPeInvcuEmPosC9zyteYEFU68cPrjdKM1XLPTxl
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_347.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_176.2.dr	String found in binary or memory: https://google.com
Source: chromecache_176.2.dr, chromecache_215.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_282.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://pagead2.googlesyndication-cn.com/
Source: chromecache_215.2.dr, chromecache_298.2.dr, chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_311.2.dr, chromecache_355.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_217.2.dr, chromecache_258.2.dr, chromecache_306.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=colleague-executed&name=
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_277.2.dr, chromecache_230.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_177.2.dr, chromecache_275.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_311.2.dr, chromecache_355.2.dr, chromecache_289.2.dr, chromecache_300.2.dr, chromecache_305.2.dr, chromecache_374.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_354.2.dr, chromecache_249.2.dr, chromecache_335.2.dr, chromecache_238.2.dr, chromecache_312.2.dr, chromecache_189.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_258.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_217.2.dr, chromecache_306.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_303.2.dr, chromecache_334.2.dr, chromecache_352.2.dr, chromecache_333.2.dr, chromecache_180.2.dr, chromecache_297.2.dr, chromecache_280.2.dr, chromecache_211.2.dr, chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_253.2.dr, chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_200.2.dr, chromecache_289.2.dr, chromecache_300.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=$
Source: chromecache_183.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5561763581314444
Source: chromecache_177.2.dr, chromecache_200.2.dr, chromecache_289.2.dr, chromecache_300.2.dr, chromecache_275.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_177.2.dr, chromecache_200.2.dr, chromecache_275.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_311.2.dr, chromecache_355.2.dr, chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_215.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_373.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_258.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_217.2.dr, chromecache_306.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_169.2.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_183.2.dr	String found in binary or memory: https://r.wdfl.co/rw.js
Source: chromecache_183.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_269.2.dr, chromecache_326.2.dr	String found in binary or memory: https://stackoverflow.com/questions/4845762/onload-handler-for-script-tag-in-internet-explorer
Source: chromecache_183.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_303.2.dr, chromecache_180.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_256.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_233.2.dr	String found in binary or memory: https://sync.teads.tv/um?eid=3&uid=&gdpr=0&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_ni
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/#website
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/affiliates
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/docs
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/extension
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/extension-install-cta
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/facebook
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/faq
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/img/browser/chrome_64x64.png
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/img/browser/firefox_64x64.png
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/img/browser/opera_64x64.png
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/img/promo/tly-promo.png
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/img/tly-logo.png
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/linkedin
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/privacy
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/qr-code-generator
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/register
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/terms
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/tools
Source: chromecache_183.2.dr	String found in binary or memory: https://t.ly/twitter
Source: chromecache_226.2.dr, chromecache_256.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_303.2.dr, chromecache_334.2.dr, chromecache_333.2.dr, chromecache_180.2.dr, chromecache_297.2.dr, chromecache_280.2.dr, chromecache_211.2.dr, chromecache_176.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_306.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_217.2.dr, chromecache_306.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_233.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.
Source: chromecache_183.2.dr	String found in binary or memory: https://www.crunchbase.com/organization/t-ly
Source: chromecache_333.2.dr, chromecache_297.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_226.2.dr, chromecache_256.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_226.2.dr, chromecache_256.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_226.2.dr, chromecache_256.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_306.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_226.2.dr, chromecache_256.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_177.2.dr, chromecache_275.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_283.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/10875945736/?random
Source: chromecache_217.2.dr, chromecache_200.2.dr, chromecache_258.2.dr, chromecache_306.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_176.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com/.well-known/private-aggregation/report-shared-storage
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_176.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_334.2.dr, chromecache_280.2.dr, chromecache_211.2.dr, chromecache_176.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_226.2.dr, chromecache_256.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_183.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-10875945736
Source: chromecache_183.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-89207177-8
Source: chromecache_334.2.dr, chromecache_280.2.dr, chromecache_211.2.dr, chromecache_176.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googletagservices.com/agrp/
Source: chromecache_215.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_200.2.dr, chromecache_215.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_183.2.dr	String found in binary or memory: https://www.linkedin.com/company/tlyshortener/
Source: chromecache_303.2.dr, chromecache_180.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_183.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_303.2.dr, chromecache_180.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_183.2.dr	String found in binary or memory: https://x.com/TLYShortener

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown

HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49811 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@22/333@158/45

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2424,i,13418119353792489953,16204478221804853054,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.ly/8cSDx"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2424,i,13418119353792489953,16204478221804853054,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://t.ly/8cSDx	0%	Avira URL Cloud	safe
https://t.ly/8cSDx	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://api.t.ly/api/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
static.cloudflareinsights.com	104.16.79.73	true	false	high
tr.blismedia.com	34.96.105.8	true	false	high
www.googletagservices.com	172.217.17.34	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
user-data-eu.bidswitch.net	35.214.136.108	true	false	high
dsp.adkernel.com	174.137.133.49	true	false	high
cdn.w55c.net	52.57.179.60	true	false	high
gcm.ctnsnet.com	35.186.193.173	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	high
cm.g.doubleclick.net	172.217.17.34	true	false	high
www.google.com	172.217.21.36	true	false	high
match.prod.bidr.io	52.19.235.127	true	false	high
chidc2.outbrain.org	50.31.142.255	true	false	high
creativecdn.com	185.184.8.90	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
sync.ipredictive.com	18.233.180.144	true	false	high
ep1.adtrafficquality.google	172.217.19.226	true	false	high
ad.doubleclick.net	172.217.17.70	true	false	high
ep2.adtrafficquality.google	172.217.19.193	true	false	high
d2ctznuk6ro1vp.cloudfront.net	18.165.220.26	true	false	unknown
firewall-external-2134955858.eu-west-1.elb.amazonaws.com	54.72.141.208	true	false	high
d162h6x3rxav67.cloudfront.net	13.226.2.71	true	false	unknown
gtrace.mediago.io	35.208.249.213	true	false	high
t.ly	104.20.7.133	true	false	high
googleads.g.doubleclick.net	172.217.17.66	true	false	high
www3.l.google.com	142.250.181.14	true	false	high
ads.travelaudience.com	35.190.0.66	true	false	high
dsum-sec.casalemedia.com	104.18.26.193	true	false	high
d2qumtq956sbet.cloudfront.net	216.137.52.40	true	false	high
dt-external-217593033.us-east-1.elb.amazonaws.com	54.237.134.139	true	false	high
onetag-sys.com	51.89.9.251	true	false	high
match.adsby.bidtheatre.com	188.166.17.21	true	false	high
td.doubleclick.net	142.250.181.2	true	false	high
ib.anycast.adnxs.com	37.252.171.85	true	false	high
s0.2mdn.net	172.217.19.230	true	false	high
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	high
sync.teads.tv	unknown	unknown	false	high
r.wdfl.co	unknown	unknown	false	high
pm.w55c.net	unknown	unknown	false	high
a.rfihub.com	unknown	unknown	false	high
fundingchoicesmessages.google.com	unknown	unknown	false	high
d.agkn.com	unknown	unknown	false	high
fw.adsafeprotected.com	unknown	unknown	false	high
tpt.dotomi.com	unknown	unknown	false	high
dis.criteo.com	unknown	unknown	false	high
dt.adsafeprotected.com	unknown	unknown	false	high
widget.us.criteo.com	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	high
c1.adform.net	unknown	unknown	false	high
www.jared.com	unknown	unknown	false	high
analytics.pangle-ads.com	unknown	unknown	false	high
gtracenep.admaster.cc	unknown	unknown	false	high
tpt.mediaplex.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
static.adsafeprotected.com	unknown	unknown	false	high
sync-tm.everesttech.net	unknown	unknown	false	high
b1sync.zemanta.com	unknown	unknown	false	high
p.rfihub.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1	false	high
https://t.ly/android-chrome-192x192.png	false	high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	high
https://cm.g.doubleclick.net/pixel?google_nid=teadstv_ab&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My&google_push=AXcoOmSX-XkZULzWEXRVPIAMqGYOL4W1I9M5f4gWA_ax3Q9BcNEjyd7kLnvD-o6n_uR53aVpdSryP550aR0GAnr9Fq9cJudz-LPaO6Y	false	high
https://ad.doubleclick.net/pcs/view?xai=AKAOjsuG3lVSgMEpuf0F1py0zdTsmo2gRNUmp3X674TNTvkxVW7b_gCerQ0DVkvD_0YiQg5jXQp6cGKf2yd2W9oJHMxa2XRfK1tWIQK4ePk5GHpy99qlInMGLvMs6XfO8y0bHOktnmolgFvgBoxVjH3Ob8ly6zxGLPwJm7zS-lvoBxzchgLnOH84DluJQ2C7NwVVnXk&sai=AMfl-YTvl9EhU_FTfuvq02mqMMQEjZxeBRld69m8HRifiUvka2_kctRiSnXJfzoS2-0ldFfOqgTvX5uqSufkbE_xcbQDXCjPAXw_xss&sig=Cg0ArKJSzCnHfXym8Z19EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9qYXJlZC5jb20&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2699&vt=11&dtpt=2697&dett=2&cstd=0&cisv=r20241205.12645&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&arae=1&ftch=1&adurl=	false	high
https://pm.w55c.net/ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM	false	high
https://t.ly/cdn-cgi/rum?	false	high
https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co	false	high
https://t.ly/img/tly-logo-sm.png	false	high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D	false	high
https://cm.g.doubleclick.net/pixel?google_nid=adelphic_mobile&google_gid=CAESEJiTTycozT-BhtecgGINDbQ&google_cver=1&google_push=AXcoOmTr0ZUQS-GAnkyAuLBskHiOG79y5zMUVHHkNTjuduVPysz0fUDIpja75Xv2UMltnximQiHDaW-6QrLXcOUBeXoTObYhfOYFx_c&google_hm=I7B6ckThTZmnCI6EpDhnug==	false	high
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm	false	high
https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfRrNYFEPbY6t8FGPDFnaMCMAE&v=APEucNXfFZwzoOLiXEkNNNiNJY5P7KyF9R7DUKoAm8KzM3JqEmY0xRmkwb79hh6wcotQh2svA3CcUxXiacIj76_stVfAXUfwgYDX0R7MICgTyV51NAv8cbA	false	high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSBfOT9ulCK3PrA9y4EdQz9KAbtN8Hiv_1j_aaYfTZT_WOrK0YpVvvliUDQkMrbIRKU_lFSH3x0SKkO8YJ9-3fie92hzw	false	high
https://ad.doubleclick.net/pcs/view?xai=AKAOjsuG3lVSgMEpuf0F1py0zdTsmo2gRNUmp3X674TNTvkxVW7b_gCerQ0DVkvD_0YiQg5jXQp6cGKf2yd2W9oJHMxa2XRfK1tWIQK4ePk5GHpy99qlInMGLvMs6XfO8y0bHOktnmolgFvgBoxVjH3Ob8ly6zxGLPwJm7zS-lvoBxzchgLnOH84DluJQ2C7NwVVnXk&sai=AMfl-YTvl9EhU_FTfuvq02mqMMQEjZxeBRld69m8HRifiUvka2_kctRiSnXJfzoS2-0ldFfOqgTvX5uqSufkbE_xcbQDXCjPAXw_xss&sig=Cg0ArKJSzCnHfXym8Z19EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9qYXJlZC5jb20&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241205.12645&arae=1&ftch=1&adurl=	false	high
https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmSJrFy3UtQJ72UzESzWf4NxDCOosGlxBjqp9SrQd0bqlCXu8Q-p3Wf-rr5RpOlX__osjut54xd85hY0UtgFhSQI3_x79HKInkE	false	high
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm&gdpr=0	false	high
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEHXluU4MV8k6x_JDzQyB-kc&google_cver=1&google_push=AXcoOmSDU2MlkJW6XxLBLoTwACZkVcK0mQiPYIEd1hBC2R6nTmyyHLVqwG1QX01gs_OUgshi7wBTTqNjV0TvBQNYbuTIMYUmE1ZfarHW&tc=1	false	high
https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEAucPc0n90JY6KGIBH5wU3E%26google_cver%3D1	false	high
https://t.ly/js/sweetalert.min.js?id=abedaaba10307a01ba0d	false	high
https://t.ly/favicon.ico	false	high
https://onetag-sys.com/match/?int_id=19&redir=1&google_gid=CAESEIgJ0qSMj4TxmLZl5g1bDrg&google_cver=1&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co	false	high
https://match.adsby.bidtheatre.com/adxcookie?id=&google_gid=CAESELqoJB2ILVOLH5_tSMp0hks&google_cver=1&google_push=AXcoOmQZ9AdKlnbeJTyLIQOgeg_irgSNHpembbXdwR5hZTKgt71EH1K5sVztA2LZNcTwLbpA7hv1EF7GFHEe6T8OoaTYsETXYxkiBIE	false	high
https://gtracenep.admaster.cc/ju/cs/google?google_gid=CAESECwokNfvS_HaxfSCpn49VFI&google_cver=1&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0	false	high
https://fw.adsafeprotected.com/rjss/st/2169889/81613668/skeleton.js?bundleId=${BUNDLE_ID}&ias_dspID=3&ias_campId=1017595187&ias_pubId=pub-5561763581314444&ias_chanId=1&ias_placementId=21513784982&bidurl=https%3A%2F%2Ft.ly%2F&ias_dealId=&ias_xappb=&adsafe_par&ias_impId=v4~~ABAjH0hKuPU0yYoTYh-ZhtyXBFU0	false	high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	false	high
https://cm.g.doubleclick.net/pixel?google_nid=toutiao_usd&google_push=AXcoOmTWzest5pHO4UQSyJUahOzu5qAREnxSNAwgaqrPipeQgTGAqOYjuceBhei7Orku45Lwl_wEGHDmS61jiIF6c5QbEhgpbTGhLHHE	false	high
https://t.ly/js/1166.js?id=19bfd34c537a6d4aa0c4	false	high
https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0	false	high
https://cm.g.doubleclick.net/pixel?google_nid=admaster&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0&google_hm=22210ca7aca1932b2gdr4400m4ihpsjo	false	high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1&C=1	false	high
https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=Mju7znnTTG9fP0rBkcIMC1NuPMG0_8EnzzjTr67EBhU&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHXluU4MV8k6x_JDzQyB-kc&google_cver=1&google_push=AXcoOmSDU2MlkJW6XxLBLoTwACZkVcK0mQiPYIEd1hBC2R6nTmyyHLVqwG1QX01gs_OUgshi7wBTTqNjV0TvBQNYbuTIMYUmE1ZfarHW&tc=1	false	high
https://fundingchoicesmessages.google.com/f/AGSKWxVLi3OjIL6YVRpVpOH82daPeNkU1wjvm4ZifdEGaqG1CZrC-iGTFl7ZH2MKWKljMmeb7PMWc-dnNsYV0yAMFgXbZ23bZ5MqhK1-3JtAPQQFZSLl9eqCWV3MQc4bibUyBAddF_hJ4w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzMzODM2ODg2LDEwOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuIl0sImh0dHBzOi8vdC5seS8iLG51bGwsW1s4LCJ4OEtKRXFOb1BXSSJdLFs5LCJlbi1VUyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ	false	high
https://s0.2mdn.net/simgad/17404902169808334130	false	high
https://us-u.openx.net/w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D	false	high
https://t.ly/cdn-cgi/challenge-platform/h/g/jsd/r/8efd891efeaf15d7	false	high
https://t.ly/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	false	high
https://s0.2mdn.net/simgad/17147156143050066190/14763004658117789537?w=100&h=100&tw=1&q=75	false	high
https://ep2.adtrafficquality.google/sodar/sodar2.js	false	high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSJVtxsEBjenWZY09JBi7pI5-ljXSWytq0RzRC9rE-l5sPo1hVL3CJ8KgsvZP1GOK8bEMVTyoQxklSmrK0nwb7GK-Vvew	false	high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false	high
https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z&google_hm=_lmaziMuRMytCK-uQRAFjw==&gdpr=&gdpr_consent=	false	high
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=NGU5ZTY2Y2EtOTU3Yy0yNTEyLWYxZjItYmE2MDcyMWJiNTc0	false	high
https://fundingchoicesmessages.google.com/i/ca-pub-5561763581314444?href=https%3A%2F%2Ft.ly&ers=2	false	high
https://t.ly/js/8567.js?id=ff27d36c69a89659efd0	false	high
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Z1hAVtHM6CMAAD2aAX0B-QAA	false	high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRhsFwBJth0m0S3VSgNw0dqOzOEjlER-KHeyXgEvdYctCUmAMMkgxmod38bUx5HQKVTR26iRTY3t5vstjpvkZcKXTisqQ	false	high
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm	false	high
https://cm.g.doubleclick.net/pixel?google_nid=crimtan&google_push=AXcoOmQyRyNnUHFSVQHWv_-SRaTpyGhjTOUfztvh-5nR1folSWXH0ud88FM0djavSC3GeLbxCM9BcH0Yx8q_eMXgB48YgVJihFMf94Y&google_hm=krkd6CXtS5yGRgZY0Cwu368	false	high
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13K5zd5tC72rYU6Cuob5vDTzCZwFmbJRADoT9TNXSgJ-uVdogPLeNxJ7IH4kKMRCoAWSbOxU32Q	false	high
https://sync.ipredictive.com/d/sync/cookie/generic?https://cm.g.doubleclick.net/pixel?google_nid=adelphic_mobile&google_gid=CAESEJiTTycozT-BhtecgGINDbQ&google_cver=1&google_push=AXcoOmTr0ZUQS-GAnkyAuLBskHiOG79y5zMUVHHkNTjuduVPysz0fUDIpja75Xv2UMltnximQiHDaW-6QrLXcOUBeXoTObYhfOYFx_c&google_hm=${ADELPHIC_CUID_B64}	false	high
https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEImQHyRRkUYMNoxTatB-flo&google_cver=1&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z	false	high
https://match.adsby.bidtheatre.com/adxcookie?id=&google_gid=CAESELqoJB2ILVOLH5_tSMp0hks&google_cver=1&google_push=AXcoOmSyvtNEqTIrdP0MB45Eyibq5SJ6jnGCgb8NN9CW02MmVcnqHpXw50WoOSRfQb92IQxqFTbuZRNqpETKm-ohquyLQ36Ox9LFzSw	false	high
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NDkzMDY4NTAyNDc0Nzc3NzE1Nw%3D%3D	false	high
https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My	false	high
https://googleads.g.doubleclick.net/pagead/html/r20241205/r20190131/zrt_lookup_fy2021.html	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://blog.t.ly/wp-content/uploads/2022/12/The-Hidden-Benefits-Of-Using-a-Link-Shortener.jpg	chromecache_183.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_303.2.dr, chromecache_180.2.dr	false		high
https://t.ly/qr-code-generator	chromecache_183.2.dr	false		high
https://www.googletagservices.com/agrp/	chromecache_210.2.dr, chromecache_260.2.dr, chromecache_342.2.dr, chromecache_169.2.dr	false		high
https://ep2.adtrafficquality.google	chromecache_306.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_226.2.dr, chromecache_256.2.dr	false		high
https://t.ly/img/browser/opera_64x64.png	chromecache_183.2.dr	false		high
https://addons.mozilla.org/en-US/firefox/addon/link-shortener/	chromecache_183.2.dr	false		high
https://fundingchoicesmessages.google.com/i/$	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_256.2.dr	false		high
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_352.2.dr, chromecache_200.2.dr, chromecache_235.2.dr, chromecache_215.2.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_258.2.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_217.2.dr, chromecache_306.2.dr	false		high
https://schema.org	chromecache_183.2.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://sync.teads.tv/um?eid=3&uid=&gdpr=0&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_ni	chromecache_233.2.dr	false		high
https://www.youtube.com/	chromecache_183.2.dr	false		high
http://mathiasbynens.be/	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://www.google.com/adsense/search/async-ads.js	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix	chromecache_282.2.dr	false		high
http://googleads.g.doubleclick.net	chromecache_200.2.dr, chromecache_289.2.dr, chromecache_300.2.dr, chromecache_215.2.dr	false		high
https://t.ly/	chromecache_183.2.dr	false		high
https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.	chromecache_233.2.dr	false		high
https://ep2.adtrafficquality.google/sodar/$	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://googleads.g.doubleclick.net/	chromecache_311.2.dr, chromecache_355.2.dr	false		high
https://ad.doubleclick.net/	chromecache_311.2.dr, chromecache_355.2.dr	false		high
https://addons.opera.com/en/extensions/details/url-shortener-4/	chromecache_183.2.dr	false		high
http://google.com	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_311.2.dr, chromecache_355.2.dr	false		high
https://www.linkedin.com/company/tlyshortener/	chromecache_183.2.dr	false		high
https://t.ly/extension	chromecache_183.2.dr	false		high
https://t.ly/terms	chromecache_183.2.dr	false		high
https://cdn.ampproject.org/rtv/	chromecache_352.2.dr, chromecache_235.2.dr	false		high
https://t.ly/affiliates	chromecache_183.2.dr	false		high
https://t.ly	chromecache_183.2.dr	false		high
https://api.t.ly/api/	chromecache_183.2.dr	false	Avira URL Cloud: safe	unknown
https://cse.google.com/cse.js	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_176.2.dr, chromecache_215.2.dr	false		high
https://cdn.ampproject.org/rtv/$	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://ep3.adtrafficquality.google/ivt/worklet/caw.js	chromecache_200.2.dr, chromecache_215.2.dr	false		high
https://t.ly/#website	chromecache_183.2.dr	false		high
https://publickeyservice.msmt.gcp.privacysandboxservices.com	chromecache_169.2.dr	false		high
http://fontawesome.io/license	chromecache_227.2.dr	false		high
https://developers.google.com/ad-placement	chromecache_305.2.dr, chromecache_374.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.233.180.144	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
172.217.19.226	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
35.190.0.66	ads.travelaudience.com	United States	15169	GOOGLEUS	false
172.217.17.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.165.220.26	d2ctznuk6ro1vp.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.20.6.133	unknown	United States	13335	CLOUDFLARENETUS	false
51.89.9.251	onetag-sys.com	France	16276	OVHFR	false
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.19.193	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
104.20.7.133	t.ly	United States	13335	CLOUDFLARENETUS	false
174.137.133.49	dsp.adkernel.com	United States	27257	WEBAIR-INTERNETUS	false
172.217.17.34	www.googletagservices.com	United States	15169	GOOGLEUS	false
54.72.141.208	firewall-external-2134955858.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.19.235.127	match.prod.bidr.io	United States	16509	AMAZON-02US	false
50.31.142.255	chidc2.outbrain.org	United States	22075	AS-OUTBRAINUS	false
13.226.2.71	d162h6x3rxav67.cloudfront.net	United States	16509	AMAZON-02US	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.17.70	ad.doubleclick.net	United States	15169	GOOGLEUS	false
52.57.179.60	cdn.w55c.net	United States	16509	AMAZON-02US	false
37.252.171.85	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
216.137.52.40	d2qumtq956sbet.cloudfront.net	United States	8014	BATELNETBS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
37.252.172.123	unknown	European Union	29990	ASN-APPNEXUS	false
188.166.17.21	match.adsby.bidtheatre.com	Netherlands	14061	DIGITALOCEAN-ASNUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.66	unknown	United States	15169	GOOGLEUS	false
35.208.249.213	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
54.237.134.139	dt-external-217593033.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.18.27.193	unknown	United States	13335	CLOUDFLARENETUS	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
172.217.19.230	s0.2mdn.net	United States	15169	GOOGLEUS	false
104.18.26.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
35.186.193.173	gcm.ctnsnet.com	United States	15169	GOOGLEUS	false
142.250.181.100	unknown	United States	15169	GOOGLEUS	false
142.250.181.1	unknown	United States	15169	GOOGLEUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
142.250.181.2	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.181.14	www3.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1572397
Start date and time:	2024-12-10 14:19:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://t.ly/8cSDx
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@22/333@158/45
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.238, 64.233.162.84, 172.217.17.46, 216.58.208.226, 142.250.181.136, 2.20.68.210, 172.217.21.34, 142.250.181.78, 172.217.17.72, 172.217.19.206, 172.217.19.170, 172.217.21.33, 142.250.181.130, 142.250.181.99, 184.25.127.147, 184.25.127.144, 184.25.127.146, 184.25.127.151, 184.25.127.152, 184.25.127.145, 184.25.127.150, 184.25.127.148, 184.25.127.149, 216.58.208.227, 37.157.4.29, 37.157.5.132, 37.157.4.28, 37.157.5.87, 37.157.5.141, 37.157.5.84, 198.8.71.131, 2.19.201.108, 151.101.2.49, 151.101.194.49, 151.101.66.49, 151.101.130.49, 63.215.202.172, 172.217.17.78, 63.215.202.169, 92.122.7.211, 172.217.17.67, 34.104.35.123, 13.107.246.63, 23.36.245.152, 20.12.23.50
Excluded domains from analysis (whitelisted): e9009.a.akamaiedge.net, bfp.global.ipv4.dotomi.weighted.com.akadns.net, slscr.update.microsoft.com, a-us-west.rfihub.com.akadns.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, track.adformnet.akadns.net, clients2.google.com, redirector.gvt1.com, www.googletagmanager.com, a2047.w185.akamai.net, a.rfihub.com.akadns.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, e9957.e4.akamaiedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, sync.teads.tv.edgekey.net, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, analytics.pangle-ads.com.edgesuite.net, edgedl.me.gvt1.com, bfp.global.dual.dotomi.weighted.com.akadns.net, tpc.googlesyndication.com, xandr-g-geo.trafficmanager.net, www.jared.com.edgekey.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com, h2.shared.global.fastly.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://t.ly/8cSDx

Input	Output
URL: https://t.ly Model: Joe Sandbox AI	{"typosquatting":false, "unusual_query_string":false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address":false, "known_domain":false, "brand_spoofing_attempt":false, "third_party_hosting":false}
URL: https://t.ly
URL: about:srcdoc... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The script appears to be a part of a library or polyfill, likely for compatibility purposes. It does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or redirects. The code is not obfuscated and does not interact with external domains. It uses some legacy practices and error handling, but these are not inherently malicious. Overall, the script is benign with no harmful intent." }
(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); function p(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}var da=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},q; if(typeof Object.setPrototypeOf=="function")q=Object.setPrototypeOf;else{var r;a:{var ea={a:!0},fa={};try{fa.__proto__=ea;r=fa.a;break a}catch(a){}r=!1}q=r?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ha=q; function ia(a,b){a.prototype=da(b.prototype);a.prototype.constructor=a;if(ha)ha(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.v=b.prototype}p("Number.isFinite",function(a){return a?a:function(b){return typeof b!=="number"?!1:!isNaN(b)&&b!==Infinity&&b!==-Infinity}});p("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991});p("Number.MIN_SAFE_INTEGER",function(){return-9007199254740991});/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;var v,w;a:{for(var ja=["CLOSURE_FLAGS"],x=u,y=0;y<ja.length;y++)if(x=x[ja[y]],x==null){w=null;break a}w=x}var ka=w&&w[610401301];v=ka!=null?ka:!1;var z,la=u.navigator;z=la?la.userAgentData\|\|null:null;function A(a){return v?z?z.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function B(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function C(){return v?!!z&&z.brands.length>0:!1}function D(){return C()?A("Chromium"):(B("Chrome")\|\|B("CriOS"))&&!(C()?0:B("Edge"))\|\|B("Silk")};var ma=C()?!1:B("Trident")\|\|B("MSIE");!B("Android")\|\|D();D();B("Safari")&&(D()\|\|(C()?0:B("Coast"))\|\|(C()?0:B("Opera"))\|\|(C()?0:B("Edge"))\|\|(C()?A("Microsoft Edge"):B("Edg/"))\|\|C()&&A("Opera"));var na={},E=null;var oa=typeof Uint8Array!=="undefined",pa=!ma&&typeof btoa==="function";function qa(){var a=Error("int32");a.__closure__error__context__984382\|\|(a.__closure__error__context__984382={});a.__closure__error__context__984382.severity="warning";return a};var F=typeof Symbol==="function"&&typeof Symbol()==="symbol",G=typeof Symbol==="function"&&typeof Symbol()==="symbol"?Symbol():void 0;var H=F?function(a){return a[G]\|0}:function(a){return a.h\|0},ra=F?function(a){return a[G]}:function(a){return a.h},sa=F?function(a,b){a[G]=b}:function(a,b){a.h!==void 0?a.h=b:Object.defineProperties(a,{h:{value:b,configurable:!0,writable:!0,enumerable:!1}})};var ta={},ua={};function va(a){return!(!a\|\|typeof a!=="object"\|\|a.s!==ua)}function J(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object}function K(a){return!Array.isArray(a)\|\|a.length?!1:H(a)&1?!0:!1};var L=typeof u.BigInt==="function"&&typeof u.BigInt(0)==="bigint";var wa=Number.MIN_SAFE_INTEGER.toString(),xa=L?BigInt(Number.MIN_SAFE_INTEGER):void 0,ya=Number.MAX_SAFE_INTEGER.toString(),za=L?BigInt(Number.MAX_SAFE_INTEGER):void 0;function Aa(a,b){if(a.length>b.length)return!1;if(a.length<b.length\|\|a===b)return!0;for(var c=0;c<a.length;c++){var d=a[c],e=b[c];if(d>e)return!1;if(d<e)return!0}};function Ba(a){if(typeof a!=="number")throw qa();if(!Number.isFinite(a))throw qa();return a\|0};var Da; function M(a,b,c){var d=d!=null?d:0;a==null&&(a=Da);Da=void 0;if(a==null){var e=96;c?(a=[c],e\|=512):a=[];b&&(e=e&-33521665\|(b&1023)<<15)}else{if(!Array.isArray(a))throw Error("narr");e=H(a);if(e&2048)throw Error("farr");if(e
URL: https://www.gstatic.com/mysidia/b1ac06782ae68f33b8... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The script contains legacy practices and tracking behavior, such as user agent data collection and URL manipulation, but there are no high-risk indicators like dynamic code execution or data exfiltration. The script appears to be part of a library (Closure Library) and includes standard practices for handling URLs and user agent data, which are common in analytics or telemetry scripts. No interactions with suspicious domains or obfuscated code were detected." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b};const ba=(new Date("2024-01-01T00:00:00Z")).getTime();function ca(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}}function q(a,b){return b?a.g?a.h.slice(0,a.g.index)+b+a.h.slice(a.g.index):a.h+b:a.h} function da(a){a=a.A;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.fullVersionList.map(c=>encodeURIComponent(c.brand)+ ";"+encodeURIComponent(c.version)).join("\|")));typeof a.wow64!=="undefined"&&(b+="&uaw="+Number(a.wow64));return b}function ea(a,b){return a.m?typeof a.i!=="string"\|\|a.i.length===0?null:{U:a.i,T:q(a,"&act=1"+ca(b,!0)+da(a))}:a.l?{U:q(a,"&dct=1&suid="+a.o+ca(b,!1)),T:q(a,"&act=1"+ca(b,!0)+("&suid="+a.o))}:null}function fa(a,b=0){return ea(a,b).T}function ha(a,b){var c=0;b===3?c=2:b===4&&(c=1);return(c=ea(a,c))?b===1\|\|b===3\|\|b===4?c.U:b===2?q(a,"&ri=2"):b===0?q(a,"&ri=16"):a.h:a.h} var ia=class{constructor({url:a,aa:b}){this.h=a;this.A=b;b=/[?&]dsh=1(&\|$)/.test(a);this.m=!b&&/[?&]ae=1(&\|$)/.test(a);this.l=!b&&/[?&]ae=2(&\|$)/.test(a);this.g=/[?&]adurl=([^&])/.exec(a);this.B=!b&&/[?&]aspm=1(&\|$)/.test(a);if(this.g&&this.g[1]){let c;try{c=decodeURIComponent(this.g[1])}catch(d){c=null}this.i=c}this.o=(new Date).getTime()-ba}};/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / var r=class{constructor(a){this.g=a}toString(){return this.g}},ka=new r("about:invalid#zClosurez");class la{constructor(a){this.ha=a}}function t(a){return new la(b=>b.substr(0,a.length+1).toLowerCase()===a+":")}const ma=new la(a=>/^[^:]([/?#]\|$)/.test(a));var na=t("http"),oa=t("https"),pa=t("ftp"),qa=t("mailto"),ra=t("intent"),sa=t("market"),ua=t("itms"),va=t("itms-appss");const wa=[t("data"),na,oa,qa,pa,ma];function xa(a,b=wa){if(a instanceof r)return a;for(let c=0;c<b.length;++c){const d=b[c];if(d instanceof la&&d.ha(a))return new r(a)}}function ya(a,b=wa){return xa(a,b)\|\|ka}var za=/^\s(?!javascript:)(?:[\w+.-]+:\|[^:/?#](?:[/?#]\|$))/i;function Aa(a,b){if(b instanceof r)if(b instanceof r)b=b.g;else throw Error("");else b=za.test(b)?b:void 0;b!==void 0&&(a.href=b)};function Ba(a,b){a:{const c=a.length,d=typeof a==="string"?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a)){b=e;break a}b=-1}return b<0?null:typeof a==="string"?a.charAt(b):a[b]};function Ca(a,b){a.__closure__error__context__984382\|\|(a.__closure__error__context__984382={});a.__closure__error__context__984382.severity=b};var Da=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");function Ea(a,b,c){if(Array.isArray(b))for(let d=0;d<b.length;d++)Ea(a,String(b[d]),c);else b!=null&&c.push(a+(b===""?"":"="+encodeURIComponent(String(b))))}function Fa(a,b,c,d){const e=c.length;for(;(b=a.indexOf(c,b))>=0&&b<d;){var f=a.charCodeAt(b-1);if(f==38\|\|f==63)if(f=a.charCodeAt(b+e),!f\|\|f==61\|\|f==38\|\|f==35)return b;b+=e+1}return-1}var Ga=/#\|$/; function Ha(a,b){const c=a.search(Ga);let d=Fa(a,0,b,c);if(d<0)return null;let e=a.indexOf("&",d);if(e<0\|\|e>c)e=c;d+=b.length+1;return decodeURIComponent(a.slice(d,e!==-1?e:0).replace(/\+/g," "))}var Ia=/[?&]($\|#)/;function Ja(a){m.setTimeout(()=>{throw a;},0)};var Ka=aa(610401301,!1),La=aa(653718497,aa(1,!1));var Ma;const Oa=m.navigator;Ma=Oa?Oa.userAgentData\|\|null:null;function Pa(a){return Ka?Ma?Ma.brands.some(({brand:b})=
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY" ] }
	{ "brands": [ "T.LY" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY" ] }
	{ "brands": [ "T.LY" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY" ] }
	{ "brands": [ "T.LY" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY" ] }
	{ "brands": [ "T.LY" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY" ] }
	{ "brands": [ "T.LY" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY", "Jared" ] }
	{ "brands": [ "T.LY", "Jared" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY" ] }
	{ "brands": [ "T.LY" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY" ] }
	{ "brands": [ "T.LY" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY", "Jared" ] }
	{ "brands": [ "T.LY", "Jared" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY", "Jared" ] }
	{ "brands": [ "T.LY", "Jared" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY", "Jared" ] }
	{ "brands": [ "T.LY", "Jared" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY", "Jared" ] }
	{ "brands": [ "T.LY", "Jared" ] }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Get Started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?cid=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113-0-%EF%BF%BDid&utm_source=DV360&utm_medium=D Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY", "Jared" ] }
	{ "brands": [ "T.LY", "Jared" ] }
URL: https://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?cid=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113-0-%EF%BF%BDid&utm_source=DV360&utm_medium=D Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Model: Joe Sandbox AI	{ "brands": [ "T.LY", "Jared" ] }
	{ "brands": [ "T.LY", "Jared" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 12:20:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.981288435329754
Encrypted:	false
SSDEEP:	48:84SbdIjT8rHlidAKZdA1uehwiZUklqehiy+3:845wopy
MD5:	A2B1B67A7128BC2F3230820706EBD124
SHA1:	11F08A175D18A347B0C04548258CAA988F5279E0
SHA-256:	639C439C7384AB04C2C42689D133030357CA89BD4C492B7C0F26C04220F864B4
SHA-512:	ABF4DB3CA5562C40D217B67E618173605C56759019D1DB6F76B4C3B6D3EBB29F01CFFBEE078355BA75926975EB67C413C87B0603250CBF60D0B9C4DEF69F4C8C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....-<W.K......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.Y.j....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.j....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.Y.j....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.Y.j...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.j....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 12:20:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9968674805230453
Encrypted:	false
SSDEEP:	48:8lkSbdIjT8rHlidAKZdA1Heh/iZUkAQkqehZy+2:8q5wO9Qsy
MD5:	29418900ABC53FCF14B32512F8CCD9E8
SHA1:	B0AC01F91473B377F73F02E479F66D9F93BFB341
SHA-256:	EBF15DE44D5C4C44E7220AFAA489189A7E5DD019EDDBE2020F7A77D677E16559
SHA-512:	D83D704609DD04F3ABD15A9D2D267BAC1B226CAFF36E30E9F1CD75A7F21FB18A9516258000EC640ACDF68A0255E84D852453D6196C6A11715A144BD409D72E09
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....VA0W.K......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.Y.j....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.j....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.Y.j....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.Y.j...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.j....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008820143076716
Encrypted:	false
SSDEEP:	48:8FSbdIjT8bHlidAKZdA149eh7sFiZUkmgqeh7sLy+BX:8F5wandy
MD5:	A354B626B03F4AB89FCCC8CE06FB0B47
SHA1:	20F00133E880D683C6E93798FB92FDA38000ED85
SHA-256:	5659519811339F7EF34C668A2B6A8227FB49C38AF5D2FF5CD7263E5DF72D2190
SHA-512:	809797E144FAFFF8722A7B56B9A15BEBEF3F785480C1FE48AF2E7ED34857FF54A574AD9D4702C12E74EB87E47B07E366116DD84988F1FFF440945AFE8F873AD1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.Y.j....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.j....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.Y.j....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.Y.j...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 12:20:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9965995788458653
Encrypted:	false
SSDEEP:	48:8ogSbdIjT8rHlidAKZdA14ehDiZUkwqehFy+R:8T5wlTy
MD5:	8B1AE7E02671FF015425B04ED8EA6E95
SHA1:	6F2BB988242B302365BD97EC657B6A0DD719FC9C
SHA-256:	336DF9A65ED3D99493C3B01D1DC8727D631C149E989FE2A193117E3E07FF1CD0
SHA-512:	AD4D5049AB04D6E7C0B952A94354DFE04A25C1CBA0877E2CCE65C9DC0F6DC34F14663A7F2F0B2147EAE6AA47F32AE659B10BEB8B7D16C89573822FE473301B39
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......)W.K......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.Y.j....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.j....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.Y.j....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.Y.j...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.j....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 12:20:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9845171353932636
Encrypted:	false
SSDEEP:	48:8QSbdIjT8rHlidAKZdA1mehBiZUk1W1qehPy+C:8Q5wl9vy
MD5:	715057B2EC08DE8DF61FE75E15371BAB
SHA1:	2BEFB3610A9259A9343B5EC9C4F5D468AD787B60
SHA-256:	9B0F732A0DDEB71E9698F4E10B99DB0FED65482B7C7FC7DBF264EB662B09F24F
SHA-512:	5A3729343ED4F00948DF96829B4082B6B797B6F89FC75ABD36B063D971720220442A404CC7C573D4F256D77808A42CA0CC2A0732E6A8F57A688BE5585BFA4987
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Xh7W.K......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.Y.j....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.j....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.Y.j....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.Y.j...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.j....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 12:20:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9985926114321444
Encrypted:	false
SSDEEP:	48:8WSbdIjT8rHlidAKZdA1duT1ehOuTbbiZUk5OjqehOuTbdy+yT+:8W5wcTyTbxWOvTbdy7T
MD5:	491CB7DC4EF9876E35B9D10BA0666AA1
SHA1:	DE67440E25392EEC69F30643D81FC857BECA7B93
SHA-256:	9435C322E5932C0B1A78C78C3E4F8E2524CFD9F086B4DDCB8B4111D254F31700
SHA-512:	99EB6F8429067923B4ADF2B921FC8F874375962ECC4A315436760987682EDA253399DD69BB756F2D8FC7501D0635378C80CAB6967BA2ECE22109715AF5348B67
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......W.K......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I.Y.j....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.j....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V.Y.j....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V.Y.j...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.j....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	dropped
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	dropped
Size (bytes):	2690
Entropy (8bit):	5.398083497267717
Encrypted:	false
SSDEEP:	48:Otg7xNqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:rN7Qabhiwdicju8WhRHMnTx
MD5:	2669D16AAE166D157B8434762A199620
SHA1:	CA7E08D45D0D469ED57825C28CB214F421311F97
SHA-256:	944A37F694B55DE268A0BF52DBAE4E12F12C4AE09EE5C8D213BA05075C2865DD
SHA-512:	51CCCC87145F0B0098B81BEA1506C726BB249E65F3B5FCC853F1FC4D4E55716F1F9318E43A2A0B31DFC4C968C14EBAF1EEFB9331C6DCE1B561459883DA7E9432
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(let c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18563)
Category:	downloaded
Size (bytes):	18631
Entropy (8bit):	5.207046962303426
Encrypted:	false
SSDEEP:	384:QLExv60IOUhZVezJOQ/IIy/8R89TSU2GzXL:HxenezJunyOTSU2M
MD5:	C9C777F9757507517BE23D77545ABCBD
SHA1:	D31A719611306B303F667EE44D2A903FE0AC77DE
SHA-256:	60F71047C4B9278EDD721585E49177A13104723689209884343D5F579707DAB1
SHA-512:	21F0221CDF20DB6A60B3FA5BC5E5F36116C6BEF84A20763E565479CD3F9C0A6CB2C4AC6AFFBB60F5B9C9AF19C8858C39E2AA76F0F2D48085BC2CD9E51DF4E0C5
Malicious:	false
Reputation:	low
URL:	https://r.wdfl.co/rw.js
Preview:	/! Build 025a77b6f7387aecea2b73d874c35b7d43b312f0:1733815879152 /.!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="https://cdn.getrewardful.com/pa

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2015)
Category:	dropped
Size (bytes):	39743
Entropy (8bit):	5.519773678504751
Encrypted:	false
SSDEEP:	768:7kdrFoP8dQJ2VyJt3mS5GitugTI91kR1T4pw6HWsu5BRSFJ3x4qxByNzqUs/Ea39:IWJq2tzbJ+kgG4su
MD5:	B1AC06782AE68F33B82F39AE2A4B3F10
SHA1:	B756AFC21AEF9D68365766F929A496380465B93F
SHA-256:	CDA3C0BEF2E5FBAA225DFCDBFD2D1CCCFAC9C19396E669E74D75E937EA91A2A6
SHA-512:	EECC4A7229EFA5DAC1518F401E821C9938600C9A0A27D939B2280280B1B507DD4861671B7C42766BC569FC41218C0648A94137A42E5C35B5C3C7948C5FE13A67
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b};const ba=(new Date("2024-01-01T00:00:00Z")).getTime();function ca(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}}function q(a,b){return b?a.g?a.h.slice(0,a.g.index)+b+a.h.slice(a.g.index):a.h+b:a.h}.function da(a){a=a.A;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	321307
Entropy (8bit):	5.788579332879531
Encrypted:	false
SSDEEP:	6144:qH6MzHxArYQLabgZWivLRlY77WVRsNOWOYu2WChzAfrz0MYYd:wHxAHL15WOEWoMYe
MD5:	66D4C92711A89CAC660F07E5B7D4DF42
SHA1:	51862225B43BD050333577B65426B613A6838DB8
SHA-256:	84DE6D4DABA87322B00F72496A83DD9FB49D03B9CD5058E2D490C9E0E956BE31
SHA-512:	2E4249AEE430A10C8E1AB4A633F2239039D491D4145ADD80DE3EEFF10C13F5687846F6DADA438BCF5708C3B3778E060EC8063CC55CEB9915768CDF35180B184A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5561763581314444&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1733836861&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&pra=5&wgl=1&aihb=0&aiof=3&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.3221&aiapmi=0.33938&aiombap=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836866989&bpp=15&bdt=6356&idt=6027&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=2977550825633&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=6065
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition:

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3083)
Category:	downloaded
Size (bytes):	16000
Entropy (8bit):	5.496666646952107
Encrypted:	false
SSDEEP:	384:NDpgEBps0j+LgtupqWkB3q+MsxscWH8kxaakUiP/CWFZcnM2ls:NDpdpsi+Lgtu8Ta+MsacWHX0HB/CAyny
MD5:	AF8BB3A01D1257281856D15F50E57A2C
SHA1:	BFD69188583B254A26AB65D973C1F98E6F9E6D6D
SHA-256:	40A4B33F75E3F736C246F5ECE1AEAFFE7BCD33BC15EC087B4708BA389DF2D86C
SHA-512:	2E9631E60F9B8227D2867994D8882E0636565191195CC11ECA8D0DBC642CC6631DF320BBA38C48D86F2A8A315D66DB660E78A086CAFB10749D1E1428E3172B0A
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241205/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;var q,r;a:{for(var ea=["CLOSURE_FLAGS"],t=m,u=0;u<ea.length;u++)if(t=t[ea[u]],t==null){r=null;break a}r=t}var fa=r&&r[610401301];q=fa!=null?fa:!1;var y;const ha=m.navigator;y=ha?ha.userAgentData\|\|null:null;function z(a){return q?y?y.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	273291
Entropy (8bit):	5.56237567234352
Encrypted:	false
SSDEEP:	3072:kkdOdmUxgK3frCdXd0mMRoSN5bADFXBExpE2c534539rHEytTD3PjqInYRa2XXi:ZwgK3zCXI0rExnc534Zlh3PjqInLUS
MD5:	E83F5F706A3AB41DB3BB30661ACE5DFF
SHA1:	2CD2DB42AEA31CA864A2E77F1D6FEA6834B2B3AE
SHA-256:	F86D3527C11153893AE17A12B5F5C9535FB4832E5765E6DDD9682B8FAC1C067A
SHA-512:	6285F83ED0F67E1EADCBF2A5EE36B98BA510FACF7BA2313B8C1AD2018027A730F9AABFA93B382E67EEEA1A23EB20C2E94E97CEB23B61F12A1032C42657F0CA7B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-10875945736","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3679)
Category:	dropped
Size (bytes):	160117
Entropy (8bit):	5.5981972154534185
Encrypted:	false
SSDEEP:	3072:Dk0LnA+Peofg8VW0TSFbo3/y59hvuswViJNLWgleA1rQKqI7lWT3J3NmcRXftI3V:Dk0LnA+Pe0g8VW0TSFbo3/YPvuXEJ9Wq
MD5:	D4F7AAAF628D404D79265AA611391049
SHA1:	2D013290008CA82AA00CE84B831A0964A8D3291F
SHA-256:	E60004EAC775ABC91A04A7E395C294CACB6D667028C34AAC2E17E62BF670D375
SHA-512:	B49F4334321C7542FB303316F86730F27BE605B99FDC607582154FFDDB49588A37B4AB40358BC2C2A4EB77D6AEFDF2B7D556770F85648D2E165D242379AC7718
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	319146
Entropy (8bit):	5.584925312930591
Encrypted:	false
SSDEEP:	6144:p4ZKwgK3zYAqI0rExnc534D8lfjqIn2V+9SN3NZBUl//:iZ73UAsrcnctX9SdIn
MD5:	822CE07C6B6E13973E60523DFE7DEECB
SHA1:	D4916DA37E1096CE74ECC8CF4E11AAA80C08ADDA
SHA-256:	F4C4B26A5AA17EC70452AC0381EC92EC7B87A12B2199733AB21FF29B43C1DB01
SHA-512:	77C0C9B7FED6D24320CD64D3BC3974E4E341A698127415F44A51391AF8DFA4348B5A80054C660D291A88A5F32AE559D9E0A2798D7ECF054954E82B81FA98C396
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (27719)
Category:	downloaded
Size (bytes):	76594
Entropy (8bit):	4.905979348661561
Encrypted:	false
SSDEEP:	1536:rS3+nvKMA00BlKbhNPvIpcqDPRuQmXSy00WssOsFMT4Q34vr0XxS6x/3y:rd0BlKbhmeqDP4ZXzx3i0i
MD5:	D812CC73EC3B5C8044759C672531F8FF
SHA1:	D0F1D2FC4BA194F294DCDFC3D75A407E98B96C25
SHA-256:	D5E4EB6B1ED3372CA20F142DBA1D656FD3650C98E9BAD5911863A4F55A7833D3
SHA-512:	D3D23FDE841E6F467A4F80D5249F3143B1DB537062376313E3F961BCAC83DF4CABA0287C8177282FB6F69710580C20798F6ECE4ECABDEA09592F96A959027726
Malicious:	false
Reputation:	low
URL:	https://t.ly/?ref=expired&url=https://t.ly/8cSDx
Preview:	<!DOCTYPE html>.<html lang="en" xml:lang="en" lang="en">..<head>. <title>World's Shortest URL Shortener \| T.LY</title>. <meta charset="utf-8">. <link rel="icon" type="image/x-icon" href="/favicon.ico">. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta http-equiv="Content-Language" content="en">. . <meta content="width=device-width,initial-scale=1.0" name=viewport>. <meta name="csrf-token" content="NhOCONWyHR1CBh5VgGSRkvAGj2m3hunovu9HTBzV">. <meta name="google-site-verification" content="E-8wTC_iQ_XL7MVGQrV0vMLepQK7csuDVGhPZ2jZyvc" />. <meta name="facebook-domain-verification" content="91rmo05e67trq3diwx8f2g8cs835d6" />.. <link rel="manifest" href="/manifest.json">.. <link rel="icon" type="image/png" siz`es="32x32" href="/favicon-32x32.png">. <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">. . . <script src="/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js" data-cf-settings="0fd08

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2292)
Category:	dropped
Size (bytes):	23142
Entropy (8bit):	5.506833894491201
Encrypted:	false
SSDEEP:	384:P6Thq18PpXQj6+Sm5xYMS0TwG7e80Jugvq85Btipids5FVZXh3buy44DEWyOriB3:P681upXa6LPh0TwG7e80kgy+0piq5F36
MD5:	F2C9765E4E82C0D058935C13C7A0E661
SHA1:	866CC425B3930C27D15C549AEA1F620D423F0092
SHA-256:	B39FDAABFE63FACA7D21B1EE38C593BB29663D70DE9938ECA8DD6159F405FE9A
SHA-512:	500B012089A7A1C7C9351F2B6DA477DDDB2AFC9F9C6CA28DFC0BBD3035058B4B5E7EA524719956745114CDA66836FCF0E5C380E80E21204264D59E1FA4F789AC
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return ba?!!q&&q.brands.length>0:!1}function ja(){return v()?ia("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!u("Android")\|\|ja();ja();u("Safari")&&(ja()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ia("Microsoft Edge"):u("Edg/"))\|\|v()&&ia("Opera"));let la;var w=Symbol(),ma=Symbol();function na(a,b){b[w]=(a\|0)&-30975}fu

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2292)
Category:	dropped
Size (bytes):	23142
Entropy (8bit):	5.506833894491201
Encrypted:	false
SSDEEP:	384:P6Thq18PpXQj6+Sm5xYMS0TwG7e80Jugvq85Btipids5FVZXh3buy44DEWyOriB3:P681upXa6LPh0TwG7e80kgy+0piq5F36
MD5:	F2C9765E4E82C0D058935C13C7A0E661
SHA1:	866CC425B3930C27D15C549AEA1F620D423F0092
SHA-256:	B39FDAABFE63FACA7D21B1EE38C593BB29663D70DE9938ECA8DD6159F405FE9A
SHA-512:	500B012089A7A1C7C9351F2B6DA477DDDB2AFC9F9C6CA28DFC0BBD3035058B4B5E7EA524719956745114CDA66836FCF0E5C380E80E21204264D59E1FA4F789AC
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return ba?!!q&&q.brands.length>0:!1}function ja(){return v()?ia("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!u("Android")\|\|ja();ja();u("Safari")&&(ja()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ia("Microsoft Edge"):u("Edg/"))\|\|v()&&ia("Opera"));let la;var w=Symbol(),ma=Symbol();function na(a,b){b[w]=(a\|0)&-30975}fu

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 438 x 438, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6616
Entropy (8bit):	7.744280326763607
Encrypted:	false
SSDEEP:	192:6YBgKwA8Fo885H+TPrk5/nyQhhUe4I4joYM:6vKwTod5eTPrkEQL4FM
MD5:	5CA625648F44C7744A57E73B5D88007D
SHA1:	F19FD074E7B26BC8863550862C62D8DF7245A51D
SHA-256:	2190155B6875236EBF22C429A1B26E81AC6A7F21EE1F344AE03EF805BBFBCE8A
SHA-512:	C01EC7854500A9AF499534941AC467F0063CEAFCCECADA7D0967173923F730EE811FF9799B5C0B752852DAC97F7F390D78B5E9F37EDC892E23C8FE6C0CA95A2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................p....IDATx....q.G.........H............p....0...............>L. .h..f..y.P.......7.wJ.5. ......pH...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l....0...:v...Xk..]..s...@...T4E....."^.`_.#..#?.;.>..V.uJ.K.VJy...".'<.>"nj...../..'(..".=..].uq....N.=Q)e....n_k-.+..+..<......kjl.......7G-......\.;.{l.$..$.G`.L.`{..c.../...Qc.....@...T.....6.R.l.."..HE....`. ...@

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2610)
Category:	downloaded
Size (bytes):	8009
Entropy (8bit):	5.3334261122657995
Encrypted:	false
SSDEEP:	192:iwS/yVNeAQ5677f79S4E2gMJF06Z0IKqEbOA/iZ8Ma:+Kni56HD9lgMJF0fLSA/i6Ma
MD5:	B64043ED9914D7A2AEBF7526B92D6D1F
SHA1:	252CAAB0B2BD1E0B7BBF88F650E561217BD86852
SHA-256:	6F4FEAFC5D41EF850BE0A94D47CE184570945701729A779B6A98040FC0241588
SHA-512:	F169631788F9F438599CFD72BDD530484D8DA12EEA8285820271C82A02B12C4FFA29BBB7656D84A9E43A7FDCF4A815FB7FA0CF30F93BE214386150B19E8FF411
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241205/r20110914/elements/html/omrhp_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&c++<40;){var d=!1;try{var e;if(e=!!b&&b.location.href!=null)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.i)if(b instanceof r)b.then(c=>{t(a,c)});else{a.i=!0;a.j=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.i?b(a.j):a.g.push(b)}class r{constructor(a){this.i=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|c===0)b+=`&${d}=${enc

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	63464
Entropy (8bit):	7.984657492422969
Encrypted:	false
SSDEEP:	1536:Araj86hfUYoCo/cC+O/Nayqiqh1p/uko8voEoHUfIxw7FBt0B:uajpHoCov+O/NphqHp/uko8vaZw75Y
MD5:	A4F3CE402A4C243BD1DC354018F45F99
SHA1:	1A05157B7082A204E78A60234EB2FEACC32B020B
SHA-256:	B959143BB29A4F3B8205FA4CE66EA75CDB38A35530A0450FC6C4DE4F46F8794B
SHA-512:	C59C1B5E885B6B28E402B99B79074FDEAE63B1501E756741CD9CAB03C527357E82564565A7758575B8B8E4AE69DD83A91C8470FE643CC6B35F5BE78B88B8CE76
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,.............. .IDATx..ux....g..Aw..N..I..1.8.....6....i.B.6n.:P....cl..Ah..,..t:..-...d..d.....q.......yw.y...~......?~......?~......?~......?~......?~......?~...a.n7A.,....v..n7I....\|>..c0..].DQ....~..............x.....{...n$......q....a.^/...........xX.......m..n..\|^....3g.p..,[^^>g..A.4..M........#.b....z.6mjjj.jg.Z?..#....'n.>....v..\$.+..$...../........{(....i.ky..^..oy...A.<x.....ApM...OLQ..~_~....w.....kd.]...jii...........\....WG.'...d.^...X.u8.UUU.\|....?..f.q....\|..........,{...1.......8.h..w....y.?.\{......^..].<y......,_..q..=:2.......s\|.5k..\|..;.........,.....y.....a6..n....L...n..f..TWWs.:;;o.f..?.<.....N..x<.........++.7i...V..s..q.VUU..bbb.&....=...#......vuu.....]....7....<~....'....E"..6....O>....._.2N....d...#.}>.....~.X....[....._VVf.X.K..4R..}.Y...,....G.$y...Q..?...2s.=z..g```... .....r..... .\.......P....:.O{{;.....#...7....{l......Cii)...d\.w....m2..].._..........M.w.^.0JhG.....

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	5.283083902719557
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaiBa18RiS2q6SOAFLCmK8dRaMdcebcaS3jfU0cMoU:dkK9dg5qEa6f2qXOA0eRacWjfURacq1
MD5:	B769CE0A3AD2137F9971854632780DF7
SHA1:	6B2F31DFCB2369F0BB0A42ACFFD4090684179097
SHA-256:	7BF36CBF2E8D5F69C2913EA87FD43F46300AD47CC31099AB4204C640F4D7D902
SHA-512:	80DC26EBB838E23BC8AD2F19C5BB6DA0FB7184FF1CEBAF19304356CB191A7436528633A07DFE3A38A33048F037952C36F8B6432FDCA7DDE70C75C763444C2D62
Malicious:	false
Reputation:	low
URL:	https://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?cid=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113-0-%EF%BF%BDid&utm_source=DV360&utm_medium=DIS&utm_content=Prospecting&utm_campaign=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113&gclid=*&gclid=EAIaIQobChMIuZWA2aWdigMV6SIGAB26iC3ZEAEYASAAEgJnRfD_BwE&_=32425113_%3D400452569_%3D224470660
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?" on this server.<P>.Reference #18.4df57468.1733836898.85b5aff.<P>https://errors.edgesuite.net/18.4df57468.1733836898.85b5aff</P>.</BODY>.</HTML>.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15996, version 1.0
Category:	downloaded
Size (bytes):	15996
Entropy (8bit):	7.989012096227512
Encrypted:	false
SSDEEP:	384:nH4UArsQ/nHYjtuHgovTC+H+b23+kMw/KjK0TQ59u98pgQXk:nYZQjtuHgYGbrMyjDiJXk
MD5:	CC536892EABDE0EAEB81493BDA8E189A
SHA1:	15C0180AD7BDF9D0F963747447BC9446FC42D2DC
SHA-256:	97399A2914C593DA2895D9729AA0170A1956E91EE54CF7550696691949558A37
SHA-512:	94F605C4C4FE76EBDB2D5428C6BA69F83B75C65B6932251C0C3E90F92CC1F421FD9F15E81D5985693DC564B8644D90A26DA3E9C63976CF5862ED54D5ED0C4320
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......>\|..........>...........................<..:..:.`..:.....p..~.....6.$..(. ..>..N.....5xn.u..b.....c..<..Rw.H..q.(.....9A...^.=h.%J...4.\.\.[....[....h.j..AP.....a..]N.o....6.a..uO..R.\|o...wO..t....s....^F...Oy....IN^..X...9sg...(;..L.....5.s~...?....%.0.f....b.. ..;.. "k+.v`.....1kq.\mqLp.]\|..Z\..O......=.......h..,u.................y.h.o.Z..%.....g#..B......V...3.r....J..>g.-rU?+.3A.....C...... .21..f...Z.......P..o..g\.b... v...6..0...b.....?..-WL...Z2...1..Q./....... ..C..G.^r....O......io;.o..4.<....7.Pm..!.Nu.=..Oc............e.w.g.....,...c...0V.P...R.){..u...>.fi..S.w.G...-..... $.8......w..hp...T@..Go....).......;.....B.)..p.\.?.-KC.S.5..pX9...'.!.-....R.Sg.>x.o.yP......S....a...m<.+".t%..3x.?3M;....k.....I&I.3g.26...p...}~....X.x..G.<)..k..U....AZ..A@....Cu..Tv{...\|v.04H.$Xc..E.)<...!........^..~.7P.u...xH..rX..8O....y.k(...0.p 0.%.U...Z...%...\|LlUJ.]L_...9..AX.$E.$.sa.(v8L!...rc.-....I..W..........^U...@.....3P............M..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17390
Entropy (8bit):	6.016264027010307
Encrypted:	false
SSDEEP:	384:szbqbQCWIVEvaPVh/aU42qHi5PIUHzcvb9VXTVNyMhLME+/VQVTq4ADcIE:oq0CWbmop6zcT9XNNZwgADcIE
MD5:	30FAB8826E8D4E967EF77DFF099E56ED
SHA1:	A9EBA5BAE3116025DFD1BAB619114D49F29B49FA
SHA-256:	6E5E0873487906465EBC2DCC4F78778D52490D199D74B996AB94A2B3B69F5547
SHA-512:	C1895442141CD732A878FC9E5426D2A6BCDDE733D0A164E929802A0FADA345264D7CA28354C050AAC2B3D50865636D791DEFA3FA2D4D4E840763C0BBD76FE549
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"T0BYZ_HeIMCL9fgPmJCT6A8","injector_basename":"sodar2","bg_hash_basename":"9YadZKAvDfVs1YHnOGS_YpAGPxas43qCCMtu3GVxRaw","bg_binary":"rUrmyMRhZgpfA3XbqB6VVrSkHlcWjnLu2xOA/iuUyF/Fiy9WQGCP6KY7xCA22uVRPtm/xWof2tTlzlVWWInnOPB+IAyNNzrj895FcDAjfHf7MaMPK/wwsAjK3aeXTxCP291XakjF7i+9AgtnHsGB93l6jDCfk2ivtAuy5XUgGipX/I9GUY9kMSXlAeDZ6bHVciI0y9mv1RYdnKbMkR9+icW/4C9fKO1ptdmf42XzHD8bcd6rguTh4QQDmtcnXup+R/Qybmsnh4TdLJqa8k/XMKw1+J2rcWHfUDcQ5Sf1LThfVv0k1lR7XMb7/aOP2J/vlC/K6DIiO8x5O8JbgOFSdDj3HRwgOorOv9dHID4DBr5H9W59I65hFgdvsPR385RIGRi0Uu5AgGCeSHi1tETHElZ8g8I16UoCCGKEuNXAmxThWvul9q2IbjI8ni58qkoI9S99Ogx7E7qgeV1IDgI0VZN4TNlQWoSYZr5d0tLUhZhTYUHhvXfQVw1y/Lj07ZVp0S+Uk6+dqfF5ExUhxn1xrQMSr0rQFI8V/+RwGJ5lKv3OTDlqPn5E1A2PRcf2/hjClpcvwUJuXqSrxkjCRrS8gcywelydwNcWUcqoCYqp1Nm94Q4BMyGKR0f+IeRDG5JjrAsRRAc6SoyrNuepxMI3W0J85dxH0PFIU5rG/ESha61ZOmasrZpSdDmEaxIbsIm9obV/UqlzUK/jwOtKV//FUU6hfqsvDgREom0WK9mNqEJpypWrBmvN2HV42iKi2yQLBRQVec5iZZU7aza2+WcKxNQUVwNZcFHqBHe35Up6glPMUPeePNL+pYwQx4/41X/GXGHvSK5+uWUJz1avP

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NDkzMDY4NTAyNDc0Nzc3NzE1Nw%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CkUANDkG5VWRI8H_M-MuZMIUZtt2KziDlWy4nc1H55QnfdW50Q4BxMkWa-UkH53P68aTub0Tk0cJN-VhoJIsxJpFrgQE_crQ19ZrGOfmpxXNw-jF8
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=adelphic_mobile&google_gid=CAESEJiTTycozT-BhtecgGINDbQ&google_cver=1&google_push=AXcoOmTr0ZUQS-GAnkyAuLBskHiOG79y5zMUVHHkNTjuduVPysz0fUDIpja75Xv2UMltnximQiHDaW-6QrLXcOUBeXoTObYhfOYFx_c&google_hm=I7B6ckThTZmnCI6EpDhnug==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3008)
Category:	dropped
Size (bytes):	444253
Entropy (8bit):	5.579225924318821
Encrypted:	false
SSDEEP:	12288:jESFG/aSRTZMZkWruvfLAhou21yDC9mEHeM2hGpC/DRlSX9IW1gt+tMUDUm67QGH:jESFG/aSRTZMZkWruvfLAhou21yDaHe7
MD5:	6BBDCD8B055F4F03C02F8A7C5C78FE01
SHA1:	2536BE9887635800E2CA44A7E7AE3405D0FD6A23
SHA-256:	A7CAA8B02E080B62BAB75AE53181045399F5FDC5E4EBCF824B34C22BBD17CF25
SHA-512:	EC4B00B3E15A0A4BE9CA0570BE66D02F0F3FB97BD8E8D3CB5BD6988DE675D76C9AC733A6D8B2C2E4A50B511D0BF222E25A8024A180DDB75F7056F0BB1ED437DA
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,fa[d],{configurable:!0,writable:!0,value:b})))}}var ka=Object.create,la; .if(da&&typeof Object.setPrototypeOf=="function")la=

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 728x90, components 3
Category:	downloaded
Size (bytes):	13250
Entropy (8bit):	7.938299972426246
Encrypted:	false
SSDEEP:	192:4fxsOBwD3FRLhFRA+tuEITdXoL8xgOedfMT+w4mcdRec9cHMah5CYQsYFdRZY1/H:Usq/EI1BoRMT+WqRyisYlZY
MD5:	881D78B6434D14B959F2B5ABF890612A
SHA1:	BEA7B49A22B4887DBE0C679E2B05609567C38EFC
SHA-256:	F9949BB270185702A20A3A40606FE3835AA360CC4591836B931F670562D63E69
SHA-512:	702013C7453F551105905C7E396F0F190931A60F3A3C2B6976605E878772C916291A134BB014512B7A5E7DC5481DB4C7EE1042C2C2663AAD5C9894BADDF12B35
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/17404902169808334130
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\......Z....".................................................z..Y.r.........D..V..............O.0c..3<..c.f..AF..y.H...\|......../.Z..1.I.&F_.3{v.@.......+.8x.>..........Yi.!...c.4..>zn.+.l>j.p..XY=A...Rylz...G..tEi~.F......}[68...q<}]./5...U....\|...iz..w8m....f.......p.Z.Z.gl.......e.....^.KYk.QW...........*f..3W...}o.\|0.......[.=.W.oN.$..6.?.8u.]F]>..._(n..g.J.........O!zOY......J..-...k]...../t&Y...w..oEA.7Q....~>..#.../.7g..ljWm.........7iM.....?.a_%.8....VpB.y..<.l$...4.-..4\|X..[.o.]...{.[I..>..[.j1:....>>...8.P.....TLs?Ad.u.>I.9d.c.A.../.^.\|!@l.p.m.j'..j6.........:..k....q..i.a./oe.....<.............ao..,.....ce.+.....>l...@............>..r....8..8.>..@...0.<....0?...........................................'......K ..........&../..>..(E.................91.L.n.....9....I(..............

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36050), with no line terminators
Category:	dropped
Size (bytes):	36054
Entropy (8bit):	6.1237088104493385
Encrypted:	false
SSDEEP:	768:KN3BofrbITxvTH4snkIJfj2iSJZZGc2ZAOiBsvCU6FTgqni0C02ZpP6hMkmOh4c:q3inITxksrJfqiSJZZGc2ZAOiBsvt6F7
MD5:	9A3CB019EC914D7AEF28D14551C86F0D
SHA1:	F3FED5251007D65CCA6AEE7CD7929AF1F94E548E
SHA-256:	05B4E3622C5AA6F5080D106AB1BA1D2137C1BACE93DF65A3814FB1345318B35E
SHA-512:	119EDDC0FDFEA26DFC4F6EC2783E5160494B8647BB6952377DE7C1CBC9F18340355E099530704568CC86D6A4016C85EC51102BD249FA0D47371110CF549450AA
Malicious:	false
Reputation:	low
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:9px;right:0px;top:0px;position:absolute;width:31px;z-index:2147483646;}.abgc{display:block;height:15px;position:absolute;right:1px;top:1px;text-rendering:geometricPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.abgcp,.jar .abgc,.jar .abgcp,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgs svg,.abgb svg{display:inline-block;height:15px;width:auto;vertical-align:top;}.abgc .il-wrap{background-color:#ffffff;height:

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmT6jjqhi0BrUuVNWpGVnr43MSt4bBfR9inK9Bh4wxCeM2-kcmSX4Sy4cMsg1OuvLKC9ls-o6x6rIv5BD-6D15OwP3ckElsKUFQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53620)
Category:	dropped
Size (bytes):	54915
Entropy (8bit):	5.737004384577677
Encrypted:	false
SSDEEP:	768:ja4fn7w2hg8issWLCa0rCZQFwxJjbJMFPaQoqdDLTs6QkZYGp3aeaNAnFvVUY48O:ja4Tw2hxi6amuwhKxX7YNAnUhK296Vy
MD5:	2CBA7F75658AB926943C5ADDFC7D765D
SHA1:	D1A63F000BCE30A4CD6C9BF18972B4E4401C181A
SHA-256:	B8EEA52234018594D4B3A34DC4675270329D1946174A47AADD87780C5F88B5FD
SHA-512:	3381415ABF0AFDF27C42F19A1151EBE903EB59312D0CF006E272A540F6D6D8170A25AE9223DDF90BACE88B840554FDF5F09BE4020FEF59AA8C006CA63C35A399
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function S(d){return d}var v=function(d){return S.call(this,d)},F=function(d,w,a,K,T,p,Y,M,W,L,u,X){for(X=(L=84,a);;)try{if(L==30)break;else if(L==w)t.console[Y](u.message),L=77;else{if(L==62)return M;if(L==84)M=p,W=t.trustedTypes,L=K;else if(L==K)L=W&&W.createPolicy?91:62;else if(L==d)L=t.console?w:77;else{if(L==77)return X=a,M;L==91?(X=0,M=W.createPolicy(T,{createHTML:v,createScript:v,createScriptURL:v}),L=77):L==92&&(X=a,L=d)}}}catch(G){if(X==a)throw G;X==0&&(u=G,L=92)}},t=this\|\|self;(0,eval)(function(d,w){return(w=F(47,22,34,49,"bg",null,"error"))&&d.eval(w.createScript("1"))===1?function(a){return w.createScript(a)}:function(a){return""+a}}(t)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;ch

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW&google_hm=22210ca7d02b196e2njvxb00m4ihpoje
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3083)
Category:	dropped
Size (bytes):	16000
Entropy (8bit):	5.496666646952107
Encrypted:	false
SSDEEP:	384:NDpgEBps0j+LgtupqWkB3q+MsxscWH8kxaakUiP/CWFZcnM2ls:NDpdpsi+Lgtu8Ta+MsacWHX0HB/CAyny
MD5:	AF8BB3A01D1257281856D15F50E57A2C
SHA1:	BFD69188583B254A26AB65D973C1F98E6F9E6D6D
SHA-256:	40A4B33F75E3F736C246F5ECE1AEAFFE7BCD33BC15EC087B4708BA389DF2D86C
SHA-512:	2E9631E60F9B8227D2867994D8882E0636565191195CC11ECA8D0DBC642CC6631DF320BBA38C48D86F2A8A315D66DB660E78A086CAFB10749D1E1428E3172B0A
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;var q,r;a:{for(var ea=["CLOSURE_FLAGS"],t=m,u=0;u<ea.length;u++)if(t=t[ea[u]],t==null){r=null;break a}r=t}var fa=r&&r[610401301];q=fa!=null?fa:!1;var y;const ha=m.navigator;y=ha?ha.userAgentData\|\|null:null;function z(a){return q?y?y.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	dropped
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	273311
Entropy (8bit):	5.562421103985418
Encrypted:	false
SSDEEP:	3072:kkdOdmUxgK3frtdXd0QMRoSN5bADFXBExpE2c534539rHEytTD3PjqInNRa2XXF:ZwgK3ztPI0rExnc534Zlh3PjqIn2UV
MD5:	E67188064B9DC63523A27973648F30B4
SHA1:	1616BD5194AC6BAF59A8943816750ACAC4A104A8
SHA-256:	2B56A951DD5A5F991E64F653FB4C8460F522ED1251BF955280531A4C59F43C1C
SHA-512:	C00B08C8557CD1C68575E38F4F3AD89432EB328237A0259D7C2DBC3770CB6A914AF488BB2E02E97A304B7E99EEFC4B75590919178B0A5C0FF65790DEC7780C12
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-10875945736","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=NGU5ZTY2Y2EtOTU3Yy0yNTEyLWYxZjItYmE2MDcyMWJiNTc0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=crimtan&google_push=AXcoOmQyRyNnUHFSVQHWv_-SRaTpyGhjTOUfztvh-5nR1folSWXH0ud88FM0djavSC3GeLbxCM9BcH0Yx8q_eMXgB48YgVJihFMf94Y&google_hm=krkd6CXtS5yGRgZY0Cwu368
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	dropped
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3008)
Category:	downloaded
Size (bytes):	444253
Entropy (8bit):	5.579225924318821
Encrypted:	false
SSDEEP:	12288:jESFG/aSRTZMZkWruvfLAhou21yDC9mEHeM2hGpC/DRlSX9IW1gt+tMUDUm67QGH:jESFG/aSRTZMZkWruvfLAhou21yDaHe7
MD5:	6BBDCD8B055F4F03C02F8A7C5C78FE01
SHA1:	2536BE9887635800E2CA44A7E7AE3405D0FD6A23
SHA-256:	A7CAA8B02E080B62BAB75AE53181045399F5FDC5E4EBCF824B34C22BBD17CF25
SHA-512:	EC4B00B3E15A0A4BE9CA0570BE66D02F0F3FB97BD8E8D3CB5BD6988DE675D76C9AC733A6D8B2C2E4A50B511D0BF222E25A8024A180DDB75F7056F0BB1ED437DA
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202412040102/show_ads_impl_fy2021.js
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,fa[d],{configurable:!0,writable:!0,value:b})))}}var ka=Object.create,la; .if(da&&typeof Object.setPrototypeOf=="function")la=

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	88347
Entropy (8bit):	6.012498663770754
Encrypted:	false
SSDEEP:	1536:21OADGC9md+gW9eXqksuPLHeGKCT/Z+5Cgr0TeF7h0J3sn87Ey1i8ic:ecd4uVzYueF108n8IU/H
MD5:	D472284692B371CFCF1E448FC7F3D3C4
SHA1:	AB4BEAB89FAE200D5168B1AB70F72C7354583F6D
SHA-256:	8BF5AAEC993749DA0F3F9668B4532C4B5C54B06FA45529EFA6AC01DC14F52951
SHA-512:	5784BBE508DBEB8B72F9C8407AD277C7F7FF3BE0FC9B1BADFE2828A4171EBA1F281DE6DA7A009516D489F6E78DA567038948F56835B654D58CDC09E9BE08EBEF
Malicious:	false
Reputation:	low
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3733793893"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_YEBYZ6mBO5KDkdUP6t7p4QY"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20241205');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;a!=null&&c<500&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if(a.tagName=="IFRAME")d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if(typeof

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3805
Entropy (8bit):	5.413850652057751
Encrypted:	false
SSDEEP:	96:GhOLzFZMOLK3qOLnOLjJc+u+OL7NMhOg7FZMOg93qOggOgEJc+u+OgjNE:GEdK3PC3W+vi93kaAJS
MD5:	FBBAA205EC8B176AAFB4FD3910A98ABA
SHA1:	C20F21E4FB451A930FAA7CEEEDFBB61A0BBF8245
SHA-256:	8B1BB264D3F4E9E18F183190A3C443C6409502514F56E670DC60EA04C40747DE
SHA-512:	67256A8D102DC171002CC092DEE0FBBACDD030F68DE1296AC243D400741D6E811553F0C5FEDAFB311CB09AAC2E43A385F5788F1CBC503D4846464570E378CC6D
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans+Text_old:400,500"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	245803
Entropy (8bit):	5.374565894982982
Encrypted:	false
SSDEEP:	3072:ZFD70FH4JUkvwVMOUln0zC0ygLKvBXmNK1xaLQPTZJT8teJwR2:ZmFDGln0zC0ybPe4
MD5:	E90A5B1DD27E0642273917A65B3234B2
SHA1:	CF358BB91831BEF9A411F25C45873C646432D6F8
SHA-256:	DBDAB31A287CEAFB5B96375C215398A3A9B109FC333BA0B20E7BE8D833AD3703
SHA-512:	0AE47F6880B94083D8E246D2B1E781A4F4BACC4236DF9BC3CD3A0C306E49F85C2A9F0B6CB7454A9B8158A0ECCF67750800FB33DDA1CB3B5C6FEFAF5FD44BBF7E
Malicious:	false
Reputation:	low
Preview:	__IASScope.__IntegralASExec=__IASScope.__IntegralASExec\|\|{},__IASScope.__IntegralASExec["19.8.556"]=__IASScope.__IntegralASExec["19.8.556"]\|\|{},__IASScope.__IntegralASExec["19.8.556"].initialize=function(e,t,n){class r{constructor(){this.logs=[]}add({storeModelName:e,key:t,value:n,timeStamp:r}){this.logs.push({storeModelName:e,key:t,value:n,timeStamp:r})}getHistory(){return this.logs}logHistory(){}}class i{constructor({storeModelName:e}){this.storeModelName=e,this.storeModelHistory=new r}set(e,t,n={locked:!0}){try{Object.defineProperty(this,e,{value:t,writable:!n.locked,configurable:!1}),this.storeModelHistory.add({storeModelName:this.storeModelName,key:e,value:t,timeStamp:Date.now()})}catch(e){}}get(e){return this[e]}getHistory(){return this.storeModelHistory.getHistory()}logHistory(){this.storeModelHistory.logHistory()}}const o={useSingleEvent:0};class a extends i{constructor(){super({storeModelName:"staticFeatures"}),this.set("useSingleEvent",function({percentage:e}){return e>100*Tt

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	downloaded
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Reputation:	low
URL:	https://t.ly/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DvB3D0MKT1uT9uXe5iTQxtjEwiFax9Kbo4_LJd6c9FMefhiC_QmTBpX5SWC6-C_hQtJHOCK9tRJbtZ8Zr2T6cQwA36Awsl3JC3DfpkPuGfNf_11yE
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 728x90, components 3
Category:	dropped
Size (bytes):	13250
Entropy (8bit):	7.938299972426246
Encrypted:	false
SSDEEP:	192:4fxsOBwD3FRLhFRA+tuEITdXoL8xgOedfMT+w4mcdRec9cHMah5CYQsYFdRZY1/H:Usq/EI1BoRMT+WqRyisYlZY
MD5:	881D78B6434D14B959F2B5ABF890612A
SHA1:	BEA7B49A22B4887DBE0C679E2B05609567C38EFC
SHA-256:	F9949BB270185702A20A3A40606FE3835AA360CC4591836B931F670562D63E69
SHA-512:	702013C7453F551105905C7E396F0F190931A60F3A3C2B6976605E878772C916291A134BB014512B7A5E7DC5481DB4C7EE1042C2C2663AAD5C9894BADDF12B35
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\......Z....".................................................z..Y.r.........D..V..............O.0c..3<..c.f..AF..y.H...\|......../.Z..1.I.&F_.3{v.@.......+.8x.>..........Yi.!...c.4..>zn.+.l>j.p..XY=A...Rylz...G..tEi~.F......}[68...q<}]./5...U....\|...iz..w8m....f.......p.Z.Z.gl.......e.....^.KYk.QW...........*f..3W...}o.\|0.......[.=.W.oN.$..6.?.8u.]F]>..._(n..g.J.........O!zOY......J..-...k]...../t&Y...w..oEA.7Q....~>..#.../.7g..ljWm.........7iM.....?.a_%.8....VpB.y..<.l$...4.-..4\|X..[.o.]...{.[I..>..[.j1:....>>...8.P.....TLs?Ad.u.>I.9d.c.A.../.^.\|!@l.p.m.j'..j6.........:..k....q..i.a./oe.....<.............ao..,.....ce.+.....>l...@............>..r....8..8.>..@...0.<....0?...........................................'......K ..........&../..>..(E.................91.L.n.....9....I(..............

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356)
Category:	dropped
Size (bytes):	21506
Entropy (8bit):	5.526210028843285
Encrypted:	false
SSDEEP:	384:fMxcoCk8pzcaBw9RoYQByXr1TzibEGuByg/pT7jIy81IDKY8LZpafVjEvcuL18JW:fMxcHkuzDzgXZTzigRyg/d7j7rDOZpa4
MD5:	AEC27EFC74A51013B979AFFAC0A4D050
SHA1:	C259A9A881242A63360A468DAC83911BCE07E2FA
SHA-256:	99BBDC5CCEB8B323529064975C851942115240F23B3BECC3116C2EEFF3DD5EF9
SHA-512:	BD3801F41B460E7CB5EA82AA0CD332D5881D4C41AD1442D2CE4C6A6FEDFD09B179D1D1355B4AE49AEC64865ADF8E69007D0445FF7A1F69526455D57AB61335F5
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=n,f=0;f<c.length;f++)if(d=d[c[f]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)} .function la(a,b){funct

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	63464
Entropy (8bit):	7.984657492422969
Encrypted:	false
SSDEEP:	1536:Araj86hfUYoCo/cC+O/Nayqiqh1p/uko8voEoHUfIxw7FBt0B:uajpHoCov+O/NphqHp/uko8vaZw75Y
MD5:	A4F3CE402A4C243BD1DC354018F45F99
SHA1:	1A05157B7082A204E78A60234EB2FEACC32B020B
SHA-256:	B959143BB29A4F3B8205FA4CE66EA75CDB38A35530A0450FC6C4DE4F46F8794B
SHA-512:	C59C1B5E885B6B28E402B99B79074FDEAE63B1501E756741CD9CAB03C527357E82564565A7758575B8B8E4AE69DD83A91C8470FE643CC6B35F5BE78B88B8CE76
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/17489467864391934481?sqp=uqWu0g0ICPoBEKwCQGQ&rs=AOga4qlk3o5v-ImXl8o4CcATd_f-DPcAsA
Preview:	.PNG........IHDR...,.............. .IDATx..ux....g..Aw..N..I..1.8.....6....i.B.6n.:P....cl..Ah..,..t:..-...d..d.....q.......yw.y...~......?~......?~......?~......?~......?~......?~...a.n7A.,....v..n7I....\|>..c0..].DQ....~..............x.....{...n$......q....a.^/...........xX.......m..n..\|^....3g.p..,[^^>g..A.4..M........#.b....z.6mjjj.jg.Z?..#....'n.>....v..\$.+..$...../........{(....i.ky..^..oy...A.<x.....ApM...OLQ..~_~....w.....kd.]...jii...........\....WG.'...d.^...X.u8.UUU.\|....?..f.q....\|..........,{...1.......8.h..w....y.?.\{......^..].<y......,_..q..=:2.......s\|.5k..\|..;.........,.....y.....a6..n....L...n..f..TWWs.:;;o.f..?.<.....N..x<.........++.7i...V..s..q.VUU..bbb.&....=...#......vuu.....]....7....<~....'....E"..6....O>....._.2N....d...#.}>.....~.X....[....._VVf.X.K..4R..}.Y...,....G.$y...Q..?...2s.=z..g```... .....r..... .\.......P....:.O{{;.....#...7....{l......Cii)...d\.w....m2..].._..........M.w.^.0JhG.....

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (668), with no line terminators
Category:	downloaded
Size (bytes):	668
Entropy (8bit):	5.274706096169439
Encrypted:	false
SSDEEP:	12:kxP4L8BMnupbqWGBfJHJO8KBGmUSaOWGQL8BMHXVpbqWGeSHAc8KBGzOzyWQ:kDBZGltKBGmUjNGVBQhGhkKBGy9Q
MD5:	D613FBB9AE36189D71BC92333DA6B9AD
SHA1:	1CEE3E495CB29FD84486FCA2B704D3383BE0B5BE
SHA-256:	8015A89C7E50B71A6597CFC7BC2BE462212AE1F57C37E40878A79E7550768CCD
SHA-512:	B697E4989A4ED589384A664AA911936E36D87CF1B3569B5E6BE77D639C0CAD78155FC664CD87FA5ED88FDAA9A72177BA998429CDE6588972DAD3C3C80F85A67A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfRrNYFEPbY6t8FGPDFnaMCMAE&v=APEucNXfFZwzoOLiXEkNNNiNJY5P7KyF9R7DUKoAm8KzM3JqEmY0xRmkwb79hh6wcotQh2svA3CcUxXiacIj76_stVfAXUfwgYDX0R7MICgTyV51NAv8cbA
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://sync.teads.tv/um?eid=3&uid=&gdpr=0&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dteadstv_dbm%26google_hm%3D%5BVID_B64%5D" style="display:none;"/></body></html>

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	624
Entropy (8bit):	4.177283376827705
Encrypted:	false
SSDEEP:	6:FNvQ3sCmqoXLjQLMzuezk7TWyAETXF79i8eJSJHOezXXdETXF79S66SJHOez1IjK:fYXmNLIqXgFU8eqdgF86SuDTxBlz
MD5:	4C5A08BB8910FBF551E6D16EB61A10A8
SHA1:	704F206606E010116BF3125DBD0EECDE1B2B2328
SHA-256:	8C6D9581DC158BD46EC3FB4768C231D2CDCC56080D303674CF6C83151606AB2B
SHA-512:	3963AF3C67DC122623E2B0E8FEAB4D6BC771E5CC8ABFEA1A927851A7C2A50458444D8AEFF355E6E9E32F5657BDDDDCD81C403A82D1D51018D841AF4D92C92A39
Malicious:	false
Reputation:	low
URL:	https://t.ly/manifest.json
Preview:	{. "short_name": "T.LY",. "name": "T.LY URL Shortener",. "icons": [. {. "src": "favicon.ico",. "sizes": "64x64 32x32 24x24 16x16",. "type": "image/x-icon". },. {. "src": "android-chrome-192x192.png",. "type": "image/png",. "sizes": "192x192". },. {. "src": "android-chrome-512x512.png",. "type": "image/png",. "sizes": "512x512". }. ],. "start_url": "/",. "background_color": "#ffffff",. "display": "standalone",. "scope": "/",. "theme_color": "#284243".}.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2157)
Category:	downloaded
Size (bytes):	64580
Entropy (8bit):	5.544018479345656
Encrypted:	false
SSDEEP:	1536:MF/SQdAWjZUxHPhevU09hoBmgLJ9/qZQzV537t:EaQLAvwF9heLJ9/qCzVj
MD5:	A76E41E6B5E69EC71FC55E82293199BD
SHA1:	EAD3DC453A1F58B209DFE96076EA37DBFAE40802
SHA-256:	D47BFD53D3D2837BA190280E71A213C8D13BE2D8AC6EE1B5B3D933DD3B7C86DC
SHA-512:	2BB8C90F3B21668B095939D1A3AD095B61DACC149097982B256DB1863C191B93A5FCEC4AD5B4935B9FA9B7F9472B579E435BC4AA2A50847507472310D7E1BA20
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/impl_v103.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},p=ca(this),q=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(g){if

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (436), with no line terminators
Category:	downloaded
Size (bytes):	436
Entropy (8bit):	5.427129960966744
Encrypted:	false
SSDEEP:	12:hax/XKB0OoLu4UIJ2fJfRc249tFiYSB0Fgdu43o9fRR3rhtFiYG:haoDCfJ2fJfr4nF5Kpp3iRRF5G
MD5:	C4CE956C007B2F49EB060E0C7E117E72
SHA1:	C1F32238631D4E1B8013D4EACDF8BC9CBF8523AE
SHA-256:	116430C64F97008E05C5586E03C5F468D9FE9DD6699AA032E2EB90C701FF2DF6
SHA-512:	320B5B897F53A88F0A04B00C71072A5E6D34BE5CEA90FBFA9E9B4BBFA21A14EF17AF4219F934D65E13C957C4BFDE8848401D99A89A415061AEC69872D8378AA2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=3422485851&adf=2440470065&pi=t.aa~a.2817859086~rp.4&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x280&nras=2&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=77&ady=1239&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&psts=AOrYGsnH2YjzCpBRAGU6KyvDt6PiXS-xJLgIoJGD5F9st8hbmAyGO7xHRn08YQVeFzD8JHDZmGe_03Myst9GDBpY1SDlJnc&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&btvi=1&fsb=1&dtd=682
Preview:	<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CNWx2dylnYoDFZ5xQQIdU14HLw"}],"googMsgType":"sth"}', '');</script><script>window.top.postMessage('{"msg_type":"adsense-labs","key_value":[{"key":"settings","value":"[\\\"ca-pub-5561763581314444\\\",[[1]]]"}],"googMsgType":"sth"}', '');</script></head></html>

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3237)
Category:	downloaded
Size (bytes):	11822
Entropy (8bit):	5.31177654130854
Encrypted:	false
SSDEEP:	192:X+5WzIjblzXpfBfj+0eh73RvCyZRbkRGE7gr4Dz9LkSR8MWQYBE:O5WEzv0nZRYgr2CQY+
MD5:	1A4651E1105224B375C4A43F77254C07
SHA1:	35CCF976A6875B20B4C0144B70A70ACA3A511AB0
SHA-256:	39761E2A7CB0E42A8B09FBBF0D2C4CD9FB0C1568C045B1C5E387177DDA8FF064
SHA-512:	373E37A6E202D6EAAB71B7409914E3105D4CF1E53C1CDE78E41D6E88E1CE3242B76FA5A2D7F46E36D4E8546B0FF535E2AF32FA65783DB4EC5A504888C83A63B9
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241205/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .var ea=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},m;if(typeof Object.setPrototypeOf=="function")m=Object.setPrototypeOf;else{var n;a:{var fa={a:!0},p={};try{p.__proto__=fa;n=p.a;break

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsv0d1moVwppqc5-EZzCucsUNn-d8w0SUkkuEi4jQlctq31Iyp98IqG8_Of4s910k-IrXOSDm_QwGk3MZemfupj3HxkymnnX5tbpubipW44-8CYSfmowOipwg3-lYoiLgHoK9eQQBbtSb8BZFD_VXxzzN6OVTDk2IWXUNK3r&sai=AMfl-YTDLAq-OkW-abb4nCRhQB95IKAB6HWuqzgsj3pVH_VFH8MFKkP0JzMuSF9CWY4ZU1rbPiQsb0WqV-XwFA0UggbZpmB5fbvCQcIBN-GsV6XFW70PU2Ti-Sq-Xhc&sig=Cg0ArKJSzIU8_tXB_0qsEAE&cid=CAQSOwCa7L7dy4GQe19eqP48-41B9oCTk-S5T_DJcZJcqRnUXHct1XaRYHq68YDCgTCU38VJHs9eNiYsD3jKGAE&id=lidartos&mcvt=0&p=0,0,250,300&tm=14988.800000000017&tu=14988.800000000017&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=0&if=1&vu=1&app=0&itpl=20&adk=899877383&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=3&r=b&co=2976968400&rst=1733836880830&rpt=6285&ec=1&met=ie&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88503
Entropy (8bit):	6.012463835416294
Encrypted:	false
SSDEEP:	1536:IKIADGC9md+p/9eXqksJPLdeGKCT/Z+5Cgr0Te2vh0JnE/TQeWHvc:k0VJzzYuey0nwUbk
MD5:	D2A048C93A4208F6F29AED1CE7B261E3
SHA1:	7D21C721CE88045770E0F081217665C65A6B8D39
SHA-256:	ADB816DD82829B8077864EB4E2A540AE31351A38BEBBD3615E0E53EE58FA8B6C
SHA-512:	76D8213D4B4EDB9F3F8866CF0D131220C69D318AEFAA5C271D541F0FC62F73550CC2D781F9E501E2B0DC7D9EF40A2D6C1A069B3C00189580752694B3CEF5FB4C
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N5949.4624185PMPRECISION-DV360/B32425113.400711641;dc_ver=103.302;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Ft.ly%2F;dsp_campaignid_0_=1017595187;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0hKuPU0yYoTYh-ZhtyXBFU0;dsp_placementid_0_=21513784982;dsp_publisherid_0_=pub-5561763581314444;dc_adk=1405019980;ord=5zrz5j;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DC4Ub0TEBYZ8_OIY-YhcIPj6im0Aaq98ylebbthYaDE2QQASC5nckPYMkGoAGb1tPdKcgBCagDAcgDmwSqBN8BT9DG0duVKtXdQYiUAbjqGP1uclkyLi30HxPQ0fR-MG_YTqjSXHLwOZrgrta8ILi2Yp1S9N8_CZdO_uSDFrlV1WD8MYYZgivpyN2XHeZj60nyZVPHVJTQSLAeCnrG5J0BLswc7Mf4gswFDx8SvcQiszHEGeVAstGOm_deum1EAxRbUM9seCKyundH1zGq71Ry-HD3fLH0lLl49QIzIKrrPm8LcEXErbg5ae_sDLsuHf9NENF-1PH9PMl3hRw-5ynOlgIn3ZMXuO7ESv5dQzOlyHni_rEC-PpJRfxKCeOHPMAE85aznvME4AQDiAWWncmSUJAGAaAGTYAHm46kvQSoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAf4wrECqAf7wrEC2AcA0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpY4fH_2KWdigOACgGYCwHICwGADAGqDQJVU7ATuIq8GtgTDdgUAdAVAfgWAYAXAbIXAhgCshgJEgK7TxhNIgEA%26ae%3D1%26num%3D1%26cid%3DCAQSOwCa7L7du75pWWf1GMmsnF8r36B_4iuH19IJxLQ0701gyxwaFZ9kIBkylWZYkBjpPNMdAXBn3zcZdR9hGAE%26sig%3DAOD64_0ryg_1FPO5wvjLLgKk-5Wx2v_X1A%26client%3Dca-pub-5561763581314444%26dbm_c%3DAKAmf-DeVfsioVc7XmEvK0D2g1mXM6KijrROHyTngA2C8acIMnttADzJuQxD2QzSSpXkGTL6CykMcIUh_hB25f5I3cHfbBGKiluQSDRdYqMokHEk7IONDpF6Ow0n0VEUe869RAgPGgyzL8ni8zSMhWGg_lq6A-aOrelHFUdTF8EY9hPalwf2xdY1S0I7XpIvPSex4Y1B93ILCAj2wONbTp93TtJTmw--MlddfBun1zek4eTv4vrhJHM%26cry%3D1%26dbm_d%3DAKAmf-DsxJ5F3iBT9_LEzOmdiF0uB0set9AN25uWdr6bnIHTf8lHjiU813iz7NckyfhLmJ0RFQhEF4E1MQkBux1vvkdo1iINgNKj6qt6SNcVjvE56Y4QN1puc2yjUvnTBxRNRKopI6580Wc4jjaxX7lIJJXFS9iEo5eMNeQqO-QT3l3EgGux7g_h-M9cIQAQCZ4omhzO8FgSmfZfSOW-pJuair4Q6gRPmCHWLdC19CWzy0h5SABAR4XZpcTD0w1CU_K25HU8NLU0a2MsTvOX7Xo7i1C8X61bhCT9tnJE_guYO9V1jys9wqy_eUIR1LNhPLZ1WNfO5i9v2_JuaOI8ySA38CIrjbkxCqbcT7Jxqup1JtY9xT--1apn5TVPDufTnOdN1oz3KSIhryZnhxBSj0bnKqOy9TwOQO6Urj0jXWQIEU5OJQgmIU4tKD-DabgTh8olUodtqi0Pt-8KfOpC9JWtSbBflddBr9hR3Irxg29phZYm4dPVWnuzBfiimTa8gkoEE3IB0D7KVdEb9l8JNzT-gyScrDlfxUt0NtGaoUhy2XTIwq8NupDKUq3uN1DHPJrCMFNr4Bi6zzOs25VMgasaaLv1bVVLEjt27P0pv3LemkiKgSFzsh_Aw_DAH6zGIxIgNaSTZOG3qXCKfwnKYHJ6MsRLrtiTgA%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.;dc_rfl=2,https%3A%2F%2Ft.ly%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=J7JNF)Ss-k;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=2915;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_2516871322"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_XUBYZ5ziG76CkdUPyfXoqQU"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20241205');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;a!=null&&c<500&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if(a.tagName=="IFRAME")d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if(typeof

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://t.ly/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=NjUzMzk3NjM4NjkwMzYzODU1&google_push=AXcoOmTHioI32_aOfS8-flcAxONWjS7eFWDfJEDvvr4P28yztt3x0fQZ5xgAJAwea5cg8pag7TNGbT3W5XE-F6qnq6CsUvG-bx7u8g
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54030)
Category:	downloaded
Size (bytes):	55315
Entropy (8bit):	5.7559945745327
Encrypted:	false
SSDEEP:	1536:jzficAmEcWWxvTyzKHXI8YrlKuQ0lluT11JbxU:/icp1WK7h6rlKH1A
MD5:	C81E4B9BFFC9673FC00ECE98A0816435
SHA1:	9F5D6D436D9B6FCBC6CF8FE5076C27762801CEFC
SHA-256:	F5869D64A02F0DF56CD581E73864BF6290063F16ACE37A8208CB6EDC657145AC
SHA-512:	791290BA7D073B519E39E436E23C421EE79556D0818B865860548FC284CD7C81879DF9895B93CEC5CA7115B28913C610A431EAD5AACA523C5AB3B00408FBF5B6
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/9YadZKAvDfVs1YHnOGS_YpAGPxas43qCCMtu3GVxRaw.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function q(Q){return Q}var a=function(Q,R,w,V,l,v,K,M,F,z,t,N){for(t=(z=43,71);;)try{if(z==51)break;else if(z==V)z=G.console?52:74;else{if(z==95)return M;if(z==w)z=F&&F.createPolicy?Q:95;else{if(z==74)return t=71,M;z==52?(G.console[l](N.message),z=74):z==3?(t=71,z=V):z==Q?(t=R,M=F.createPolicy(v,{createHTML:L,createScript:L,createScriptURL:L}),z=74):z==43&&(M=K,F=G.trustedTypes,z=w)}}}catch(B){if(t==71)throw B;t==R&&(N=B,z=3)}},L=function(Q){return q.call(this,Q)},G=this\|\|self;(0,eval)(function(Q,R){return(R=a(84,93,81,90,"error","bg",null))&&Q.eval(R.createScript("1"))===1?function(w){return R.createScript(w)}:function(w){return""+w}}(G)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0&cc=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2610)
Category:	dropped
Size (bytes):	8009
Entropy (8bit):	5.3334261122657995
Encrypted:	false
SSDEEP:	192:iwS/yVNeAQ5677f79S4E2gMJF06Z0IKqEbOA/iZ8Ma:+Kni56HD9lgMJF0fLSA/i6Ma
MD5:	B64043ED9914D7A2AEBF7526B92D6D1F
SHA1:	252CAAB0B2BD1E0B7BBF88F650E561217BD86852
SHA-256:	6F4FEAFC5D41EF850BE0A94D47CE184570945701729A779B6A98040FC0241588
SHA-512:	F169631788F9F438599CFD72BDD530484D8DA12EEA8285820271C82A02B12C4FFA29BBB7656D84A9E43A7FDCF4A815FB7FA0CF30F93BE214386150B19E8FF411
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&c++<40;){var d=!1;try{var e;if(e=!!b&&b.location.href!=null)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.i)if(b instanceof r)b.then(c=>{t(a,c)});else{a.i=!0;a.j=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.i?b(a.j):a.g.push(b)}class r{constructor(a){this.i=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|c===0)b+=`&${d}=${enc

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	downloaded
Size (bytes):	2690
Entropy (8bit):	5.398083497267717
Encrypted:	false
SSDEEP:	48:Otg7xNqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:rN7Qabhiwdicju8WhRHMnTx
MD5:	2669D16AAE166D157B8434762A199620
SHA1:	CA7E08D45D0D469ED57825C28CB214F421311F97
SHA-256:	944A37F694B55DE268A0BF52DBAE4E12F12C4AE09EE5C8D213BA05075C2865DD
SHA-512:	51CCCC87145F0B0098B81BEA1506C726BB249E65F3B5FCC853F1FC4D4E55716F1F9318E43A2A0B31DFC4C968C14EBAF1EEFB9331C6DCE1B561459883DA7E9432
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241205/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(let c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2904)
Category:	dropped
Size (bytes):	31008
Entropy (8bit):	5.48087700202167
Encrypted:	false
SSDEEP:	384:BhE5lZyIOQOG1P0/JOc94tWuT8oOzd7edi2y5yLVkykhE5sTFwy6r/zuwP8y4iW9:ulUrOHtWCOzd7eJS6paBOzXnFpHi
MD5:	1AED6BE435B7F219383BE211D908CCE4
SHA1:	A0937381C0453EC9558DC1B9ACCE355D6CA5B951
SHA-256:	39ECCFF87303E4DEF8D131109B031C3A973ED7163D9739EABDBDB1F5B710EC73
SHA-512:	CED95C3F3F932055ED06143DCBAA1B943210FF2D56EE7C733DE1714AD46B34FA5FD43F358F8803DB03DE28D67CEDB7D08F1EA3C19F7D24F33DA698BCA44AE83E
Malicious:	false
Reputation:	low
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function q(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .var da=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},ea;if(typeof Object.setPrototypeOf=="function")ea=Object.setPrototypeOf;else{var fa;a:{var ha={a:!0},ia={};try{ia.__proto__=ha;fa=ia.a;

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1343
Entropy (8bit):	5.241459312068212
Encrypted:	false
SSDEEP:	24:G9JFDOYP7JO/D0d8HAzKFDOYsJO/D0d8HAz9knYmOOk4TfenEPCCknYmOOk4Tfen:eVOS7KDm0GKVOLKDm0GSnrOOlKrnrOOA
MD5:	FE9EDE82646761E4F9DD18DF8E74ED9B
SHA1:	D461649FA2D15DDB9E5E7F79FE517890273042CE
SHA-256:	38118DDD021B5E6E0A594EC89C79B010CFFF0D7C97EB82221AE16D4CB95AF648
SHA-512:	790C8C88161B8323F625A2C0466AF392F38E9B1FCC9EAA7DC1E1650AA84E93DA42751ECBA4A62D3474EE4B7B831CDAF635D33AD871BE45B49EF39A2C203A81A0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Symbols%3Aopsz%2Cwght%2CFILL%2CGRAD%4020..48%2C100..700%2C0..1%2C-50..200
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ fallback /.@font-face {. font-family: 'Google Symbols';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/googlesymbols/v309/HhzZU5Ak9u-oMExPeInvcuEmPosC9zyteYEFU68cPrjdKM1XLPTxlGmzczpgWvF1d8Yp7AudBnt3CPar1JFWjoLAUv3G-tSXmA.woff2) format('woff2');.}./ fallback */.@font-face {. font-family: 'Google Symbols';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesymbols/v309/HhzZU5Ak9u-oMExPeInvcuEmPosC9zyteYEFU68cPrjdKM1XLPTxlGmzczpgWvF1d8Yp7AudBnt3CPar1JFWjoLAUv3G-tSXmA.woff2) format('woff2');.}...google-symbols {. font-family: 'Google Symbols';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}...google-s

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bt&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmTY772ALm93a0DVVyKpboW2PzfqMPKY1LWuwxXOdYpcD29P14mSGt0GY6LZqynwLUmPVxvsRmG40_1Oj2DmAteHEuUQfTx5sFH7Dw&google_hm=22210ca7d02b196e2njvxb00m4ihpoje
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	downloaded
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	245803
Entropy (8bit):	5.374565894982982
Encrypted:	false
SSDEEP:	3072:ZFD70FH4JUkvwVMOUln0zC0ygLKvBXmNK1xaLQPTZJT8teJwR2:ZmFDGln0zC0ybPe4
MD5:	E90A5B1DD27E0642273917A65B3234B2
SHA1:	CF358BB91831BEF9A411F25C45873C646432D6F8
SHA-256:	DBDAB31A287CEAFB5B96375C215398A3A9B109FC333BA0B20E7BE8D833AD3703
SHA-512:	0AE47F6880B94083D8E246D2B1E781A4F4BACC4236DF9BC3CD3A0C306E49F85C2A9F0B6CB7454A9B8158A0ECCF67750800FB33DDA1CB3B5C6FEFAF5FD44BBF7E
Malicious:	false
Reputation:	low
URL:	https://static.adsafeprotected.com/main.19.8.556.js
Preview:	__IASScope.__IntegralASExec=__IASScope.__IntegralASExec\|\|{},__IASScope.__IntegralASExec["19.8.556"]=__IASScope.__IntegralASExec["19.8.556"]\|\|{},__IASScope.__IntegralASExec["19.8.556"].initialize=function(e,t,n){class r{constructor(){this.logs=[]}add({storeModelName:e,key:t,value:n,timeStamp:r}){this.logs.push({storeModelName:e,key:t,value:n,timeStamp:r})}getHistory(){return this.logs}logHistory(){}}class i{constructor({storeModelName:e}){this.storeModelName=e,this.storeModelHistory=new r}set(e,t,n={locked:!0}){try{Object.defineProperty(this,e,{value:t,writable:!n.locked,configurable:!1}),this.storeModelHistory.add({storeModelName:this.storeModelName,key:e,value:t,timeStamp:Date.now()})}catch(e){}}get(e){return this[e]}getHistory(){return this.storeModelHistory.getHistory()}logHistory(){this.storeModelHistory.logHistory()}}const o={useSingleEvent:0};class a extends i{constructor(){super({storeModelName:"staticFeatures"}),this.set("useSingleEvent",function({percentage:e}){return e>100*Tt

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu4mgYqmJD4-eKIHoajagWmIKyy6-9j4j6eK8DSRV0putQ3Ii4k3mV7LfCKPMe2G9sNGd9kMd8v30Oe5YLD0IgwX67Z8jzmkbxTW2DaHu2921dmQ87POVnZx1_oq783BHjWqVGeCP0C8g_e9-Dix4p5ord0X0RqM22rg_WG&sai=AMfl-YTVp-0p754zpT3HEi6rlhcLYhI2vzLSC8PhXBDABPwQv4UH1SVJ6JsI8aglC9zDC67BU_ytsDi3mECChPGCnli7sLjAQ07daYc-5C_EK8XnaRfH08BFaiIjNuk&sig=Cg0ArKJSzO9jmJvE6b19EAE&cid=CAQSOwCa7L7du75pWWf1GMmsnF8r36B_4iuH19IJxLQ0701gyxwaFZ9kIBkylWZYkBjpPNMdAXBn3zcZdR9hGAE&id=lidar2&mcvt=1008&p=0,0,94,728&tm=1681.7000000000116&tu=674.2000000000116&mtos=0,1008,1008,1008,1008&tos=0,1008,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=0.96&if=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=v&co=2976968900&rst=1733836881101&rpt=9488&met=ie&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=admaster&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0&google_hm=22210ca7aca1932b2gdr4400m4ihpsjo
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bt&google_push=AXcoOmSyvtNEqTIrdP0MB45Eyibq5SJ6jnGCgb8NN9CW02MmVcnqHpXw50WoOSRfQb92IQxqFTbuZRNqpETKm-ohquyLQ36Ox9LFzSw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	114810
Entropy (8bit):	6.089639894792562
Encrypted:	false
SSDEEP:	3072:hcTqW3RoSAKYvXVp9BZK3J0svgolkieR8qsRPra7N:K3Ro9X39BZIklWA
MD5:	52F630330A45EA3ADC8770F3012D0065
SHA1:	F39273B1FF937F72B210179A4A008EFD4A72E046
SHA-256:	80168FE38873D591CC7F0070CBA9BF7BFEDAFC6D8B7696F8AA7FB95DFF5D00B8
SHA-512:	871C97392B1B1BEEE3E82293628FC0C58635ECA9AE1F8D3BA41FBD46334CE5E30E3184FBAB6A4ABA1B550D09CF14F36ACE9EE5773A0BF7B353FE40BA2C9C61F3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5561763581314444&output=html&h=280&slotname=2321115505&adk=348108860&adf=4181732005&pi=t.ma~as.2321115505&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836867004&bpp=3&bdt=6372&idt=6062&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=77&ady=312&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=6077
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20241205';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height: 100%;width:100%;overflow:hidden;position: absolute;top:0;left:0;align-items: center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;border:1px solid #E5E5E5;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}.amp-fcp {display: inline-block;position: absolute;z-index: 9;top: 0;left: 0;width: 1110px;height: 1000px;-webkit-transform: translateY(1000px);transform: translateY(1000px);}.amp-fcp {-

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2292)
Category:	downloaded
Size (bytes):	23142
Entropy (8bit):	5.506833894491201
Encrypted:	false
SSDEEP:	384:P6Thq18PpXQj6+Sm5xYMS0TwG7e80Jugvq85Btipids5FVZXh3buy44DEWyOriB3:P681upXa6LPh0TwG7e80kgy+0piq5F36
MD5:	F2C9765E4E82C0D058935C13C7A0E661
SHA1:	866CC425B3930C27D15C549AEA1F620D423F0092
SHA-256:	B39FDAABFE63FACA7D21B1EE38C593BB29663D70DE9938ECA8DD6159F405FE9A
SHA-512:	500B012089A7A1C7C9351F2B6DA477DDDB2AFC9F9C6CA28DFC0BBD3035058B4B5E7EA524719956745114CDA66836FCF0E5C380E80E21204264D59E1FA4F789AC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241205/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return ba?!!q&&q.brands.length>0:!1}function ja(){return v()?ia("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!u("Android")\|\|ja();ja();u("Safari")&&(ja()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ia("Microsoft Edge"):u("Edg/"))\|\|v()&&ia("Opera"));let la;var w=Symbol(),ma=Symbol();function na(a,b){b[w]=(a\|0)&-30975}fu

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4c30/sw_iframe.html?origin=https%3A%2F%2Ft.ly
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	62297
Entropy (8bit):	5.369652755674637
Encrypted:	false
SSDEEP:	1536:OdO2/Pobzfha4zCDlorEZ65WCQBDsGZpICEYg:Z2YbbFzCDhiyDYCEz
MD5:	7460ADB7C97E6672834FC917F0049F74
SHA1:	95DDD796A932A322D0F4C7C2F7138555640A9226
SHA-256:	04A3B8639DE74B741825C47726B38EF51D2E41240AB306907A5D2FBDC73E25B9
SHA-512:	DC1439F1F27A73E66D00740CB255880C1910C1E3C6D0FE14661A2D677AC4433CEE77EAD9CB3551506EFAE15AB4A501D235262F348BC33843511280394F7BF5B6
Malicious:	false
Reputation:	low
URL:	https://fw.adsafeprotected.com/rjss/st/2169889/81613668/skeleton.js?bundleId=${BUNDLE_ID}&ias_dspID=3&ias_campId=1017595187&ias_pubId=pub-5561763581314444&ias_chanId=1&ias_placementId=21513784982&bidurl=https%3A%2F%2Ft.ly%2F&ias_dealId=&ias_xappb=&adsafe_par&ias_impId=v4~~ABAjH0hKuPU0yYoTYh-ZhtyXBFU0
Preview:	.....var __IntegralASDiagnosticCall = (function() {..try {...var alreadySent = {};...return function(code, err, config) {....try {.....if (!__IASScope.isDomless) {......try {.......__IASScope.postMessage(........{.........code,.........name: 'jsdiag',.........origin: 'ias',........},........'*'.......);......} catch (_) {}.....}......var gen = function(code, err, config) {......var url = '//diag.adsafeprotected.com/js?';......try {.......var errMsg = err && err.message ? encodeURIComponent(err.message.replace(/ /g, '-')).substring(0, 200) : '';.......url += 'code:fwjs-diag-' + code;.......url += '&err:' + errMsg;.......url += '&codeanderr:' + code + '_' + errMsg;.......if (config) {................url += '&version:' + config.version \|\| '';........url += '&server:' + config.mn \|\| '';........url += '&region:' + config.region \|\| '';........url += '&mode:' + config.mode \|\| '';........url += '&forceAppend:' + config.forceAppend \|\| '';........url += '&asid:' + config.asid \|\| '';........url +

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33896, version 1.0
Category:	downloaded
Size (bytes):	33896
Entropy (8bit):	7.992698528909237
Encrypted:	true
SSDEEP:	768:BOdvInd6AIMyCKUGucOfe0Vdwp9byf8r0wsh:J6NsGpOfzVdwp9ib9h
MD5:	EDE1A4D0A26DF783E582AC07892E92FC
SHA1:	CE1242F5CD768C0126485BE9E679F3E2C7E6C3FC
SHA-256:	997E7F6C4136B962CEC732D922735900AAA874E3E19B7A8DDD277ADA23605451
SHA-512:	48A6040C50E121B15300EA74CEFD1A5DB7D13F6F6D1B55F6468A106F2ABF43F461D3D2BC741756AF7248097AEFD1FD9DEA023F7FD2A4B4D0C8EF74192BE1FBBC
Malicious:	false
Reputation:	low
URL:	https://t.ly/cf-fonts/s/lobster/5.0.18/latin/400/normal.woff2
Preview:	wOF2.......h.....................................,.....^.`.....F..m.....t..^.....6.$..8. ..<..S..<[)kq.m.....@\..l8..Aw.W.....@.v....e..'&.9....&..`.O..FF...3G....^...f.}.H...Q..c..#Q...k..;.h...y......OleN.. :o9.I.S.h...G.mCn..S;...p..........YA3..............:].....y...=E..;Mw.9......95..n=....66"E,.......e..Q.\|4o...A......#.+...~..k.[.F.d..7.x#A.Bd.MJ .2.G...X.)p..q..U.up..G.t...(`$N..g..e...........6...\.....X N....$5....Q..?,..s........l`.@9...5.......h..{ jJ.Lf.....-..1.Ig^D.;...J+...+?.......t.RP..m.Iy.Rf.UOG........3..B.5;..O..Tl2w.P.$U}..A...m.5H.L*...L..3.r....Q2.J.(.#Q..x..a@x.CJ\|%.s.;..2g..#\|].Uu.....4W...2.b..)DT.U...I.dP.`".F^ L..@2=.yJ.............../.B.W..a..>.x``.3.T\|..n{..6..<....H.V.&......&..m....!.Dtq....!Bw.B.p......M..{....<.F5.Zr.B...C....8y.S...W5.....42..'v^.Hm..}..2.....f....D..B.<61.`..j...\|..1.6<.-.e..=....B.n.!..Ph....55E.q.i....C..#o.Y..Un..W.v?.8..:.E..s..w..M..`..DN.lg.........XhW....Ym..`.w..\..<..TG.a/...J

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	5.305174155773324
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaiBa18RCsDPLCmK8dRaMdvD31b2bcaS3jfU0cModr:dkK9dg5qEa6ceRacD1b9jfURacT1
MD5:	3AD10079B03C058AFABA74156CEF4789
SHA1:	88F92C6BECA430A4CF750C4CD4417D99C4AB8B7F
SHA-256:	C624ADFA1D5748DA9FEBF370AA89A355BFB3E036089B3101D50964F9C67E9876
SHA-512:	ABB68855F51C165BBD236DDA11CDD99D5284B76252EDBA6BD1DA7112967F33AD77752F85AD1FE524164D65CE38BCB14BDBB428DEC4803748C232AF872771413F
Malicious:	false
Reputation:	low
URL:	https://www.jared.com/favicon.ico
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.jared.com/favicon.ico" on this server.<P>.Reference #18.4df57468.1733836901.85b6b9a.<P>https://errors.edgesuite.net/18.4df57468.1733836901.85b6b9a</P>.</BODY>.</HTML>.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=adkernel&google_hm=QTIyOTE1Mzk1NDM1Mjc5ODM0NzE&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3679)
Category:	downloaded
Size (bytes):	181721
Entropy (8bit):	5.63131232402321
Encrypted:	false
SSDEEP:	3072:Dk0LnA+Peofg8VW0TSFbo3/y59hvuswViJNLWgleA1rQKqI7lWT3J3NmcRXftI3A:Dk0LnA+Pe0g8VW0TSFbo3/YPvuXEJ9WT
MD5:	B229F66B5212EFF8EBC32ABB43437148
SHA1:	4603742AB34D0798B6ADE81F9C12BC785A647C15
SHA-256:	DC2FB18E57A7047BE01C63E2E15013FD1B6E8E164FEB32896593D87A672D0223
SHA-512:	623791C5BDF66306BAB34B7067A4D7B6DABE60F1485D1E491CC773931EA6A25C7EBA147F6C7E0D5BF1EFC364CD31C02939FA4D61AE529DA98E6D803C956657BE
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5561763581314444
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356)
Category:	downloaded
Size (bytes):	21506
Entropy (8bit):	5.526210028843285
Encrypted:	false
SSDEEP:	384:fMxcoCk8pzcaBw9RoYQByXr1TzibEGuByg/pT7jIy81IDKY8LZpafVjEvcuL18JW:fMxcHkuzDzgXZTzigRyg/d7j7rDOZpa4
MD5:	AEC27EFC74A51013B979AFFAC0A4D050
SHA1:	C259A9A881242A63360A468DAC83911BCE07E2FA
SHA-256:	99BBDC5CCEB8B323529064975C851942115240F23B3BECC3116C2EEFF3DD5EF9
SHA-512:	BD3801F41B460E7CB5EA82AA0CD332D5881D4C41AD1442D2CE4C6A6FEDFD09B179D1D1355B4AE49AEC64865ADF8E69007D0445FF7A1F69526455D57AB61335F5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241205/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ea(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=n,f=0;f<c.length;f++)if(d=d[c[f]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)} .function la(a,b){funct

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Category:	downloaded
Size (bytes):	18588
Entropy (8bit):	7.988601596032928
Encrypted:	false
SSDEEP:	384:WF9srt3EJfKy7iOpqErJeqQhzsaZqPTPabcoqYdBTKYPvS9BlTf:Wn6UhKYieqAiPQTwclYQLlTf
MD5:	115C2D84727B41DA5E9B4394887A8C40
SHA1:	44F495A7F32620E51ACCA2E78F7E0615CB305781
SHA-256:	AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6
SHA-512:	00402945111722B041F317B082B7103BCC470C2112D86847EAC44674053FC0642C5DF72015DCB57C65C4FFABB7B03ECE7E5F889190F09A45CEF1F3E35F830F45
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......H........ ..H8................................\|.`..J.\..<........-..Z...x.6.$..0. .... ..S.7.5..K!.;..../.`..Sn.J.e.52P.(.....=9....f.....$....fZ.p...N...t....6.lfS.Ju.i.o.g..<....T"O.o..4..4....M/N.>.K..."[.P...W.u.>]................A.9z....IN^....z..Y.{....m=...+X9<?.......(IAG8rD....52L0.p .EJ..p....=.......[U...pz..g...../L.U.......P..W.U..q$L..6......C.M.0..R..........D(.ilX.Y..SZ.R...Q..j.6.@\."\|.l......3....,.T.....L...ap0......6.j.\&O.z`.$._+vwnr...,....?W.T....!.J...L#%.......A}........\.....l...:....U..u.J.0....O......&.!.)4.V..:.}.0f....:W......?U.....%...b...!....yA.sw.....5..T .}{.t!F.G....{"..pQ.S.v.S....t......U.Y\|.v.@....\|..(..V.........^....../.7......K......J.Uq/L.T-.`.O........;........';vWq.+....J...J..p.....sB`(1LC.k....?Z{...v>dS....F..........\.....UetU........6.V...vE....._.../...%.q...^.l...>^.z..l..p....j..@H...`X.p...KQ. .<@...I...BF.......L..6...y.2=.P....8;..@`.m.....R.B.L.r.*T.T..l@.6.Y....}g.....F.n...

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	273285
Entropy (8bit):	5.562365256415829
Encrypted:	false
SSDEEP:	3072:kkdOdmUxgK3frtvXd0mMRoSN5bADFXBExpE2c534539rHEytTD3PjqInYRa2XXi:ZwgK3ztpI0rExnc534Zlh3PjqInLUS
MD5:	19763C9822CF43E6215ECBAAB9D3C633
SHA1:	D7F99E30D92E8FF6FF08E9442F2445556F8BFE4A
SHA-256:	E595CC2814114EACC56CC62948D186EF2225F822ED60B4DAD0B7F0E2127ECBC6
SHA-512:	7D6026270801DD45E0576E1EAB6C8BFF2E0BC8C711EE9A4119FC102F67AE82B5BD85A69330B143D9834222C81E4DE57266A15A5D9B0E1AB7F1045DAE2B4E2211
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-10875945736
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-10875945736","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53620)
Category:	downloaded
Size (bytes):	54915
Entropy (8bit):	5.737004384577677
Encrypted:	false
SSDEEP:	768:ja4fn7w2hg8issWLCa0rCZQFwxJjbJMFPaQoqdDLTs6QkZYGp3aeaNAnFvVUY48O:ja4Tw2hxi6amuwhKxX7YNAnUhK296Vy
MD5:	2CBA7F75658AB926943C5ADDFC7D765D
SHA1:	D1A63F000BCE30A4CD6C9BF18972B4E4401C181A
SHA-256:	B8EEA52234018594D4B3A34DC4675270329D1946174A47AADD87780C5F88B5FD
SHA-512:	3381415ABF0AFDF27C42F19A1151EBE903EB59312D0CF006E272A540F6D6D8170A25AE9223DDF90BACE88B840554FDF5F09BE4020FEF59AA8C006CA63C35A399
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/uO6lIjQBhZTUs6NNxGdScDKdGUYXSkeq3Yd4DF-Itf0.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function S(d){return d}var v=function(d){return S.call(this,d)},F=function(d,w,a,K,T,p,Y,M,W,L,u,X){for(X=(L=84,a);;)try{if(L==30)break;else if(L==w)t.console[Y](u.message),L=77;else{if(L==62)return M;if(L==84)M=p,W=t.trustedTypes,L=K;else if(L==K)L=W&&W.createPolicy?91:62;else if(L==d)L=t.console?w:77;else{if(L==77)return X=a,M;L==91?(X=0,M=W.createPolicy(T,{createHTML:v,createScript:v,createScriptURL:v}),L=77):L==92&&(X=a,L=d)}}}catch(G){if(X==a)throw G;X==0&&(u=G,L=92)}},t=this\|\|self;(0,eval)(function(d,w){return(w=F(47,22,34,49,"bg",null,"error"))&&d.eval(w.createScript("1"))===1?function(a){return w.createScript(a)}:function(a){return""+a}}(t)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;ch

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624), with no line terminators
Category:	downloaded
Size (bytes):	624
Entropy (8bit):	5.08357937709973
Encrypted:	false
SSDEEP:	12:kxP4L8BM4FoCpbWWGYsz8KBG6FkKOWGQL8BM4ZpbWWGZc+L8BM4ZeDWQ:kDB7Fo6Gf4KBG6FkKNGVBjGZqBtQ
MD5:	2D2E748FF881CF40A786D54F8D590552
SHA1:	FFF24FFE121DD664F42164CC466BF15045686703
SHA-256:	9FF367082BE1D94ABC86AD1E75FF921CC5D53846E860267372FADE66305F9120
SHA-512:	294D54527856E1E394889C217F5E6414069ADE375FA4007385C1048F020A2046333733FBFBE613C353179C835A5F4835475AABFE0F92A69DF2F588916653DE29
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CPfHxOMEEPPo2-oEGMfLnZkCMAE&v=APEucNWiFU0F_wbtzhx5H031BHMPBaYF11iZ7XdCkbfMq7Mg6GccxoMtglqtaD7Oest-LM9gBmfDrwTB0nePob92FFZ-aUufEw
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/></body></html>

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4659), with no line terminators
Category:	dropped
Size (bytes):	4659
Entropy (8bit):	5.81747009690873
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaQv9qYc:12cV9sT3AW7NIzFv9qR
MD5:	0CAC45548DF60F6612420F4AE8968A2A
SHA1:	8B6BBCE9310EEBB83D53ED368982D188B223F928
SHA-256:	12B069E056C5CA10B28CD658BE97FB099974BF4E28779FA91E21D8B9078F477B
SHA-512:	91309FD46B39EB4C4ECADBB784DAECD2919EE4082EAB65195F93AE4A76EECE9A03346A2B46ED88719B1A13F3CCAA496091F001A0F5C9B8CC6DF2816ED7488424
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1223)
Category:	downloaded
Size (bytes):	19485
Entropy (8bit):	5.498123677217319
Encrypted:	false
SSDEEP:	384:LC/TzpZmdYHPu1cnq9W3eVqIudA7ItW09ROE1WWkK1z0Ika7YyifuxNrx5FejxO9:LCbNZmd6Pu1ct3yqZDtWcUE1WWr1qaV3
MD5:	ACFAAF3B7DA03D515C434409A8CEDFE3
SHA1:	4E2FE4950FCED5DF7A649497A093614E0A7D778F
SHA-256:	A192CC8B869A545B6910C7CB5C96612499A856C49585A67D1629CEC7EBB83DA0
SHA-512:	8F6D029D18C0AEFECC9F864A9DAA33E19D6F7B73E9CE6D4FABEEB7DABACE55764A7DE6771604B2E2CF59BCC5E3E12D076D508D9773EA14E6E1B2188F25184AE0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4c30/sw.js?origin=https%3A%2F%2Ft.ly
Preview:	'use strict';var aa=function(a){function c(d){return a.next(d)}function b(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(c,b).then(f,e)}f(a.next())})},h=function(a){return aa(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self;var r,u;a:{for(var ba=["CLOSURE_FLAGS"],z=n,A=0;A<ba.length;A++)if(z=z[ba[A]],z==null){u=null;break a}u=z}var ca=u&&u[610401301];r=ca!=null?ca:!1;var D;const da=n.navigator;D=da?da.userAgentData\|\|null:null;function F(a){return r?D?D.brands.some(({brand:c})=>c&&c.indexOf(a)!=-1):!1:!1}function G(a){var c;a:{const b=n.navigator;if(b){const d=b.userAgent;if(d){c=d;break a}}c=""}return c.indexOf(a)!=-1};function H(){return r?!!D&&D.brands.length>0:!1}function I(){return H()?F("Chromium"):(G("Chrome")\|\|G("CriOS"))&&!(H()?0:G("Edge"))\|\|G("Silk")};!G("Android")\|\|I();I();G("Safari")&&(I()\|\|(H()?0:G("Coast"))\|\|(H()?0:G("Opera"))\|\|(H()?0:G("Edge"))\|\|(

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2995)
Category:	dropped
Size (bytes):	18178
Entropy (8bit):	5.640509571732772
Encrypted:	false
SSDEEP:	384:1WU4r2N9DWZJ65mxsLDnaegyC+05FCNIr:6PxsXaeLgCNIr
MD5:	586101097A0CE555B0A5145C66F13C22
SHA1:	2894A53C928F1B823AA860319EFC9FF6E6F1626D
SHA-256:	E1A6F26221E90102580DECC85453993721815EE35EF417600AF01CC219A0D871
SHA-512:	F59E11498B321E584E791CA35366EB4E69791CE59DE6A767B0B6967406A8BC7572C846312622BBA4D8F44C9F7E5CED24858FB29126B454E352AB38A86F0A0818
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),h=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.h("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4186)
Category:	dropped
Size (bytes):	181633
Entropy (8bit):	5.503746161921849
Encrypted:	false
SSDEEP:	3072:Eo72RYQVJ45vgntACaobDrfFx1elVTrD2S7BMG9F3FGhPVnWSbMkBZzA4dESaDzv:Eo72RYQVJ45vgntACaobDrfFxuVPD2Sl
MD5:	0FAF4874A0BA5AE95D7A59CB3BEB338A
SHA1:	B3D744A4090AC7DA6DBB00808D7BB3D0FDBD4F3E
SHA-256:	229CF352675733310370228FE56EC6DAA939FF27DB0FB2D549C2115408874956
SHA-512:	E3092041D28D0A793BC2EA4BCBAF5EBB865F80D4E1036263750CAC426E8BCDB371C53F68EFBB5A05AAE0D9E8A750362765A1D2F90DC23D3F645BBDE360E6E422
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var r,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bt&google_push=AXcoOmQZ9AdKlnbeJTyLIQOgeg_irgSNHpembbXdwR5hZTKgt71EH1K5sVztA2LZNcTwLbpA7hv1EF7GFHEe6T8OoaTYsETXYxkiBIE
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2292)
Category:	downloaded
Size (bytes):	23142
Entropy (8bit):	5.506833894491201
Encrypted:	false
SSDEEP:	384:P6Thq18PpXQj6+Sm5xYMS0TwG7e80Jugvq85Btipids5FVZXh3buy44DEWyOriB3:P681upXa6LPh0TwG7e80kgy+0piq5F36
MD5:	F2C9765E4E82C0D058935C13C7A0E661
SHA1:	866CC425B3930C27D15C549AEA1F620D423F0092
SHA-256:	B39FDAABFE63FACA7D21B1EE38C593BB29663D70DE9938ECA8DD6159F405FE9A
SHA-512:	500B012089A7A1C7C9351F2B6DA477DDDB2AFC9F9C6CA28DFC0BBD3035058B4B5E7EA524719956745114CDA66836FCF0E5C380E80E21204264D59E1FA4F789AC
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241205/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){m.setTimeout(()=>{throw a;},0)};var ba,n;a:{for(var ca=["CLOSURE_FLAGS"],p=m,da=0;da<ca.length;da++)if(p=p[ca[da]],p==null){n=null;break a}n=p}var fa=n&&n[610401301];ba=fa!=null?fa:!1;var q;const ha=m.navigator;q=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return ba?!!q&&q.brands.length>0:!1}function ja(){return v()?ia("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!u("Android")\|\|ja();ja();u("Safari")&&(ja()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ia("Microsoft Edge"):u("Edg/"))\|\|v()&&ia("Opera"));let la;var w=Symbol(),ma=Symbol();function na(a,b){b[w]=(a\|0)&-30975}fu

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvMoMPpTZeWhmnH7c3lCz-fX3GJLrTVQL2jEkVm02ogc6deNN7_XqfcIcSAk9rPhoWFByStdUYWsxweyV_NakJNV0FVHhLNUaQgVtHKFwd2wK1uy_rIkesKnweiH-oFNeOub81K8WtKkm0MjPxjg69HjQ&sig=Cg0ArKJSzNlcDFQ0zxeyEAE&id=lidar2&mcvt=1013&p=0,0,90,728&tm=1024.3999999999942&tu=11.800000000017462&mtos=1013,1013,1013,1013,1013&tos=1013,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=32&adk=1405019980&rs=6&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=v&co=2976969600&rst=1733836889991&rpt=6795&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	downloaded
Size (bytes):	217970
Entropy (8bit):	5.536459699964864
Encrypted:	false
SSDEEP:	3072:nQdOdmUxgK3frBPK0LMRoSN5bADFXBExpE2c534uSXzD3PjqInN6ttEJHP4:QwgK3zpI0rExnc534R3PjqInNDFg
MD5:	E6C21484EF550D4F5717BDDF15EF3F85
SHA1:	C9465B1FE475A8927BCFF1544FFB0BCA969EB3D2
SHA-256:	B7C88698814631F7E016D4B62231B535AFCC67E6E59A7669A000742FD9EC67A6
SHA-512:	21CECC3EAE4CC2A19C28A178E95D758E5126B63FAEE2A8FA47320AA62947BB0E2AD7B6A20338114E68C722A7EC9447D662694751DCD7D4867478926277289FB4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-89207177-8
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-89207177-8","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-W1D48QS4F7"]],"vtp_enableConfiguration":false,"tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0,1]]].},."runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__c":{"2":true,"4":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__c":{}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__c".,."__e"..]...}....};.....var h,aa=function(a){var b=0;r

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	23309
Entropy (8bit):	5.5179619832506575
Encrypted:	false
SSDEEP:	384:W06Wup8jjy4O7+uE9GqSqja//QtJq+IBpTKuGQrRh9R/dHCGGZF1JYp2Z0hlywUP:N6Wk2jwCTGbqmHQtchpTrrRh9R/dBGUg
MD5:	A8377F399296C8BBF97A7AB7ADA056C6
SHA1:	6F9A3B9843BD2693018472BF9970F8879C0CB35A
SHA-256:	85F1E4821C07DFEB7B420ECE6771846C2CB453F676D51931C0564324F0B9DE23
SHA-512:	DEB08681B10B7292A1E5F146B827099ACB51E599D7F3C122B77448C12AA522C60DE49F8DE26EE22EE9C18865AB02A73D4334262E59F2C7F61D93E21A34C840DA
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241205/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ba(this); .function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)};var ha,r;a:{for(var ia=["CLOSURE_FLAGS"],t=n,ja=0;ja<ia.length;ja++)if(t=t[ia[ja]],t==null){r=null;break a}r=t}var ka=r&&r[610401301];ha=ka!=null?ka:!1;var u;const la=n

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3905
Entropy (8bit):	5.496974252216095
Encrypted:	false
SSDEEP:	96:GYOLVFZvOLc39OLfOLqJc+uxOLQNMYOgzFZvOgl39OgGOg3Jc+uxOgENE:G1Qc3oaC/ty5l3zojUH
MD5:	230D638180A47B2577A926813BD0E9D1
SHA1:	3B27A79B741791E625BD2B96AF504242A191225C
SHA-256:	DAC60844645E45E37D58F33AD35ED33B4816A943B839524589D93707D1C8233C
SHA-512:	7576CD06E48F766D0396168AB0A2E0A68CBF69B5E2231B813078EBB33BA3E642361716035271425BE8E1BAE4FCFC8BD7B541919D5E1D3F4B59951F1DEB1BE8C4
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%20Display%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169,

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4186)
Category:	downloaded
Size (bytes):	181633
Entropy (8bit):	5.503746161921849
Encrypted:	false
SSDEEP:	3072:Eo72RYQVJ45vgntACaobDrfFx1elVTrD2S7BMG9F3FGhPVnWSbMkBZzA4dESaDzv:Eo72RYQVJ45vgntACaobDrfFxuVPD2Sl
MD5:	0FAF4874A0BA5AE95D7A59CB3BEB338A
SHA1:	B3D744A4090AC7DA6DBB00808D7BB3D0FDBD4F3E
SHA-256:	229CF352675733310370228FE56EC6DAA939FF27DB0FB2D549C2115408874956
SHA-512:	E3092041D28D0A793BC2EA4BCBAF5EBB865F80D4E1036263750CAC426E8BCDB371C53F68EFBB5A05AAE0D9E8A750362765A1D2F90DC23D3F645BBDE360E6E422
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202412040102/reactive_library_fy2021.js
Preview:	(function(sttc){'use strict';var r,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmSJrFy3UtQJ72UzESzWf4NxDCOosGlxBjqp9SrQd0bqlCXu8Q-p3Wf-rr5RpOlX__osjut54xd85hY0UtgFhSQI3_x79HKInkE
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	dropped
Size (bytes):	23309
Entropy (8bit):	5.5179619832506575
Encrypted:	false
SSDEEP:	384:W06Wup8jjy4O7+uE9GqSqja//QtJq+IBpTKuGQrRh9R/dHCGGZF1JYp2Z0hlywUP:N6Wk2jwCTGbqmHQtchpTrrRh9R/dBGUg
MD5:	A8377F399296C8BBF97A7AB7ADA056C6
SHA1:	6F9A3B9843BD2693018472BF9970F8879C0CB35A
SHA-256:	85F1E4821C07DFEB7B420ECE6771846C2CB453F676D51931C0564324F0B9DE23
SHA-512:	DEB08681B10B7292A1E5F146B827099ACB51E599D7F3C122B77448C12AA522C60DE49F8DE26EE22EE9C18865AB02A73D4334262E59F2C7F61D93E21A34C840DA
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ba(this); .function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)};var ha,r;a:{for(var ia=["CLOSURE_FLAGS"],t=n,ja=0;ja<ia.length;ja++)if(t=t[ia[ja]],t==null){r=null;break a}r=t}var ka=r&&r[610401301];ha=ka!=null?ka:!1;var u;const la=n

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	319146
Entropy (8bit):	5.5849994035291335
Encrypted:	false
SSDEEP:	6144:p4ZKwgK3zYAvI0rExnc534D8lfjqIn2V+9SN3NZBUl//:iZ73UAtrcnctX9SdIn
MD5:	3AD6ED809A258B30A6DBF2BB0AEFD49E
SHA1:	15FF3744E95E485BDD6D269F027087B5BD4ED67B
SHA-256:	7A6EEA8E423711DCBC45535B4722B181D0B3AF17966A5466DCCCFAFCCCBFDF83
SHA-512:	59DBD0E8083AA3F6223C927FF97378DFB26DE8B5DE5A4B38B0BC7AEAD1A5DFC467FB73E6BE6C86AFAAEAA44A9CF8EBDA8C26388E079D1D3B6072DE268F95DDE7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-W1D48QS4F7&l=dataLayer&cx=c&gtm=457e4c90za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=ak_dmp&google_push=AXcoOmSR7TM3PGi2RhGlfJJ1_3_kaBGj-w2eJj0gAmMwRtMIjrnrj2Y5sfFvOhhCydBcCUeoW9i1zy7CXCn-7ZDAo8SH90EiU5WuubE&google_hm=Q0FFU0VHamZGWXlpM0x5Z1NLOEJzcDAzY2Jj
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2935)
Category:	dropped
Size (bytes):	92270
Entropy (8bit):	5.579815470203476
Encrypted:	false
SSDEEP:	1536:5dRpfwN8nOWjRHQHVisOt9Jw2p9EDPwez3FT/u6kKq9XCfFafAIx/dxzPOynYSra:5riN8nOU0it962rED7/u0YCfFkAIxrzi
MD5:	DD4636647021BC3142D6E6B04CBBC775
SHA1:	DABA2D6BBEBB09B36EFDDF8A7E50B86A9AB7440A
SHA-256:	4BC74FF6AE76FE9AE8183D503A7A5D6AB29DFC6A69213F8C6F396AD19FD8E2D1
SHA-512:	8D6162E6CAD30600E6A744B89FDC70C784E8FA0463C056268DA9CFBFC8837FBC010B9C63263B6B0554C5460E626E240B11E97F47F1EAF2781EF7027E6F6959F2
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var l,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,fa[d],{configurable:!0,writable:!0,value:b})))}}ia("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsumfHwOPoRchtMvH085N6Zvvd8r1pbc71Wz852DUESDFxIzy5qu6U1BVV4NU7WR8NSIc4xnikoh0hy7YqKCD5_WHHj__ylKahgjgxid1lDNKVUhGw1k8IcfkYE2yGYinlVQDT8TRh_fd9D_-PVXcLMEjVFzHHiC7_76uxD0&sai=AMfl-YQTiIPBJImbGAMEhvUhF1X_gM40hrFDheLDTl85g3Ll0-U2aCpgU_k8WriK74Y_EBdMURe9i74bOX1RKf-fv1tY8CH7IDBCqPbX_5b440yy9U_24aHyCCjjaMM&sig=Cg0ArKJSzEzA5CmZPg6mEAE&cid=CAQSOwCa7L7dS-YOXk-96uWTT8tWY2TcAGO55FFq5hGnIo9EA9rYFa33ZK3Et4Lp7btte4fg3w_vGhJEiz0XGAE&id=lidar2&mcvt=1069&p=0,0,280,1110&tm=5002.600000000006&tu=3933.7999999999884&mtos=1069,1069,1069,1069,1069&tos=1069,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=348108860&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=v&co=2976968200&rst=1733836873084&rpt=13231&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AayAvaTe3fzhj33RFvp441GKpdS15hyl5_uhK4wF_f0ucLRwkbKOwLFZJA4lIA7O1hyjUzl2ttwXwUj7VuEgVp9JCo5INfeIRLTmyvK4_mUY_qliNzUgdze7L_aEt7sdCZLQUg15WjiFtVegW6XHSSkzYQuiJeLR9Sf--oXyzX6mjFv3UaqFfDPFwT3OKZxr5bnx8yJm8_mldSZR9y70IsXGKFrQ&dbm_d=AKAmf-D0wKsFF8bQI1KYDUJw3ZFs6exo_TNSnp9fNbQGzKJhmjHGOep3Ioftv25MVK-pWeUPYza2Bm291q-FeLm5nNARJxeLPxQt1-HxmTG537qI7UP2IiGF51SI6ikLcrR1VtSMRa1XsWvUUxdtQD8UAVNIGKGPA5GHb1oeQBvgtWITFkxWJNkRq0JGTsB9uzZyA_CrnyT-BH9Ll8OlcE8l0RMg_1zouuz2D6KrrfRCK4nEy8oglelPO2-e8zJez4SioZRqRA8b89ukWQNBDKd71gi9Z3KpAlZTeupASswamWc3b764XeS5gA31UZg63zhXhyXyno06E3M1IZ0Q2T600i-OwmHtPovi8CBwn-zDwnljcGVjHXG2HZyb1i3cpb-ikqW2M2ygfFd1unSq9M1jEXAXbmBuKiZtZahldUBXQKYzKy0CGB66VNwyHNfdQQEFXnMMAEU1-QS0w5O9xvkmzi15J0edNLL7cR5C_wCB3fq6wVLV_jGY7WGliaKEYVYL7blgaTnVbflA30C8q_IvO0nb5qaV1JqdLj2CSMHEpspdbwfMcvBnxi9u23Fhz1Orw9P_OqphFenA8FZlJPsVVK6cv7eTFVPTeoxKfesbzYuVlaXfE90XE4T8pjny2G5cqhvtpRT3j45yccldKbqANaLLik8SgaY4BYikOfqinvdtjmNOyYmkD4VpbCdZM4MBv5FX99kMMB1qBdHUdXvna4GNZCGOoBliLjP_D2jNrnxEm9JN08yxYiRiyGIbFrqAGkLLytDB7TWKDy5cbIuvb5Nz02GCtSuJ28lnNfZi03ZygYz8qz8Try7t2DH765jjdBhImh_9vHy19IeYB0zL7FBKAkjarUjVPfGICDfWm4G5lZMPYhAXiL002OvQhhTvN3utDQ9WFkwEQk8K5U0ufQ6yLoCy8pxxi4e4tKlGfJCBwxkE8TI1EyWLDuc1lAHCoxZzXT_uXo_wezPHLmvQQ1ydeEoSuJI4_Bx1g7IObNsnPJUXan2TsJ0j8K0HP2F9a8XQo4coi4AZDsA9YOrl8r4pvUUX9ii6QZsgcBc11QActUemdPKLcJ6j5CQ0uKoPtU81_65LVsQNRuZN77NfUvDjuOgOSd-exx-raTrT6jPIg0QeSbxLtzDCE8qBepS0rMdUlP2z_cHa1JHFIH313hMdnFie99q2msJV_Vi2h9HklCxvDHDfv8AbI-Ou_cFib96CB-WFgM3ys4nmTznS58XASV8Spvm9sZL8U9PNtNGQhVi9m2Ns1_6fyNOdAT42uzVZ8SSQSvpj7MyNfJG_l9DF8TIWvBvcmnsmE0vA8cYHo6zpSBnvBXOcbcHZO27BC4XwORXDWRMkDcHoFGMfj6dE2VR_wZvRuWEZCnDDLohXiIHL3axP-0Tu747n1-W47XlbmoGK_5kVDuH3DrEGtQlGZJTpiPl56usAfDnDpD3fpa2vxFTW1MJhOHGvPfg3i39svb32Dz_VYEQFxCgsiaL_nRX_3NIbKpRHfdpv1N_zAFm84ndtgZ9pLqNcdNDv04jMhmZWPjLzag_AcfMtHkucndW0WcIY3fFpNvW9JoyyOkRSzoAByA6JIaKgwmGe0dYgj-bChoip-jw-9gOe7-7GjSIBrpIMyZhMMx0ZzCyY8e1LVoFbEnlAOKV_D0Z2T0WvF8WSKyS0XI3b-R17l9rMJw6Trv6mlSRptu2VbuVzba5C35V-n5w4QF4GkHtFB6DgAKpkiwcqHEvRsp62AZ7tJ5ud7utsgvZpidpP8WqxxWXGo6OpVVnC6EdaZ9WxDiwbmyvBo9_UrbOjkq_XCZ60kduPB0_gkaBdeqV3eafoscUPMgt_IZu27EcwklUO6GJyPzEHKZt3ZviMw5kPr81oBOuRbrUocgsZMyMjCTE5qCQREtVE_WdURiL83J_9wECw9qS1wCcfeTK6Il7_8kV7jziXR8-Lblglwnj6pafgbUZuW550yiD1gCBY2v_bTpM4TDi--881n3XLMJjCV0oLjmseCZv1FcPOMfHyImi74Z2CUWhEtgYMRPsnHGwbESV80fDOCJxxTN5rAo1_Awl4qNIxpMF18rw2qQW3JL1HRvAPJk8zWGt1j78PRIF_c5t7RTTSTA3vzRrVpkKLBCLwymUa_CGPRSaifCn-PdwyqG7oWkxbE0sksBei4--Lkpz6hS9omHB5DOW92z0qoQw2vjPhRjL3_IknSz7s40Gc84BPgtrWddJy6lYlDKRI3E3znrhGq3cq2A1euBKHqKcvv1SQP3MSmeanwGJsBaJAJeez3JU8ihHut6L93kYQhqmJ7RshZ3OChLktQqo9BuieFh7vJPEfrX869fE3uA-d7BR2IU8jOqkXmgEnhPdJOQQyj0nGGr3h5cdTM1Zg1iR0ju1d6PeVXw82d4yOnQTceAXAa4_LjXfsnFFkCsY2g3Kg673VnOmY92fqYihF6z7pfIUEO7XXaHECEBSLDIo3YxnQDEzEFkiE7P5kpnT0_L3J4aWuKidkyJ8f5NrD8tvAwMP5cxDK3NKOxYq9ErjAt5_cWMv5djm6dDlfjnedgvIpQZgfHsmG7P2JtZ2U3WecqTxEbLOuoSo3uiTwkoIfcNfXeVQaN_IiGZJ_TjgruuYCcgHDxPyLQBl0Yc3rnR0zuisURO0dqNMLO2KOzgrhiXyVecUTzei2iQmX3JczJUYUsokAdpInMn4_johHyq3dgRz1-Bff2O3bIJ1DzlcQfirRr37trEMLVkwJYTUIP4IwqVdzoazxbuRKBHwc4HSAkQnGPM8mG0fSaMhIbND7HZPtzcITfDniykNX7dAdbUw22ZIfG6lap9DYPqrKA4aeXGoOm0fwE0CjvnoWu4_Tleop_VAGrbj5AzJm97Ff8QOUkHzgXzm2lQYqIHoYcvC720ij0ki3LrhN7OFogOx-UXPsQ003PlTp4XBNSB5n5oQv3kC8765-LzO_7LK5EOE-m6aN50Kcvl0ikU6dcczc7vtAybIC-HD4W4oSzoXLl-_skwDD07F9dIiT52l4Q-OnyONVDedWm2IhfcU--gV0e21dMwtB-0b2qsrZuGMo6DPWKDNPwRTnVkQCBx1CiV59RY3awErsHOS0ix9PS1Zmf05zseX674OyNcdOx7oq_WgON7tJFR4kZ9vAXbs5gpyCZrVZiODqId0hPAGI-AFO6DaUkuVKr9fIHkZnWOsLIBWLvPNPF8ZTY_5lMa-pGXCfn_8fdCICAUxeXL7AXge-trvJOsoc7ywZm5Q1K_w404M79MdzTMAlep_wtWqqYQ2JXuvR8rwg0bVj3hMQK0waLNS9llXymn69PFBLwvUbpMlO3lSr8NvoE3gYM2YDFK5gMHCtuikGv_O7RHLPwVD_3lwovoykg4MMTywOsl2YF3LbnXXGiQy3116UWnMucDRMI_K9B9HwYVY8fBH0bW3U-ufS3M8m6Fw8m4KZcd1p7dfohPi4htEG_IQklnyzTjZ9GJVyhlChqR1Y93mJiZBj91xPuuQWmhPNj5fUpmWnUir2p0yj2W-kgbqp8_xJU5yr3WMCvtv6IGcMPb0ruu4OReWnWWboUCaYflXaxVoryJ9tfSB21nV2sJG_vi9nV3cKpmmfYQuGu3jskYi8dDkLGCL4dXV6GVAxWfYXRgeEv98lGCSoSDcH8rMb1Tvs-47WF7IuIT_8RsayFRIZDcQjmjBa_U8bSbcX0iRqPkf2z_jxSEfCt16UILc2zBsxO0XZ2AgW6GlnWD3LumVhdMVF_Xi4WTm5HeSk1ZgxoXuNfg97VsKddqq65VLjM7uJ_QOFuPQSovm8kMbciZg8YhAYmjyaoo4XMKiVlao7KtQv86kUDwVkJtMGqpGc2jqQi_Dnfy73vsNihSgUJISSE10-CHEaFDKzeVSxUKhHspqcnmXD-pxuRE-MzDeAJM0xD-tOsUHtnWPAIBiINQ_vu7IitS1BN-pQKvvP6n_E9vZWssc81NcO5mrQT0Rttvdvhy1texjlzgh8LygFuDnqP0Oxyhvu7Fw3BOq0Rm7t42WN9jeEOYx6Dx1NDVSx184FjGRHFh6IXZBgmn2rtASQ78c1UcztT79l-ASYlFGeg8I4l7RaUq2qUHUIrd4HRVhi3sX1aO73_Z2WaXF94YXGNrQIha1gKadA24sSiJyte9TBzIxhhWgn0QI0PXvfKbaHOAdw27obuyeOemORCadkpD3WRymxTB8pShi-oi1gmjXEocCtulheRS-CaWe3tKahg5a240LRRRJk-wwyt3P_YT0Lk1MdwJLzJ-9ybIT87ByfYSib5FKS3U6I7l_i0bn6zpAIrcwT2i56yh8-qAF3nDI6MIOPuVhjGx7ySnSEkr3OIyPqmgTXOlzzw5cHQFBCFYXtBbUmZeCShs8Y6fk-UBtWpy0nAno&cid=CAQSOwCa7L7dS-YOXk-96uWTT8tWY2TcAGO55FFq5hGnIo9EA9rYFa33ZK3Et4Lp7btte4fg3w_vGhJEiz0XGAE&cbvp=2&rm=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=toutiao_usd&google_push=AXcoOmTWzest5pHO4UQSyJUahOzu5qAREnxSNAwgaqrPipeQgTGAqOYjuceBhei7Orku45Lwl_wEGHDmS61jiIF6c5QbEhgpbTGhLHHE
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3147)
Category:	dropped
Size (bytes):	107369
Entropy (8bit):	5.533163001133015
Encrypted:	false
SSDEEP:	1536:MYF1EQGfJuI5cxaIrTX6M4VAR9kD2PAa21O/fVtDjzHk:BHr76MaAbk6PAa4OXVRnE
MD5:	D555466BAF6D62237EA837C4F9A096B2
SHA1:	B82F48CFB9F5D8FB48001E7AB9D33338596ECEC2
SHA-256:	D22438A908FB754C1BD6E2F368E8F43BCC5092C126B5688D0CC14B0804727585
SHA-512:	024241582ACCD23BEA36D07AC76CB878EF5AF37E6F511037A332A9A607E836592F577D9AB8C98119D7385AA65CD0622A0FBDF088AD2FB2067275F201B2BF4A9B
Malicious:	false
Reputation:	low
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.hc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.hc};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2610)
Category:	downloaded
Size (bytes):	8009
Entropy (8bit):	5.3334261122657995
Encrypted:	false
SSDEEP:	192:iwS/yVNeAQ5677f79S4E2gMJF06Z0IKqEbOA/iZ8Ma:+Kni56HD9lgMJF0fLSA/i6Ma
MD5:	B64043ED9914D7A2AEBF7526B92D6D1F
SHA1:	252CAAB0B2BD1E0B7BBF88F650E561217BD86852
SHA-256:	6F4FEAFC5D41EF850BE0A94D47CE184570945701729A779B6A98040FC0241588
SHA-512:	F169631788F9F438599CFD72BDD530484D8DA12EEA8285820271C82A02B12C4FFA29BBB7656D84A9E43A7FDCF4A815FB7FA0CF30F93BE214386150B19E8FF411
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241205/r20110914/elements/html/omrhp_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&c++<40;){var d=!1;try{var e;if(e=!!b&&b.location.href!=null)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.i)if(b instanceof r)b.then(c=>{t(a,c)});else{a.i=!0;a.j=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.i?b(a.j):a.g.push(b)}class r{constructor(a){this.i=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|c===0)b+=`&${d}=${enc

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z&google_hm=_lmaziMuRMytCK-uQRAFjw==&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmQN9CbKMl-JBph1LqSNUaztMqzIULXhqVHTO7lkLWDPc360kfnIC0VcKla-gt_CzegXC-kfGOh4Yg8nB36RL-1_RlXYU6Ee_Zis&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2875)
Category:	downloaded
Size (bytes):	9039
Entropy (8bit):	5.5264402315890315
Encrypted:	false
SSDEEP:	192:kh/6bKGDg3eksiGBpuMo5zigCv7I3ke3Co20Eendb:kh/6bKGDqeYGBb8igCvc3kkCo2Nendb
MD5:	37D6140D181883B03975D9454DBBFDED
SHA1:	38EF8848A82E58ABE73C1A880D03DD3C53637FCC
SHA-256:	2AC52BD16D3C1BB75FAC25D4961FC73897894D990F43844BEF8E7BE36FACB84B
SHA-512:	57252A856DE4EE9E51E13225AA7931F421E1C31EFFCD1F22E0ED5BB6C7E8B6472A43E84960E7DD45474E80677933B319ADDBC370BEFE326B680A511BB3635FC7
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20241205/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var n,p;a:{for(var aa=["CLOSURE_FLAGS"],w=l,z=0;z<aa.length;z++)if(w=w[aa[z]],w==null){p=null;break a}p=w}var ba=p&&p[610401301];n=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return n?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return n?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	656
Entropy (8bit):	5.041576937818988
Encrypted:	false
SSDEEP:	12:UJO694211FDO6Zj66pOhk0Wxkn6ZmOHc9n+5cMK00k14enEPCedG:G9JFDOYj6JG0yknYmOOk4TfenEPCD
MD5:	F3B7432EDD5AEAD57D64CCFCB6E6382E
SHA1:	1D3EB3FDA0BA8558000B10805EABAA6AB51C08C3
SHA-256:	7AB537773FA7C41E6EA63BFF0BA09BE26BE796EBB4B1EF7DA1E4C398780D7C86
SHA-512:	6E6D0CEB7BE2ACB1CB85ABC385271C2AFD0B05D1257914030A85112725729FF0E0A536E46B83B8DBB2904E120015E824FF430968B034D39D62498C1ED9637603
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Google+Symbols:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ fallback */.@font-face {. font-family: 'Google Symbols';. font-style: normal;. font-weight: 100 700;. src: url(https://fonts.gstatic.com/s/googlesymbols/v309/HhyAU5Ak9u-oMExPeInvcuEmPosC9zSpYaEEU68cdvrHJg.woff2) format('woff2');.}...google-symbols {. font-family: 'Google Symbols';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=Mju7znnTTG9fP0rBkcIMC1NuPMG0_8EnzzjTr67EBhU&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house&google_gid=CAESEHXluU4MV8k6x_JDzQyB-kc&google_cver=1&google_push=AXcoOmSDU2MlkJW6XxLBLoTwACZkVcK0mQiPYIEd1hBC2R6nTmyyHLVqwG1QX01gs_OUgshi7wBTTqNjV0TvBQNYbuTIMYUmE1ZfarHW&tc=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35690), with no line terminators
Category:	downloaded
Size (bytes):	35694
Entropy (8bit):	6.129504982299746
Encrypted:	false
SSDEEP:	768:KN3Bofrbx8xvTH4snhXIUIVkkiSJZZGc2ZAOiBsvH/K94P75FYReG6y7hNwna1c:q3inixkspIZkkiSJZZGc2ZAOiBsvfKIz
MD5:	1355748FB99FD8F650C9B388E3107B1A
SHA1:	E9569956D83633715819102FB74586DFB7ED719F
SHA-256:	AE7DAC951327F95DF145DD67BFDA73DE3C877AADF20AEC76D48E80EE6E480F0A
SHA-512:	1C1399561E4C2629700FFE3F7D71958E24A46E053C8A80A2F1B15599D21728BD6FBA16D62A39655E109D1208CDC10D9AB828BD914E7AAF5442A281C38868A3C6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AUEgyA_Sss1Uu1TgBySXtVgHFL5J5traaVxQpRWrVEJkKloqBxIj4ZGJPPENvUec8lGUl7aAjdtcY1qJsNcXvN_TdcforqV7max7OFda6r3a7Ro0GLJioENKzK__mC_rVCbRF3jhJ0Ugo0Z8B4r49D5RXpZ2JKmjCoFpR4xExQQ8brf_ld_xSQFyo2ox_AZv4ghTXbF5eggjqRY_3Mk8dO1uhOXMFzJarXTS693QYX6xlSBtk&cry=1&dbm_d=AKAmf-BjT_SJ1rePRZwIwtLZjOVTfBSd7xaAsxIyWgUBNeZfunBAt-iF2jYEqNLQAYc2rdhqZhD_oFP7ENCBbNiMhTW2LrVTe1x0VSDQDSL0s5mGEbzJPqL8aYpbN3ghnMdR0sCbXVDTbQ7uWMaNMtdJUizthvS-Nzrfyms9bgxRvtZWOXkYLFTap1F9T98q9fWd4wCgWnR7Am_6-Ab9iMfTGvAQRu-ZGW2zFKEO8UMw5Kx9YHXCRm3u_bfzkA9bl_wLNt0CNJKDfp4nmIbLHx4Jjvie50cIibPLmgXkBx6XeWOzSPBLhZAvA2Vf1DqI2psJn6Eo0OLoiPzXFgXNfRZGbZajdFQxznCEJO0dy739A6oHRFWj_y3hSmuWX_p5iibI59Ly8zo3t76AmBoAIP_pDpFA_56bp5C9Clnj89MIYUp7vMoIuVh20eS31LDdO7zv3NVc0ZS5GnDEl0vrPw0LOKpFiJZz42m7Zaqv4ty8SdpOgrEKvtRqMOkupdgimSZWkzSMBxaekqWxQnKANRhE14T3hJAHllta2C6Z-eo83qMeT3VaAqWq-XIXue10nmTuvBWQGAuHGMQIHcTo-i6LjPQo4G8Joc3i7NJB4y_Hkco4FLeBFYERHGgKCa4D9JXmfPcVM7u0t-tQ-zxkXXqcI_uAG-uRpFtaI4JS5yMUQlKf0R_5ZU4-c66aIRYUbi81--b0W5ipc112qHEPrASTGAj89ClJictpiIracdlnYoph4x8Ly-VqFzGyjpNpTQeoHBL_3DyncsQyjFK4OGsi0dyj57dsGMm7GU0wGYeGDuiMlzuP1Ravf3bTsPgwNd58BWAtiQdNYP8KyNOCG3Z-DICEgxM239sR0Afxxzg4_ZcB4mnUsYJIo-gsQtkk2bRE6O9rlhObDD5hpiJD2rZB9KALkQSQEpAHBILZOITSOCAL6ARWeCYNo9iyjTHLB_dZpYK8jHPV6TvN2sZ4Way9G_2lLxHdFGPw-oSHcmmabq0VJ52W0IFI3c3W1sJtpIVX6O7Fu-WxERJmnwp1VvM9YMPnDksa5Bmq5FnXzm0iisRIrYKUCnJ4O5zp-akpMlVBX1X_iTX4WOzKm4BEGfzrVqA01NcSTQPIGSpt2KFKwlMaBHtPTKpqp4x6X0F7XA7-CyQaB_6RwhZ5vaQAXTXFKgQHR8sNML35DzYJ_R31uGR705-HqOfE41WJSrOIm-Wr7UTkU274ghx6mozQ49gUevUVF2hb2eaQnrbspSalBocyzd7gTtv7gmmhKeqO0w5FiL6QDB8yapjujClsoI2q4-dloLd9gkAzxd5RotCzdkmppJSjG9S5iGL4Wi1KleyAkEUorWbDSSegRHeKDzOCHvSpS9Sf1te3Lbq4nX1vwrDfxYObGdhAqXru6LpJ_BRrvweQrAOuvqykzLMVcdyKL4eRlm2WTxoYU64T06QRc3FmptcdU1xKBNQvywjaKaCJUjmvNXWc7MS_cJRtCBLdaDeGWgTMUpNoTzaYRpPAxvZw5drencnyr0zlDGLZkkqdRJh0TomFLkS5Vr-s_dO6WZ3RwMnFqDeXSg-_OokYFDoG4CEzktVKZtkzu-5gQSEJSv4gi6bjGTMTRG_3Cx6jwu6brETCowPp0VbxcLcCY4-wGUSFdojyj6G8QKMr6LeNrs5RIrcJWNJdA8wy3LRbaGpPercE1z0H1ZPWfDBT4KYZ2uz0ZEUPimqIuCHdGktBCJZlwcjl5se1dfbM3vyYc-7-KVA5qjjX1V5lu-Rm5sjl7pm57ltqExE-qCoxuyQYQJdyz3vDQEPVIOP3E2PISRtMl_YpE3nbbn1R5arD5Ki7iYbYKuNWmqYzKdq2bYtaZXkY6pBMDp3axCKeKdg7ZcB_ZsJ4RVx6tzlubaDfP6GhgC_YtNzO7GqfqAZuMonHfxK-xBmWtny4-_n8nB5-ji2dN8YV1HZoA5IBH_3q339vX8yZHKCzWe7cQJXhZH6QBQOAuspLcxC4Kjp_VGtnb18icSnD_GWJ36gve_NUKI_t_nmXH4JhDM36-tb6ZhGhrkZZa4La1vr0AUalwOiBvFNJm9Z3w58UyEUdTsacP1O6N-Ptf1Gay16OvpOlXTvQ0J462w3j7oNllxenYnHQrQq4OMrB5owevlDZBN3iDbZULfBKS5suOeAG_eIq0UDlqzaPSTcxw420i-TpIgMFIktCyFsamgCVFiZShG6cCfCKW0kCB1VnLC29y2Yh_GmKlCtBcPgQIVVcNWCxwkG_03CRySqbVL_Kh80T5kIGpbxuHQWS4fxOGO-jaRDSvg9eNVo3Ka6H-xQ-ZKYDCmaVNoG3Wp-WlCPqnF9WOlQdhx-m_ccJApBlQtVWdcP_pDNXR7LDGgupTZQOw2tmK66PzjmzSI4hMb0Fbmz3fk9_fh22HlmE-h-mDhDe78sdAv2QHqWWO-txl-2YylgofPFCscOaMis3iO7IaQ9B5KAj4pIYLW4y1n5yxHIKGMkP_T66DxsAWT5wJmEjhzGowyELKoNwcZJzM7G3ZlYZ5D7OUGr8_b-2zKHomKd4EhSa5dEq2lRqwfo-VDASrtG4Oi5AvD35ChkIGfxyNUMaYUm0nMuVpPwH3rZOjqfJ7TUOGCoal_x3CqFJJ3xEslePuCl61pMA_aE0ZLds6EKh7mpl4EryTDVi8N_pPk2uU2CSRqXdQbuPpMXOkGss_nURaSDARqz3olhko6Yxyg-fFV660DRJ_rOrbkePW0uxRWFD35wOzC58SQlMF1qkS-03plHmHmVRSSWZeMTOxgHnMNKDkqibpGzpZdcTVVPSSFWw2IHZafT_Hmb3PggoJ7H8QbnYkKwwgwqRtE9EiSNrAD0hWR4Fc6mZCtk1SMBwrd5WEBxTbNiWCQa7vKPGflbMhHRO9j93gHTrlxVj1GkGpN_im5d7QmfqK81ZnAK1fLgWQnqb6OUEjX7PqaiDLEtr_w-O-hca2vgFh38zQzA6VlYP2DJxOE0OsPhk_oXX14eQMFS7mHeMA1KHlYxCQCls7fYsaXi4gXLI2UDar0bhG8wkkdfWLeT9v9XtHM7CLW6czXRhoE6ASq9OwuaNU-QcWkLc9T5Uvx2sxFWisFCjhkqPHLhwweJ4m1m_TGFlDSF7kAFfI4yORIcOLDT-68DXFPg8F7cABlKFTpHoyjO7ABvnc0jJO5bq9MYz16gSYbRenyv9MitSCv8irij7HDZjiU8cMrkByRO0A6J7jdhh9jEO-mCzZkNrGyrEGJ4Wjn4cV7qEyZCj7Jx_T2iqFVhM6vLhot2ASItZe3RzoGeWKr_VkYfu-mRSZUUHUpJPgWoeBAlTSrCoVAZ3cbQdNQhSo8nGRyJ0dxhEYqLlsxf6IQPCV6Oc89bWxlpS3Y5EDd72vjWnB-CxxHOAksRpSXQ_fn63elwTMlqdfI1Di3F6BcGIp4lfrOYKnqfdlT1xhTfuLoiNK9QejUNvAq7UyZVkHSCwp63Qy1ljnRtyTC1V3jPOcmNCy0hj1YP_gpVbeRLTM61S8mdYWzB5ZFWOfEo3b514hHV8zEg5RjggYC0ZXDHcZTeLc3bDXJ9vyQLe8mn_yO_xIpiVOXSw0F7pNCbiSlDhN6b4bBafqjab8Qc8V-73IoonM0XjhqEM3Ucu21n2y3zicOmHPs2-p5_VAVeiiBpSTtYkhNqZ4l3oJuf3mEc5GWIkDLMdQ5HYXCYnbwKNewejjQOeybnLXwKogrBESXld8WiaUrA0Jzr591JF0QsuTC-dbvF6Jjwqd3tsSGxXwpyBoIguaTDd2a0JXnciRHZjbT42nrJs8rq4-W7yMnDqnkZr1p5lUIKL2eC1Kdw_WtFwQN__wz0V9s8XJUaKSIHNNwo9l_6axQYIfE5uniRmSMEjzKjBjPk&cid=CAQSOwCa7L7du75pWWf1GMmsnF8r36B_4iuH19IJxLQ0701gyxwaFZ9kIBkylWZYkBjpPNMdAXBn3zcZdR9hGAE&dv3_ver=m202411180101&nel=1&rfl=https%3A%2F%2Ft.ly%2F&ds=l&xdt=1&iif=1&cor=5174153701977326000&adk=2215386028&idt=3091&cac=0&dtd=35
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:9px;right:0px;top:0px;position:absolute;width:31px;z-index:2147483646;}.abgc{display:block;height:15px;position:absolute;right:1px;top:1px;text-rendering:geometricPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.abgcp,.jar .abgc,.jar .abgcp,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgs svg,.abgb svg{display:inline-block;height:15px;width:auto;vertical-align:top;}.abgc .il-wrap{background-color:#ffffff;height:

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8731), with no line terminators
Category:	downloaded
Size (bytes):	8731
Entropy (8bit):	5.753395504217127
Encrypted:	false
SSDEEP:	192:IiILfZ3uIfwLOifTQBj3HD+RegnsNKNE4fFedb7jk439v:HAfVuMqXQJ3H2pn3u4fFedHZR
MD5:	79ED0A816E93B564A42C82BC19871E52
SHA1:	16ECB0DA4ED4B8893B3D3FB1CAD9E1816E1B4C63
SHA-256:	CC7C9347FAE393CE0E96E5CA5C6D479560C9D33B08655E41A9DC9AB086E67582
SHA-512:	BD994379EA4A1EE42FADFB7B11AD17DB728FA16E97E956BC853017647E59B02B858181678D62002B5D8C6CCE46970F96FE379E1F6CA9147F51517275CCEDFF79
Malicious:	false
Reputation:	low
URL:	https://t.ly/cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js?
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(W,h,i,j,k,l,s,v){W=b,function(c,e,V,f,g){for(V=b,f=c();!![];)try{if(g=parseInt(V(485))/1+-parseInt(V(435))/2+parseInt(V(458))/3(-parseInt(V(522))/4)+-parseInt(V(467))/5(parseInt(V(437))/6)+parseInt(V(429))/7+parseInt(V(502))/8+parseInt(V(442))/9*(parseInt(V(424))/10),g===e)break;else f.push(f.shift())}catch(E){f.push(f.shift())}}(a,273529),h=this\|\|self,i=h[W(482)],j=function(X,e,f,g){return X=W,e=String[X(459)],f={'h':function(E){return E==null?'':f.g(E,6,function(F,Y){return Y=b,Y(468)[Y(452)](F)})},'g':function(E,F,G,Z,H,I,J,K,L,M,N,O,P,Q,R,S,T,U){if(Z=X,E==null)return'';for(I={},J={},K='',L=2,M=3,N=2,O=[],P=0,Q=0,R=0;R<E[Z(539)];R+=1)if(S=E[Z(452)](R),Object[Z(520)][Z(431)][Z(480)](I,S)\|\|(I[S]=M++,J[S]=!0),T=K+S,Object[Z(520)][Z(431)][Z(480)](I,T))K=T;else{if(Object[Z(520)][Z(431)][Z(480)](J,K)){if(256>K[Z(444)](0)){for(H=0;H<N;P<<=1,Q==F-1?(Q=0,O[Z(518)](G(P)),P=0):Q++,H++);for(U=K[Z(444)](0),H=0;8>H;P=U&1\|P<<1.71,Q==F-1?(Q=0,O[Z(518)](G(P

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4659), with no line terminators
Category:	downloaded
Size (bytes):	4659
Entropy (8bit):	5.820392907839686
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaQv9qYo9H:12cV9sT3AW7NIzFv9qfH
MD5:	B74A5A89207515807A175B216BACE6AE
SHA1:	2FA0226293E14CC6E3B9474209B7A6C7AA664677
SHA-256:	ACC989E5C40454A99D08741AE885F4D27C47A8CED45C22514EC6F76357E58EE5
SHA-512:	0E71129B04881C311F0897693CAE093D3EEC241E04BE967F964154B78EDA3BE0094C8C3D2CCA468DDDBEC2255CA20C6461E9014745AB325568799C0C9B7D8ACE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10875945736/?random=1733836867034&cv=11&fst=1733836867034&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	dropped
Size (bytes):	62258
Entropy (8bit):	5.369161072194704
Encrypted:	false
SSDEEP:	1536:qd22/Pobzfha4zCDlorEZ65WCQBDsGZpICEYg:F2YbbFzCDhiyDYCEz
MD5:	3E3EAD588F03653A994C76CAF23E17E0
SHA1:	5A6C4CC07897858D09554D51B8F97F1AB2D9A5B5
SHA-256:	1B919E74E9E94B1595916E212BED8878E6830FAAB9EC3E3BC6688333CF898B0A
SHA-512:	520DFF06A6277C6A08A9527612071F717FBB02F08CC40EDF0C88FBE9150A03E05694D49AA4E77B19644FA491EA40F4A7F4AE2194E529561872D3F4A9D3FD395C
Malicious:	false
Reputation:	low
Preview:	.....var __IntegralASDiagnosticCall = (function() {..try {...var alreadySent = {};...return function(code, err, config) {....try {.....if (!__IASScope.isDomless) {......try {.......__IASScope.postMessage(........{.........code,.........name: 'jsdiag',.........origin: 'ias',........},........'*'.......);......} catch (_) {}.....}......var gen = function(code, err, config) {......var url = '//diag.adsafeprotected.com/js?';......try {.......var errMsg = err && err.message ? encodeURIComponent(err.message.replace(/ /g, '-')).substring(0, 200) : '';.......url += 'code:fwjs-diag-' + code;.......url += '&err:' + errMsg;.......url += '&codeanderr:' + code + '_' + errMsg;.......if (config) {................url += '&version:' + config.version \|\| '';........url += '&server:' + config.mn \|\| '';........url += '&region:' + config.region \|\| '';........url += '&mode:' + config.mode \|\| '';........url += '&forceAppend:' + config.forceAppend \|\| '';........url += '&asid:' + config.asid \|\| '';........url +

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2904)
Category:	downloaded
Size (bytes):	31008
Entropy (8bit):	5.48087700202167
Encrypted:	false
SSDEEP:	384:BhE5lZyIOQOG1P0/JOc94tWuT8oOzd7edi2y5yLVkykhE5sTFwy6r/zuwP8y4iW9:ulUrOHtWCOzd7eJS6paBOzXnFpHi
MD5:	1AED6BE435B7F219383BE211D908CCE4
SHA1:	A0937381C0453EC9558DC1B9ACCE355D6CA5B951
SHA-256:	39ECCFF87303E4DEF8D131109B031C3A973ED7163D9739EABDBDB1F5B710EC73
SHA-512:	CED95C3F3F932055ED06143DCBAA1B943210FF2D56EE7C733DE1714AD46B34FA5FD43F358F8803DB03DE28D67CEDB7D08F1EA3C19F7D24F33DA698BCA44AE83E
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20241205/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function q(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .var da=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},ea;if(typeof Object.setPrototypeOf=="function")ea=Object.setPrototypeOf;else{var fa;a:{var ha={a:!0},ia={};try{ia.__proto__=ha;fa=ia.a;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54030)
Category:	downloaded
Size (bytes):	55315
Entropy (8bit):	5.7559945745327
Encrypted:	false
SSDEEP:	1536:jzficAmEcWWxvTyzKHXI8YrlKuQ0lluT11JbxU:/icp1WK7h6rlKH1A
MD5:	C81E4B9BFFC9673FC00ECE98A0816435
SHA1:	9F5D6D436D9B6FCBC6CF8FE5076C27762801CEFC
SHA-256:	F5869D64A02F0DF56CD581E73864BF6290063F16ACE37A8208CB6EDC657145AC
SHA-512:	791290BA7D073B519E39E436E23C421EE79556D0818B865860548FC284CD7C81879DF9895B93CEC5CA7115B28913C610A431EAD5AACA523C5AB3B00408FBF5B6
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/9YadZKAvDfVs1YHnOGS_YpAGPxas43qCCMtu3GVxRaw.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function q(Q){return Q}var a=function(Q,R,w,V,l,v,K,M,F,z,t,N){for(t=(z=43,71);;)try{if(z==51)break;else if(z==V)z=G.console?52:74;else{if(z==95)return M;if(z==w)z=F&&F.createPolicy?Q:95;else{if(z==74)return t=71,M;z==52?(G.console[l](N.message),z=74):z==3?(t=71,z=V):z==Q?(t=R,M=F.createPolicy(v,{createHTML:L,createScript:L,createScriptURL:L}),z=74):z==43&&(M=K,F=G.trustedTypes,z=w)}}}catch(B){if(t==71)throw B;t==R&&(N=B,z=3)}},L=function(Q){return q.call(this,Q)},G=this\|\|self;(0,eval)(function(Q,R){return(R=a(84,93,81,90,"error","bg",null))&&Q.eval(R.createScript("1"))===1?function(w){return R.createScript(w)}:function(w){return""+w}}(G)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10875945736?random=1733836867034&cv=11&fst=1733836867034&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	95430
Entropy (8bit):	6.135668657625499
Encrypted:	false
SSDEEP:	1536:ROdy0n/jD3inXspxssbcsGKCT/Z+5Cgr0TePcA43P4qwuWCjknraAJaHdvm:RMn/EjrzYuePh43PwaAJaI
MD5:	4E18061753B1AD57C6F6F375FDCF1371
SHA1:	65981EFBC3CC128CB435A14A774070DF4268063C
SHA-256:	1C274ED8B4A0CF9AB35C032053AF645B872D844D8F21642EB2621748D0395762
SHA-512:	7F5B2C1C37393A83C1C4DB95D02D52F4993911EDA037D885F85A5A16FAEFB60215DBAEC0E8BD688EE5BE2807EDA87466539051DCB7C7D7A466926FAE45ED5CCD
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=899877383&adf=908843369&pi=t.aa~a.1108372886~rp.3&w=350&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=350x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x280%2C1110x280&nras=3&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=456&ady=939&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&psts=AOrYGsnH2YjzCpBRAGU6KyvDt6PiXS-xJLgIoJGD5F9st8hbmAyGO7xHRn08YQVeFzD8JHDZmGe_03Myst9GDBpY1SDlJnc&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=693
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20241205';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContainer"id="avic_COei2dylnYoDFUV0QQIdW94SOg"style="left:0px;top:0px;width:100%;height:100%;position:fixed;pointer-events:none;z-index:-9999;"></div><div style="display:inline"class="GoogleActiveViewElement"data-google-av-cxn="https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsv0d1moVwppqc5-EZzCucsUNn-d8w0SUkkuEi4jQlctq31Iyp98IqG8_Of4s910k-IrXOSDm_QwGk3MZemfupj3HxkymnnX5tbpubipW44-8CYSfmowOipwg3-lYoiLgHoK9eQQBbtSb8BZFD_VXxzzN6OVTDk2IWXUNK3r&sai=AMfl-YTDLAq-OkW-abb4nCRhQB95IKAB6HWuqzgsj3pVH_VFH8MFKkP0JzMuSF9CWY4ZU1rbPiQsb0WqV-XwFA0UggbZpmB5fbvCQcIBN-GsV6XFW70PU2Ti-Sq-Xhc&sig=Cg0ArKJSzIU8_tXB_0qsEAE&cid=CAQSOwCa7L7dy4GQe19eqP48-41B9oCTk-S5T_DJcZJcqRnUXHct1XaRYHq68YDCgTCU38VJHs9eNiYsD3jKGAE"data-google-av-adk="899877383"data-google-av-metadata="la=0&a

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	dropped
Size (bytes):	217964
Entropy (8bit):	5.536434392966954
Encrypted:	false
SSDEEP:	3072:nQdOdmUxgK3frfPK0LMRoSN5bADFXBExpE2c534uSXzD3PjqInN6ttEJHP4:QwgK3zbI0rExnc534R3PjqInNDFg
MD5:	BA23FE1C8B0F985F6BB2CEC2F555A622
SHA1:	D776147F710CEF38FC5AA7AD793EE45A13D75C90
SHA-256:	C831369E85D10CA509E5CEBE9A788A052BA9C53F18CD1BF780E0A379D1D0C093
SHA-512:	637D88D59A6BCA4609F5F611AB14F233CC49D3003B9382856760AE7D7D00DFE584F30B9E125B4A60424B7901470068A929AFEF03138CC3BAD06747BD07BCDB5D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-89207177-8","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-W1D48QS4F7"]],"vtp_enableConfiguration":false,"tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0,1]]].},."runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__c":{"2":true,"4":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__c":{}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__c".,."__e"..]...}....};.....var h,aa=function(a){var b=0;r

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	273311
Entropy (8bit):	5.562421103985418
Encrypted:	false
SSDEEP:	3072:kkdOdmUxgK3frtdXd0QMRoSN5bADFXBExpE2c534539rHEytTD3PjqInNRa2XXF:ZwgK3ztPI0rExnc534Zlh3PjqIn2UV
MD5:	E67188064B9DC63523A27973648F30B4
SHA1:	1616BD5194AC6BAF59A8943816750ACAC4A104A8
SHA-256:	2B56A951DD5A5F991E64F653FB4C8460F522ED1251BF955280531A4C59F43C1C
SHA-512:	C00B08C8557CD1C68575E38F4F3AD89432EB328237A0259D7C2DBC3770CB6A914AF488BB2E02E97A304B7E99EEFC4B75590919178B0A5C0FF65790DEC7780C12
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-10875945736&l=dataLayer&cx=c&gtm=457e4c90za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-10875945736","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3237)
Category:	dropped
Size (bytes):	11822
Entropy (8bit):	5.31177654130854
Encrypted:	false
SSDEEP:	192:X+5WzIjblzXpfBfj+0eh73RvCyZRbkRGE7gr4Dz9LkSR8MWQYBE:O5WEzv0nZRYgr2CQY+
MD5:	1A4651E1105224B375C4A43F77254C07
SHA1:	35CCF976A6875B20B4C0144B70A70ACA3A511AB0
SHA-256:	39761E2A7CB0E42A8B09FBBF0D2C4CD9FB0C1568C045B1C5E387177DDA8FF064
SHA-512:	373E37A6E202D6EAAB71B7409914E3105D4CF1E53C1CDE78E41D6E88E1CE3242B76FA5A2D7F46E36D4E8546B0FF535E2AF32FA65783DB4EC5A504888C83A63B9
Malicious:	false
Reputation:	low
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .var ea=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},m;if(typeof Object.setPrototypeOf=="function")m=Object.setPrototypeOf;else{var n;a:{var fa={a:!0},p={};try{p.__proto__=fa;n=p.a;break

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	dropped
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvMoMPpTZeWhmnH7c3lCz-fX3GJLrTVQL2jEkVm02ogc6deNN7_XqfcIcSAk9rPhoWFByStdUYWsxweyV_NakJNV0FVHhLNUaQgVtHKFwd2wK1uy_rIkesKnweiH-oFNeOub81K8WtKkm0MjPxjg69HjQ&sig=Cg0ArKJSzNlcDFQ0zxeyEAE&id=lidartos&mcvt=2588&p=0,0,90,728&tm=2600&tu=11.800000000017462&mtos=2588,2588,2588,2588,2588&tos=2588,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=32&adk=1405019980&rs=6&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=b&co=2976969601&rst=1733836889991&rpt=6795&ec=1&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 438 x 438, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6616
Entropy (8bit):	7.744280326763607
Encrypted:	false
SSDEEP:	192:6YBgKwA8Fo885H+TPrk5/nyQhhUe4I4joYM:6vKwTod5eTPrkEQL4FM
MD5:	5CA625648F44C7744A57E73B5D88007D
SHA1:	F19FD074E7B26BC8863550862C62D8DF7245A51D
SHA-256:	2190155B6875236EBF22C429A1B26E81AC6A7F21EE1F344AE03EF805BBFBCE8A
SHA-512:	C01EC7854500A9AF499534941AC467F0063CEAFCCECADA7D0967173923F730EE811FF9799B5C0B752852DAC97F7F390D78B5E9F37EDC892E23C8FE6C0CA95A2C
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/17147156143050066190/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	.PNG........IHDR................p....IDATx....q.G.........H............p....0...............>L. .h..f..y.P.......7.wJ.5. ......pH...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l.."..HE....`. ...@...T.....6.R.l....0...:v...Xk..]..s...@...T4E....."^.`_.#..#?.;.>..V.uJ.K.VJy...".'<.>"nj...../..'(..".=..].uq....N.=Q)e....n_k-.+..+..<......kjl.......7G-......\.;.{l.$..$.G`.L.`{..c.../...Qc.....@...T.....6.R.l.."..HE....`. ...@

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	downloaded
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=toutiao_usd&google_push=AXcoOmRknDDpw7X_vzsJQkka1hWUZus22LhIH2xpmIkbYAcfJzAd1SyxM7PltGeqgkyK-jeS2j64IDYHn1cbo6PLXy1s0P0qFHXcG3GLAw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20241205/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4466
Entropy (8bit):	5.398535199359124
Encrypted:	false
SSDEEP:	96:1OLNOlOLNVFZKOLNHOLNk3yOLNqOLNMJc+umOLNY1N2OgNXlOgNtFZKOgN7OgNSF:ANOQNNNiNk3XNPN4qNY4NX7NCNRNS3sA
MD5:	4F95A1EF393E117E35969A24E499FAB5
SHA1:	15B3A5CDC1EC23EA2DEFBA4272E69691CA8D4B23
SHA-256:	D95EF68ABA30EECF80756AE2645AF00669C14C2DEF73EB5D528A5F767E3392D0
SHA-512:	47F97C31A67D2D3D81596EC13C81D141DFA7B359763A8F63DCB6500B6A36ABAFE0F8D8F334436DFA0B1C6D1928CD313DF1C2E77E7CE6242F3B16D874D58C87C5
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A400%2C500
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-0377

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1047, components 3
Category:	downloaded
Size (bytes):	195704
Entropy (8bit):	7.927292175617737
Encrypted:	false
SSDEEP:	3072:l7UA/UqoTwjEP/QEXXB6i/+SCbhWNu+WCsdv2Bj27/L79VrXVubf+WFMhplplzx5:lgA/Uqan3xt/+SAW8bCWvYjmbVuiCmT1
MD5:	7BC5B5C636AC2B7AB4957622AA2650F9
SHA1:	AA8995110E6A9209BD0D4487B57FF7ECC9912714
SHA-256:	11578C7E74105E40839DA8F57739F40FA270C14B7E0DB1F9B1A3AC927F607501
SHA-512:	6890BFAA8A0206E785E2264103EE34B4AF3D9DA98186940981EDBD7380DE3CFFDD0A40F9B27E5C523559DAD0A38C25D815D97B99EA1055E389539184DE6AD9A4
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/18426777046261427710/14763004658117789537?w=400&h=209&tw=1&q=75
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!2222222&22222&&2222222222222222222&222222222&&2&&&....................................................b........................!1...AQaq........."..2#BR.$36tu..45br.....CSU...&Ds%7V...FT..c...'Ed...................................4......................!1..AQ."2aB.3q#R.....b..................?......P@DTQ..n(.2U..@TTE..T.P."....\.PUP.z..".AQ..Qs..k....(2..T+~A((. .......>......\y .T..[....7...gu8 ....Zd ...-3..S....a..H......(..b.}. ....W7 q.Q.......D....D...}8.OE.Q......P.S.qAy..;.......Aq@.%D...P[............<...fh.....R.-<3TT%..!.....D^(..............N..<.NH.\.E...9.A/.. .....@(%}8((.;.R....j..D..6 a.. ..QP..@.!.tE.<\|.JR....%PN.....R7e..k..a..QK.,u}..L.......^..:".j.kK'..FD.F.o,.Wr....~.&m.....}.{.vNz...............z.....3.\|.x...z...N.3..1.tKBN<....... ......f..o]w...I.n.bf....B..k...{\Z.c5.sg.......'..W.......3...%}QP {w.......sAJ.s...W;..*&y.yx(. .<

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17434
Entropy (8bit):	6.017003256459846
Encrypted:	false
SSDEEP:	384:jZ/Puk/SjzvgUWOpkPEOKiJAjmtG0ZWGPCDAgmv6wxVRbvCCUBU1Gt2AUcJNzo:V/Pv/S3vgUWKksOKiJ5BZWGPC03UBSG4
MD5:	C8524CF79C55E5BE214BF895D8C1208D
SHA1:	7B4C903F527A3C5672CE738D3D5E8F71BE168F45
SHA-256:	04ABB866F57CE7E8B4BBF67FCAF92170CED30F1C7BCE9F3A98DFF8F795804A92
SHA-512:	484704CD9D0AE10261D72E9140970DBC0113C9028D97B789773EA3BA5B2E9C841394E2324E473696BD0F5A3721A336142E6F2ADB0F3CA05C2ED46CFFE4CD8EBD
Malicious:	false
Reputation:	low
URL:	https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20241205&st=env
Preview:	{"sodar_query_id":"TEBYZ73pJty9hcIP3q_q4Ac","injector_basename":"sodar2","bg_hash_basename":"9YadZKAvDfVs1YHnOGS_YpAGPxas43qCCMtu3GVxRaw","bg_binary":"rUrzsg3J+nxdDTKm2NthY9PpKMgkZx6RFWSReuzr47sTkHs1WwF2X5r1tCtOWMVIwO5uZviu8t4FleYVTSqdUvbDU9peJ0bRMMIuoqUuBuIMUdbOGqdxXxuvl8YsCw0oXNgqhsMC5BV1bDiMb5eeNUUftZr23a8tU+VAoyqN06vtKyhHKVH2nS43h8Ud1PIFBs0TCZh6HHlVgEQUHr6tiFBJuIMDd+xBC1K9DAy4/XimMFErtAJ0xrFLi5nUd4oVl9AEeZ6vK1d7Mf5NJYAxuIwjgwsnEU7CXFaJmQZDq9D6+TVQqaSWfgqhmYbTRAgkzZkXezgAiyGNX5KGO64WNMXUqasjCNtJp+U2OFuGRvOiSrdzLUxtDeAzy39pJZt47FArO0hHSPyW6YDaHBzGlIQCNeGW5CYS8bRy2Yxxnk5fMUrJFBXZyzLbs9m3nMwRjvvjrQ8JRwZ5miY2xJvvwkJPnTt7XI94K2XLQyjkRdgPklIAQ6xockl382OLAJgr+ssOtPvBMDjlrSMhxJwNDjBW9TrNdEcl6goaF8lVoW9i5XTU5/xq4J6MQr87TVkk+qrD9jLed0RdeGzztAnxMDyUi28rj5YfnLifl/ZWmp3s8+7VXb0nNZBqbUGfdq/tJIlp7AIW2JoGv9+6C3/loHv672ifb9eKvvzyI47JnhFeR0XcfDDzN0bDu3aUCEuqprNPYsIPiZRkEG3yGKr/5XO8PvO5P20MnApMRCtjwIZvEy0+0SNZvYJAOPVMkW+BII8vfYyjR7Jh9lpupJ8e3d5Fck9QbIMQmcsJO3fpE2MMUfBiJ+JLRKEuTOC+QvJntzI4I4y5l6PZUU7jf

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54030)
Category:	dropped
Size (bytes):	55315
Entropy (8bit):	5.7559945745327
Encrypted:	false
SSDEEP:	1536:jzficAmEcWWxvTyzKHXI8YrlKuQ0lluT11JbxU:/icp1WK7h6rlKH1A
MD5:	C81E4B9BFFC9673FC00ECE98A0816435
SHA1:	9F5D6D436D9B6FCBC6CF8FE5076C27762801CEFC
SHA-256:	F5869D64A02F0DF56CD581E73864BF6290063F16ACE37A8208CB6EDC657145AC
SHA-512:	791290BA7D073B519E39E436E23C421EE79556D0818B865860548FC284CD7C81879DF9895B93CEC5CA7115B28913C610A431EAD5AACA523C5AB3B00408FBF5B6
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function q(Q){return Q}var a=function(Q,R,w,V,l,v,K,M,F,z,t,N){for(t=(z=43,71);;)try{if(z==51)break;else if(z==V)z=G.console?52:74;else{if(z==95)return M;if(z==w)z=F&&F.createPolicy?Q:95;else{if(z==74)return t=71,M;z==52?(G.console[l](N.message),z=74):z==3?(t=71,z=V):z==Q?(t=R,M=F.createPolicy(v,{createHTML:L,createScript:L,createScriptURL:L}),z=74):z==43&&(M=K,F=G.trustedTypes,z=w)}}}catch(B){if(t==71)throw B;t==R&&(N=B,z=3)}},L=function(Q){return q.call(this,Q)},G=this\|\|self;(0,eval)(function(Q,R){return(R=a(84,93,81,90,"error","bg",null))&&Q.eval(R.createScript("1"))===1?function(w){return R.createScript(w)}:function(w){return""+w}}(G)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2157)
Category:	dropped
Size (bytes):	64580
Entropy (8bit):	5.544018479345656
Encrypted:	false
SSDEEP:	1536:MF/SQdAWjZUxHPhevU09hoBmgLJ9/qZQzV537t:EaQLAvwF9heLJ9/qCzVj
MD5:	A76E41E6B5E69EC71FC55E82293199BD
SHA1:	EAD3DC453A1F58B209DFE96076EA37DBFAE40802
SHA-256:	D47BFD53D3D2837BA190280E71A213C8D13BE2D8AC6EE1B5B3D933DD3B7C86DC
SHA-512:	2BB8C90F3B21668B095939D1A3AD095B61DACC149097982B256DB1863C191B93A5FCEC4AD5B4935B9FA9B7F9472B579E435BC4AA2A50847507472310D7E1BA20
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},p=ca(this),q=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(g){if

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1047, components 3
Category:	dropped
Size (bytes):	195704
Entropy (8bit):	7.927292175617737
Encrypted:	false
SSDEEP:	3072:l7UA/UqoTwjEP/QEXXB6i/+SCbhWNu+WCsdv2Bj27/L79VrXVubf+WFMhplplzx5:lgA/Uqan3xt/+SAW8bCWvYjmbVuiCmT1
MD5:	7BC5B5C636AC2B7AB4957622AA2650F9
SHA1:	AA8995110E6A9209BD0D4487B57FF7ECC9912714
SHA-256:	11578C7E74105E40839DA8F57739F40FA270C14B7E0DB1F9B1A3AC927F607501
SHA-512:	6890BFAA8A0206E785E2264103EE34B4AF3D9DA98186940981EDBD7380DE3CFFDD0A40F9B27E5C523559DAD0A38C25D815D97B99EA1055E389539184DE6AD9A4
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!2222222&22222&&2222222222222222222&222222222&&2&&&....................................................b........................!1...AQaq........."..2#BR.$36tu..45br.....CSU...&Ds%7V...FT..c...'Ed...................................4......................!1..AQ."2aB.3q#R.....b..................?......P@DTQ..n(.2U..@TTE..T.P."....\.PUP.z..".AQ..Qs..k....(2..T+~A((. .......>......\y .T..[....7...gu8 ....Zd ...-3..S....a..H......(..b.}. ....W7 q.Q.......D....D...}8.OE.Q......P.S.qAy..;.......Aq@.%D...P[............<...fh.....R.-<3TT%..!.....D^(..............N..<.NH.\.E...9.A/.. .....@(%}8((.;.R....j..D..6 a.. ..QP..@.!.tE.<\|.JR....%PN.....R7e..k..a..QK.,u}..L.......^..:".j.kK'..FD.F.o,.Wr....~.&m.....}.{.vNz...............z.....3.\|.x...z...N.3..1.tKBN<....... ......f..o]w...I.n.bf....B..k...{\Z.c5.sg.......'..W.......3...%}QP {w.......sAJ.s...W;..*&y.yx(. .<

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2610)
Category:	dropped
Size (bytes):	8009
Entropy (8bit):	5.3334261122657995
Encrypted:	false
SSDEEP:	192:iwS/yVNeAQ5677f79S4E2gMJF06Z0IKqEbOA/iZ8Ma:+Kni56HD9lgMJF0fLSA/i6Ma
MD5:	B64043ED9914D7A2AEBF7526B92D6D1F
SHA1:	252CAAB0B2BD1E0B7BBF88F650E561217BD86852
SHA-256:	6F4FEAFC5D41EF850BE0A94D47CE184570945701729A779B6A98040FC0241588
SHA-512:	F169631788F9F438599CFD72BDD530484D8DA12EEA8285820271C82A02B12C4FFA29BBB7656D84A9E43A7FDCF4A815FB7FA0CF30F93BE214386150B19E8FF411
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&c++<40;){var d=!1;try{var e;if(e=!!b&&b.location.href!=null)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.i)if(b instanceof r)b.then(c=>{t(a,c)});else{a.i=!0;a.j=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.i?b(a.j):a.g.push(b)}class r{constructor(a){this.i=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|c===0)b+=`&${d}=${enc

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3147)
Category:	downloaded
Size (bytes):	107369
Entropy (8bit):	5.533163001133015
Encrypted:	false
SSDEEP:	1536:MYF1EQGfJuI5cxaIrTX6M4VAR9kD2PAa21O/fVtDjzHk:BHr76MaAbk6PAa4OXVRnE
MD5:	D555466BAF6D62237EA837C4F9A096B2
SHA1:	B82F48CFB9F5D8FB48001E7AB9D33338596ECEC2
SHA-256:	D22438A908FB754C1BD6E2F368E8F43BCC5092C126B5688D0CC14B0804727585
SHA-512:	024241582ACCD23BEA36D07AC76CB878EF5AF37E6F511037A332A9A607E836592F577D9AB8C98119D7385AA65CD0622A0FBDF088AD2FB2067275F201B2BF4A9B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.hc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.hc};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8820), with no line terminators
Category:	dropped
Size (bytes):	8820
Entropy (8bit):	5.7298651918392425
Encrypted:	false
SSDEEP:	192:yb3mAjuSnlW7gYJ1VaSF0+A09+QJTmXRGEOF0oWf3oWkU:U1pYkYDsgghnOFRi0U
MD5:	D17DADDC86234A5588BC47D96E65305F
SHA1:	771C819EC48A1329ABEB28965FA54F027809220F
SHA-256:	9130C6FCF749547FBA6CE81B87E284B906806F1D35E08E79C913A2C55B9C80A2
SHA-512:	5EB8A3701C56F5E856B56EAC7D8B0D6058B9E5A61695AC01A0D2B6C69978EBA9B8B0C2DEF1949C27FA8541173B8184679E3054874AFDE1BE7E02E8985DD73E42
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(W,h,i,j,k,o,s,B){W=b,function(d,e,V,f,g){for(V=b,f=d();!![];)try{if(g=parseInt(V(329))/1+parseInt(V(427))/2(parseInt(V(356))/3)+-parseInt(V(367))/4(-parseInt(V(408))/5)+parseInt(V(374))/6(-parseInt(V(309))/7)+-parseInt(V(365))/8(parseInt(V(364))/9)+parseInt(V(310))/10*(parseInt(V(380))/11)+parseInt(V(378))/12,e===g)break;else f.push(f.shift())}catch(E){f.push(f.shift())}}(a,667714),h=this\|\|self,i=h[W(386)],j={},j[W(422)]='o',j[W(312)]='s',j[W(353)]='u',j[W(351)]='z',j[W(321)]='n',j[W(395)]='I',j[W(399)]='b',k=j,h[W(417)]=function(g,E,F,G,a1,I,J,K,L,M,N){if(a1=W,E===null\|\|void 0===E)return G;for(I=n(E),g[a1(349)][a1(362)]&&(I=I[a1(393)](g[a1(349)][a1(362)](E))),I=g[a1(355)][a1(335)]&&g[a1(343)]?g[a1(355)][a1(335)](new g[(a1(343))](I)):function(O,a2,P){for(a2=a1,O[a2(388)](),P=0;P<O[a2(319)];O[P]===O[P+1]?O[a2(359)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a1(424)][a1(405)](J),K=0;K<I[a1(319)];L=I[K],M=m(g,E,L),J(M)?(N=M==='s'&&!g[

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zeta_interactive&google_push=AXcoOmRUudNuwZWE_do6PVkcRHvSV-rRYMuoMjkVlHmunBoFZasRhg5nMFyWDKwC--tLznPlkhqOdoPz5t2kf-P6uiYTOu0np7Apmw3Z&google_hm=NDYzMDI0NDUyMDY5MDcwMDAyOQ==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2995)
Category:	downloaded
Size (bytes):	18178
Entropy (8bit):	5.640509571732772
Encrypted:	false
SSDEEP:	384:1WU4r2N9DWZJ65mxsLDnaegyC+05FCNIr:6PxsXaeLgCNIr
MD5:	586101097A0CE555B0A5145C66F13C22
SHA1:	2894A53C928F1B823AA860319EFC9FF6E6F1626D
SHA-256:	E1A6F26221E90102580DECC85453993721815EE35EF417600AF01CC219A0D871
SHA-512:	F59E11498B321E584E791CA35366EB4E69791CE59DE6A767B0B6967406A8BC7572C846312622BBA4D8F44C9F7E5CED24858FB29126B454E352AB38A86F0A0818
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/dcmads.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),h=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.h("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&google_hm=NzhfbDVadzZhVVZ0U1cyT3g0Tzc=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2015)
Category:	downloaded
Size (bytes):	39743
Entropy (8bit):	5.519773678504751
Encrypted:	false
SSDEEP:	768:7kdrFoP8dQJ2VyJt3mS5GitugTI91kR1T4pw6HWsu5BRSFJ3x4qxByNzqUs/Ea39:IWJq2tzbJ+kgG4su
MD5:	B1AC06782AE68F33B82F39AE2A4B3F10
SHA1:	B756AFC21AEF9D68365766F929A496380465B93F
SHA-256:	CDA3C0BEF2E5FBAA225DFCDBFD2D1CCCFAC9C19396E669E74D75E937EA91A2A6
SHA-512:	EECC4A7229EFA5DAC1518F401E821C9938600C9A0A27D939B2280280B1B507DD4861671B7C42766BC569FC41218C0648A94137A42E5C35B5C3C7948C5FE13A67
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/b1ac06782ae68f33b82f39ae2a4b3f10.js?tag=addon/mysidia_one_click_handler_one_afma
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b};const ba=(new Date("2024-01-01T00:00:00Z")).getTime();function ca(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}}function q(a,b){return b?a.g?a.h.slice(0,a.g.index)+b+a.h.slice(a.g.index):a.h+b:a.h}.function da(a){a=a.A;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsumfHwOPoRchtMvH085N6Zvvd8r1pbc71Wz852DUESDFxIzy5qu6U1BVV4NU7WR8NSIc4xnikoh0hy7YqKCD5_WHHj__ylKahgjgxid1lDNKVUhGw1k8IcfkYE2yGYinlVQDT8TRh_fd9D_-PVXcLMEjVFzHHiC7_76uxD0&sai=AMfl-YQTiIPBJImbGAMEhvUhF1X_gM40hrFDheLDTl85g3Ll0-U2aCpgU_k8WriK74Y_EBdMURe9i74bOX1RKf-fv1tY8CH7IDBCqPbX_5b440yy9U_24aHyCCjjaMM&sig=Cg0ArKJSzEzA5CmZPg6mEAE&cid=CAQSOwCa7L7dS-YOXk-96uWTT8tWY2TcAGO55FFq5hGnIo9EA9rYFa33ZK3Et4Lp7btte4fg3w_vGhJEiz0XGAE&id=lidartos&mcvt=12999&p=0,0,280,1110&tm=16932.70000000001&tu=3933.7999999999884&mtos=12999,12999,12999,12999,12999&tos=12999,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=348108860&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=b&co=2976968201&rst=1733836873084&rpt=13231&ec=1&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3805
Entropy (8bit):	5.413850652057751
Encrypted:	false
SSDEEP:	96:GhOLzFZMOLK3qOLnOLjJc+u+OL7NMhOg7FZMOg93qOggOgEJc+u+OgjNE:GEdK3PC3W+vi93kaAJS
MD5:	FBBAA205EC8B176AAFB4FD3910A98ABA
SHA1:	C20F21E4FB451A930FAA7CEEEDFBB61A0BBF8245
SHA-256:	8B1BB264D3F4E9E18F183190A3C443C6409502514F56E670DC60EA04C40747DE
SHA-512:	67256A8D102DC171002CC092DEE0FBBACDD030F68DE1296AC243D400741D6E811553F0C5FEDAFB311CB09AAC2E43A385F5788F1CBC503D4846464570E378CC6D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%20Text%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18563)
Category:	dropped
Size (bytes):	18631
Entropy (8bit):	5.207046962303426
Encrypted:	false
SSDEEP:	384:QLExv60IOUhZVezJOQ/IIy/8R89TSU2GzXL:HxenezJunyOTSU2M
MD5:	C9C777F9757507517BE23D77545ABCBD
SHA1:	D31A719611306B303F667EE44D2A903FE0AC77DE
SHA-256:	60F71047C4B9278EDD721585E49177A13104723689209884343D5F579707DAB1
SHA-512:	21F0221CDF20DB6A60B3FA5BC5E5F36116C6BEF84A20763E565479CD3F9C0A6CB2C4AC6AFFBB60F5B9C9AF19C8858C39E2AA76F0F2D48085BC2CD9E51DF4E0C5
Malicious:	false
Reputation:	low
Preview:	/! Build 025a77b6f7387aecea2b73d874c35b7d43b312f0:1733815879152 /.!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="https://cdn.getrewardful.com/pa

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.397295662946142
Encrypted:	false
SSDEEP:	24:4Hks8Bq5/Jz2pRNrBZJuvu8goqc0ioNhc+U4+mI:28Iz2bNrVENtmN+4+j
MD5:	568A61180E44B985FC3A99E32F98B54B
SHA1:	3FEB8DDAB6D8C98944775EDAE61E12E74C187129
SHA-256:	654D735223842AC2C58036E7AD35792D0CFC442140EBBE6A7396D05785E71035
SHA-512:	C7B17BDB0ADD646B136FAB61383F3D6518A03B1E20074795D5AF84A2A4F47359EFB5F3F63DE95AE3CDDF7CA1F6C5D3C7A6E959E834D9E726F051E8DC6252A03E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="hZPhMbe5nNYmMW62XNrw8w">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1733836882419');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2935)
Category:	downloaded
Size (bytes):	92270
Entropy (8bit):	5.579815470203476
Encrypted:	false
SSDEEP:	1536:5dRpfwN8nOWjRHQHVisOt9Jw2p9EDPwez3FT/u6kKq9XCfFafAIx/dxzPOynYSra:5riN8nOU0it962rED7/u0YCfFkAIxrzi
MD5:	DD4636647021BC3142D6E6B04CBBC775
SHA1:	DABA2D6BBEBB09B36EFDDF8A7E50B86A9AB7440A
SHA-256:	4BC74FF6AE76FE9AE8183D503A7A5D6AB29DFC6A69213F8C6F396AD19FD8E2D1
SHA-512:	8D6162E6CAD30600E6A744B89FDC70C784E8FA0463C056268DA9CFBFC8837FBC010B9C63263B6B0554C5460E626E240B11E97F47F1EAF2781EF7027E6F6959F2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202412040102/slotcar_library_fy2021.js
Preview:	(function(sttc){'use strict';var l,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,fa[d],{configurable:!0,writable:!0,value:b})))}}ia("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESEDsEhJC4yk_LUJ14xvLuCJs&google_push=AXcoOmQ_gQ37xYL2nmXRiB-XBdJ-cVb5KYWWseVMkhnc7ODCaCpAvXjdF1CoyRZk0T8qWXEv6A4dxKXXpeBpy0u8urj58Qz9eM20r-0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu4mgYqmJD4-eKIHoajagWmIKyy6-9j4j6eK8DSRV0putQ3Ii4k3mV7LfCKPMe2G9sNGd9kMd8v30Oe5YLD0IgwX67Z8jzmkbxTW2DaHu2921dmQ87POVnZx1_oq783BHjWqVGeCP0C8g_e9-Dix4p5ord0X0RqM22rg_WG&sai=AMfl-YTVp-0p754zpT3HEi6rlhcLYhI2vzLSC8PhXBDABPwQv4UH1SVJ6JsI8aglC9zDC67BU_ytsDi3mECChPGCnli7sLjAQ07daYc-5C_EK8XnaRfH08BFaiIjNuk&sig=Cg0ArKJSzO9jmJvE6b19EAE&cid=CAQSOwCa7L7du75pWWf1GMmsnF8r36B_4iuH19IJxLQ0701gyxwaFZ9kIBkylWZYkBjpPNMdAXBn3zcZdR9hGAE&id=lidartos&mcvt=8789&p=0,0,94,728&tm=9463&tu=674.2000000000116&mtos=0,8789,8789,8789,8789&tos=0,8789,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=0.96&if=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=b&co=2976968901&rst=1733836881101&rpt=9488&ec=1&met=ie&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-10T14:21:28.356832+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50018	104.18.26.193	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 14:20:43.126014948 CET	49677	443	192.168.2.10	20.42.65.85
Dec 10, 2024 14:20:43.438225031 CET	49677	443	192.168.2.10	20.42.65.85
Dec 10, 2024 14:20:44.047557116 CET	49677	443	192.168.2.10	20.42.65.85
Dec 10, 2024 14:20:44.203871965 CET	49671	443	192.168.2.10	204.79.197.203
Dec 10, 2024 14:20:45.250786066 CET	49677	443	192.168.2.10	20.42.65.85
Dec 10, 2024 14:20:46.485106945 CET	49674	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:20:46.486051083 CET	49675	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:20:47.656954050 CET	49677	443	192.168.2.10	20.42.65.85
Dec 10, 2024 14:20:52.656955004 CET	49677	443	192.168.2.10	20.42.65.85
Dec 10, 2024 14:20:53.894432068 CET	49671	443	192.168.2.10	204.79.197.203
Dec 10, 2024 14:20:56.097471952 CET	49674	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:20:56.097543955 CET	49675	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:20:57.826807976 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:20:57.826850891 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:20:57.826946974 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:20:57.827207088 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:20:57.827217102 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:20:59.242438078 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:20:59.242469072 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:20:59.242528915 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:20:59.242882013 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:20:59.242916107 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:20:59.242974997 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:20:59.243069887 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:20:59.243083954 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:20:59.243386984 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:20:59.243417978 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:20:59.524517059 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:20:59.524841070 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:20:59.524869919 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:20:59.525923014 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:20:59.525994062 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:20:59.539695024 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:20:59.539858103 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:20:59.583916903 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:20:59.583933115 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:20:59.630232096 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:00.464159012 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.464440107 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.464472055 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.465516090 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.465584993 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.466892004 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.467005014 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.467134953 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.467147112 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.470196009 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.470424891 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.470434904 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.472276926 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.472352028 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.473434925 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.473514080 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.515810966 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.515816927 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:00.515829086 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:00.562130928 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.026046991 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.026180983 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.026329994 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.118556976 CET	49741	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.118578911 CET	443	49741	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.121973038 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.167337894 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.856663942 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.857393026 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.857438087 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.857454062 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.857465029 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.857492924 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.857569933 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.857575893 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.857631922 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.858537912 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.865801096 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.865937948 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.865947008 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.882334948 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.882478952 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.882487059 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.904448032 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.904480934 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.904577971 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.905105114 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.905119896 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.906949997 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.906984091 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.907058001 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.907435894 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.907447100 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:01.936929941 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:01.976169109 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.019268990 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.054970026 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.059432030 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.059499025 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.059516907 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.073100090 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.073240042 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.073256969 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.081223011 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.081252098 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.081446886 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.081463099 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.081554890 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.089607954 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.097362041 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.097528934 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.097544909 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.105535984 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.105669022 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.105678082 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.113740921 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.113832951 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.113838911 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.120743990 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.121177912 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.121186018 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.127924919 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.128072977 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.128092051 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.141793013 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.141896963 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.141902924 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.187899113 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.187913895 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.234483004 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.271141052 CET	49677	443	192.168.2.10	20.42.65.85
Dec 10, 2024 14:21:02.555453062 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.558736086 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.558892965 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.558914900 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.562983990 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.563031912 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.563060999 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.563060999 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.563074112 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.563189030 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.563831091 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.563838959 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.563922882 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.565424919 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.565433025 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.565552950 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.565582037 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.565592051 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.565640926 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.565642118 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.566431999 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.566441059 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.566797018 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.567873955 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.567888975 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.567929029 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.567949057 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.567981005 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.567991018 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.568034887 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.568095922 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.568095922 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.571338892 CET	49742	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.571351051 CET	443	49742	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.593261003 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.593297005 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:02.593409061 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.593600988 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:02.593611002 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.116628885 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.116961956 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.116995096 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.117351055 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.117727041 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.117818117 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.117827892 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.118555069 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.118742943 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.118758917 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.119113922 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.119400024 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.119477987 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.119483948 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.119494915 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.158147097 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.158169985 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.173738956 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.554320097 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.554368973 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.554408073 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.554435968 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.554472923 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.554512024 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.554538965 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.554553032 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.555850029 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.562516928 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.570874929 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.570924997 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.571014881 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.571026087 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.571887970 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.571927071 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.571964979 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.571973085 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.571974039 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.572015047 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.572015047 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.572025061 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.579145908 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.579269886 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.579343081 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.580287933 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.580339909 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.580348015 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.588622093 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.588644028 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.588712931 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.588733912 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.591857910 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.597033978 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.641447067 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.656585932 CET	49750	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.656600952 CET	443	49750	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.668608904 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.668627977 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.668745041 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.669212103 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.669223070 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.691138983 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.733793974 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.733807087 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.768023968 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.768116951 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.768198013 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.768208981 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.768338919 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.776515961 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.779870033 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.780051947 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.780064106 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.796437025 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.796466112 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.796957016 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.796972990 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.797147989 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.804585934 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.809345961 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:03.809389114 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:03.809477091 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:03.809676886 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:03.809689045 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:03.809942961 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:03.809986115 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:03.810085058 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:03.810441971 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:03.810458899 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:03.811180115 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.811424971 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.811434984 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.812494040 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.812572956 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.812987089 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.813010931 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.813055992 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.813071966 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.813072920 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.813199043 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.813210964 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.815799952 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:03.815829039 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:03.815896034 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:03.816101074 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:03.816117048 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:03.821307898 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.821400881 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.821418047 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.830605030 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.830739975 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.830748081 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.836280107 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.836344004 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.836353064 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.842796087 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.842881918 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.842900991 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.849009037 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.849116087 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.849126101 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.856554985 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.903518915 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.903532028 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.949450016 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.956232071 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.958473921 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.958683014 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.958698034 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.963718891 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.963819981 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.963831902 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.973170042 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.973181963 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.973243952 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.973253012 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.982253075 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.982321024 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.982330084 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.982408047 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.986625910 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.990999937 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.991118908 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.991127968 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.991360903 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:03.999432087 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.999440908 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:03.999499083 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.007903099 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.007911921 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.007985115 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.016423941 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.016433001 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.016511917 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.020823956 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.020832062 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.020905018 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.029987097 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.030062914 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.039164066 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.039230108 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.042087078 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.042164087 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.050719023 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.050784111 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.150016069 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.150233984 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.154827118 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.154916048 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.161703110 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.161832094 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.168469906 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.168565035 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.171379089 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.171488047 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.177592039 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.177678108 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.183490038 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.183615923 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.186856031 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.186964989 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.192840099 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.192934990 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.198401928 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.198489904 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.202223063 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.202318907 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.207348108 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.207441092 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.213392973 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.213476896 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.219225883 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.219332933 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.222188950 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.222258091 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.228056908 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.228143930 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.233288050 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.233401060 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.238545895 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.238621950 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.241621971 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.241697073 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.247644901 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.247770071 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.247883081 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.247993946 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.248055935 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.248712063 CET	49751	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.248733044 CET	443	49751	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.253405094 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.253504038 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.255116940 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:04.255165100 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:04.255248070 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:04.255611897 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:04.255628109 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:04.259341002 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.259438992 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.262286901 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.262413025 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.282449007 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.282521963 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.341294050 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.341435909 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.346076965 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.346193075 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.350817919 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.350994110 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.353140116 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.353226900 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.364259005 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.364272118 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.364303112 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.364365101 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.364365101 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.364376068 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.378595114 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.378614902 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.378725052 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.378735065 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.392088890 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.392115116 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.392245054 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.392261028 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.405812979 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.405833960 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.406107903 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.406121016 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.413716078 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.413739920 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.413886070 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.413898945 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.419445038 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.419490099 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.419519901 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.419554949 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.419564962 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.419583082 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.419600964 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.419663906 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.419877052 CET	49749	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.419892073 CET	443	49749	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.696223021 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.696280956 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.696350098 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.696608067 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.696630001 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.698008060 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.698048115 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.698107004 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.698476076 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.698487997 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.699062109 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.699094057 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.699145079 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.699593067 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.699604988 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.723788977 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.723824978 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.723896027 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.724232912 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.724262953 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.724308014 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.725892067 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.725905895 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.725986004 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.726001978 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.888964891 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.889209986 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.889219999 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.889771938 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.890094042 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.890167952 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:04.890237093 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:04.892966986 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:04.892998934 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:04.893079042 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:04.893392086 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:04.893404007 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:04.935331106 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.023026943 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.023366928 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.023397923 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.024688005 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.024753094 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.024990082 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.026055098 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.026139975 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.026266098 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.026285887 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.026479006 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.026487112 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.027385950 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.027452946 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.027731895 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.028343916 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.028438091 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.028506994 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.028517962 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.028749943 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.028759003 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.029675961 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.029794931 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.030749083 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.030858994 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.030865908 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.075330019 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.079416990 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.079432964 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.079438925 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.079453945 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.125036001 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.390603065 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.390654087 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.390686989 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.390712976 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.390739918 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.390744925 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.390780926 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.390795946 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.390825987 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.398904085 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.407215118 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.407295942 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.407308102 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.415647984 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.415716887 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.415728092 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.465008020 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.465044022 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.465069056 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.465085030 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.465118885 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.465130091 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.465197086 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.465219021 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.465244055 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.465380907 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.465428114 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.465476990 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.465487957 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.465567112 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.465580940 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.465600014 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.465605974 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.465612888 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.465698957 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.468063116 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.468322039 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.468338966 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.469402075 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.469471931 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.469568014 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.469742060 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.469772100 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.469796896 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.469813108 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.469820023 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.469867945 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.469882011 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.469928026 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.470050097 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.470541000 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.470618963 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.470823050 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.470837116 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.473264933 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.473332882 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.473347902 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.473490000 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.473547935 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.473557949 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.477581978 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.481618881 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.481677055 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.481714964 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.481720924 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.481753111 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.481787920 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.481806040 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.482043982 CET	49759	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.482060909 CET	443	49759	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.486154079 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.486224890 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.486253977 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.494328022 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.494539976 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.494549990 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.510021925 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.516439915 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.531934977 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.531965971 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.547586918 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.562716007 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.578026056 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.582443953 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.584929943 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.586800098 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.586873055 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.586914062 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.588947058 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.595307112 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.595376968 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.595386982 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.603738070 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.603835106 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.603852987 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.614450932 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.614571095 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.614597082 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.625384092 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.627831936 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.627851963 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.627857924 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.637120962 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.637193918 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.637294054 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.637319088 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.637352943 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.638087034 CET	49756	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.638108015 CET	443	49756	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.642891884 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.657484055 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.661361933 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.661412001 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.661432028 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.662070990 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.666229010 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.666317940 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.666361094 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.666456938 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.666593075 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.669514894 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.669610977 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.669631004 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.670265913 CET	49757	443	192.168.2.10	104.16.79.73
Dec 10, 2024 14:21:05.670288086 CET	443	49757	104.16.79.73	192.168.2.10
Dec 10, 2024 14:21:05.677711010 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.677800894 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.677822113 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.693207026 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.693248987 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.693279028 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.693311930 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.693422079 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.701584101 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.701718092 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.701788902 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.724678040 CET	49758	443	192.168.2.10	104.17.25.14
Dec 10, 2024 14:21:05.724709034 CET	443	49758	104.17.25.14	192.168.2.10
Dec 10, 2024 14:21:05.904462099 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.904581070 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.904664040 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.907274008 CET	49761	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:05.907293081 CET	443	49761	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:05.909653902 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:05.909686089 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:05.909755945 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:05.909950018 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:05.909961939 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:05.913650036 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.913863897 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.913882017 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.914094925 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.914297104 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.914508104 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.914520979 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.915196896 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.915307045 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.915323019 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.915642977 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.915709019 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.916683912 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.916771889 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.916788101 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.917423964 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.917597055 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.917612076 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.917979002 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.918268919 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.918355942 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.918373108 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.949734926 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.949853897 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.959331989 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.959342957 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.961946011 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.961946964 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.961961985 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:05.961966038 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:05.961992025 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.001955986 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.002355099 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.007848978 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.181191921 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.181216955 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.181330919 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.181355000 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.182512045 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.182529926 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.182586908 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.182701111 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.182715893 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.182801962 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.185141087 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.185230970 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.185450077 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.185564995 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.185600042 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.185606956 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.185678005 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.185684919 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.226742029 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.226753950 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.372343063 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372410059 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372448921 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372468948 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.372484922 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372498035 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372524023 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.372543097 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372595072 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372634888 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.372651100 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372739077 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372780085 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.372786999 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372916937 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.372961044 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.372968912 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.376409054 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.376452923 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.376507998 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.376527071 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.376687050 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.376799107 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.376807928 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.380666018 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.380709887 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.380718946 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.380752087 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.380789042 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.380857944 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.380908966 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.380918980 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.385544062 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.385586023 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.385602951 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.385617018 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.385669947 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.389192104 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.389400959 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.389452934 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.389462948 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.393791914 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.397488117 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.397541046 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.397568941 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.402411938 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.402479887 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.402491093 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.437632084 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.437645912 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.437685966 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.444339037 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.477775097 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:06.478128910 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:06.478147984 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:06.479203939 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:06.479263067 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:06.480443954 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:06.480518103 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:06.480691910 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:06.480705023 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:06.488950968 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.491739988 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.495630980 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.526479006 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.526532888 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.526567936 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.526591063 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.526609898 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.526647091 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.526659012 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.526665926 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.526726007 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.526731968 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.527429104 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:06.528040886 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.528090954 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.528127909 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.528134108 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.528148890 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.528184891 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.528186083 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.528198957 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.528251886 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.533919096 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.533945084 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.534356117 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.534409046 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.534425020 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.535767078 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.541001081 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.541028976 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.544109106 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.544161081 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.544173002 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.544188976 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.544249058 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.544441938 CET	49766	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.544450998 CET	443	49766	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.549295902 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:06.549324036 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:06.549397945 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:06.549663067 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:06.549676895 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:06.565315962 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.567779064 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.567826986 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.567842007 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.567858934 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.567902088 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.568886042 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.568938971 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.568947077 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.572115898 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.572145939 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.572438955 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.572452068 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.572509050 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.575706959 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.577361107 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.577430010 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.577441931 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.578541994 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.578593969 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.578602076 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.578733921 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.578743935 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.579982042 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.583106995 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.583163977 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.583175898 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.584369898 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.584424973 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.584434032 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.593986988 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.594026089 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.594057083 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.594067097 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.594136000 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.598664999 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.598835945 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.598850012 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.599890947 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.599936008 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.599950075 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.599962950 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.600004911 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.601780891 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.606494904 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.606529951 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.606586933 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.606596947 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.606708050 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.607743979 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.609582901 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.609658957 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.609668016 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.614470959 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.615494967 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.615576029 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.615583897 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.617419004 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.617501020 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.617508888 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.622172117 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.622267962 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.622279882 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.623332024 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.623399973 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.623452902 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.623465061 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.623509884 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.625093937 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.625340939 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.625397921 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.625406981 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.630132914 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.630201101 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.630213022 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.631041050 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.633451939 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.633517981 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.633526087 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.633567095 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.633614063 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.633826971 CET	49763	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.633837938 CET	443	49763	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.638247013 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.638355017 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.638364077 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.639029026 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.639087915 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.639096975 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.641262054 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:06.641288996 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:06.641369104 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:06.641562939 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:06.641575098 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:06.645128965 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.645217896 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.645231962 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.646013975 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.650161982 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.650255919 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.650274992 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.652209044 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.652297974 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.652309895 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.689196110 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.689207077 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.704582930 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.704822063 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.704835892 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.717901945 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.723390102 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.723505974 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.723515987 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.732386112 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.732455015 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.732465029 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.738583088 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.739428997 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.739483118 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.739490986 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.747278929 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.747379065 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.747390032 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.749102116 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.755260944 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.755321026 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.755332947 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.757074118 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.760577917 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.761249065 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.761301041 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.761315107 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.763115883 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.763168097 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.763187885 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.768089056 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.768248081 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.768261909 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.768762112 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.768810987 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.768820047 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.771116972 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.771155119 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.771174908 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.771183014 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.771224022 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.777157068 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.777205944 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.777213097 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.778692961 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.778702974 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.778757095 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.778769970 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.779885054 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.784444094 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.784504890 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.784513950 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.786988974 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.787040949 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.787050962 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.787214994 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.787303925 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.787318945 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.787426949 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.792049885 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.793160915 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.793227911 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.793236971 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.796271086 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.796341896 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.796354055 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.796421051 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.799473047 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.799534082 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.799541950 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.805623055 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.805632114 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.805689096 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.805696964 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.805711985 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.805752039 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.805768013 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.805799007 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.805874109 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.805883884 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.813930035 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.813939095 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.814035892 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.814059973 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.820247889 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.820297003 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.820307016 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.820317984 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.820353985 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.822457075 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.822472095 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.822539091 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.827203035 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.827284098 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.834759951 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.834831953 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.834842920 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.834897041 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.835747004 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.835992098 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.841989994 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.842005014 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.842058897 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.844327927 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.844427109 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.848886013 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.848958969 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.857767105 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.857775927 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.857789993 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.857897043 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.858196974 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.858875036 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.858892918 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.866353989 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.866468906 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.907103062 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.910196066 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.912277937 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.912358999 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.912365913 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.919260979 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.919307947 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.919320107 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.924022913 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.924089909 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.924098015 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.924148083 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.932655096 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.932665110 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.932737112 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.936671972 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.936737061 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.941122055 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.941133976 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.941194057 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.949239969 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.949249983 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.949335098 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.949614048 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.949630976 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.949686050 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.952555895 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.952619076 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.957166910 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.957178116 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.957240105 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.958029985 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.958096027 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.958925009 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.958940983 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.958996058 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.965009928 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.965018988 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.965071917 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.965128899 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.965138912 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.965207100 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.965450048 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.965529919 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.968837976 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.968902111 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.969108105 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.969202995 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.975508928 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.975589991 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.976752996 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.976824045 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.977210999 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.977305889 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.981875896 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.981956005 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.981995106 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.982053041 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.985112906 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.985140085 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.985191107 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.985241890 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.990245104 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.990309954 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.991390944 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.991467953 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.992878914 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.992949963 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.997226000 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.997335911 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.997581959 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:06.997644901 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:06.999974966 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.000066996 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.001025915 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.001096964 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.002022028 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.002129078 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.005502939 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.005609035 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.011143923 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.011223078 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.011236906 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.011332035 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.011388063 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.011394024 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.011456013 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.011698961 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.011698961 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.011719942 CET	443	49762	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.011778116 CET	49762	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.017083883 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.017179966 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.021003962 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.021078110 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.021087885 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.021168947 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.021612883 CET	49764	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.021631956 CET	443	49764	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.075129986 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.075167894 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.075244904 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.075675011 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.075690985 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.082426071 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.082452059 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.082459927 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.082470894 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.082498074 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.082528114 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.082540989 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.082571030 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.082586050 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.102267027 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.102334976 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.104084969 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.104218006 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.110369921 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.110430002 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.116570950 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.116633892 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.118351936 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.118777990 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.118793011 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.119857073 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.119932890 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.120367050 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.120429039 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.120572090 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.120579004 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.122731924 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.122828007 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.125629902 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.125688076 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.131434917 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.131484032 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.134432077 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.134506941 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.139837980 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.139895916 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.145121098 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.145176888 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.148022890 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.148101091 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.154195070 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.154269934 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.155329943 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.155391932 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.155411005 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.155424118 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.155472994 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.155749083 CET	49771	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.155761957 CET	443	49771	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.158755064 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.158854961 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.164212942 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.164266109 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.168406010 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.168479919 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.171644926 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.171885014 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.171952963 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.176471949 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.176557064 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.181969881 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.182037115 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.184844017 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.184911966 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.190212011 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.190274000 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.196188927 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.196278095 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.201345921 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.201488018 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.204293013 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.204365015 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.223325968 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.223406076 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.225895882 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.225967884 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.232758999 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.232860088 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.294354916 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.294476032 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.300062895 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.300097942 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.300198078 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.300431967 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:07.300438881 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:07.301537991 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.301553011 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.301645041 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.301654100 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.301798105 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.314254045 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.314282894 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.314388990 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.314399958 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.314436913 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.314532042 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.327871084 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.327918053 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.327979088 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.327986002 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.328027010 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.328123093 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.339688063 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.339720011 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.339797974 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.339804888 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.340045929 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.350018024 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.350049973 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.350095987 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.350104094 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.350166082 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.356630087 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.356652021 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.356697083 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.356704950 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.356734037 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.356770992 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.362143040 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.362200975 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.362276077 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.362276077 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.362282038 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.368874073 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.368901968 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.368973017 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.368989944 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.369004965 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.421610117 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.495181084 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.495208979 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.495305061 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.495305061 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.495325089 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.495414019 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.501468897 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.501490116 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.501599073 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.501609087 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.501652002 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.508090973 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.508114100 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.508225918 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.508225918 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.508235931 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.508443117 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.513578892 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.513598919 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.513660908 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.513679028 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.513770103 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.520483017 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.520507097 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.520571947 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.520585060 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.520642996 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.520642996 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.525984049 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.526005983 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.526086092 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.526099920 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.526146889 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.532320976 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.532347918 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.532423973 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.532432079 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.532449007 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.532512903 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.538744926 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.538765907 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.538841963 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.538856030 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.538928986 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.577828884 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.577903986 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.577943087 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.577969074 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.577994108 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.578038931 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.578041077 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.578053951 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.578084946 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.585962057 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.594372988 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.594423056 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.594527960 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.594537973 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.594589949 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.602709055 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.636425018 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:07.636466980 CET	443	49788	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:07.636533022 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:07.636934042 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:07.636949062 CET	443	49788	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:07.655920029 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.682224035 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.682252884 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.682332039 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.682342052 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.682363987 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.682482958 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.688551903 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.688572884 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.688635111 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.688642025 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.688663006 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.688688993 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.695030928 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.695055962 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.695100069 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.695120096 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.695169926 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.695169926 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.695178032 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.697047949 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.700576067 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.700598955 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.700638056 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.700644970 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.700674057 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.708000898 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.708020926 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.708061934 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.708070040 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.708102942 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.713701963 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.713726997 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.713766098 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.713773966 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.713792086 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.721688986 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.721705914 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.721756935 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.721766949 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.721795082 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.725815058 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.725855112 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.725881100 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.725891113 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.725929976 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.749577045 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.749600887 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.764887094 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.765146017 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:07.765182972 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.765561104 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.765918970 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:07.766004086 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.766061068 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:07.773407936 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.773456097 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.773483038 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.773490906 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.773550034 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.773602962 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.774362087 CET	49778	443	192.168.2.10	104.16.80.73
Dec 10, 2024 14:21:07.774378061 CET	443	49778	104.16.80.73	192.168.2.10
Dec 10, 2024 14:21:07.780812979 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.811321974 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.857620955 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.857875109 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:07.857884884 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.858206987 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.858568907 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:07.858629942 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.858711958 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:07.874634027 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.874655008 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.874722004 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.874732971 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.874742985 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.874850988 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.880907059 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.880930901 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.881001949 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.881011963 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.881052017 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.887341022 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.887358904 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.887428999 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.887438059 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.887485981 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.893734932 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.893752098 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.893822908 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.893831968 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.893893003 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.899998903 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.900016069 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.900085926 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.900118113 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.900171995 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.903332949 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:07.906183004 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.906198978 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.906255960 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.906276941 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.906318903 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.911871910 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.911889076 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.911986113 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.911997080 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.912015915 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.912054062 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.917248964 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.917316914 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.917341948 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.917346954 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:07.917361975 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:07.917383909 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.066781044 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.066813946 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.066873074 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.066890001 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.066910028 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.067450047 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.072617054 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.072638988 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.072767973 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.072767973 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.072778940 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.073143005 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.079065084 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.079087973 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.079149008 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.079160929 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.079190969 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.079200029 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.084659100 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.084683895 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.084757090 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.084763050 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.084774017 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.086580038 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.091022015 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.091038942 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.091103077 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.091109991 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.091257095 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.091257095 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.096929073 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.096963882 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.096990108 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.096996069 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.097021103 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.097040892 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.103792906 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.103812933 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.103876114 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.103882074 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.104089022 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.104089022 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.109788895 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.109806061 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.109888077 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.109903097 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.109989882 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.224839926 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.224919081 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.224947929 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.224971056 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.224987984 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.224997997 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.225033045 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.232804060 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.232909918 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.233063936 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.233200073 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.233231068 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.233254910 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.233263016 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.233304977 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.234621048 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.234687090 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.241600990 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.241672993 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.241738081 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.244807005 CET	49781	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.244816065 CET	443	49781	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.258955956 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.258975029 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.259048939 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.259058952 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.259097099 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.259136915 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.264455080 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.264475107 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.264590025 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.264596939 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.264637947 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.271002054 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.271022081 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.271080017 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.271087885 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.271159887 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.277523041 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.277540922 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.277623892 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.277631044 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.277667046 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.283075094 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.283092976 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.283154964 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.283162117 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.283221006 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.287812948 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.288081884 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.288090944 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.288395882 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.288866043 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.288937092 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.289031982 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.289695024 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.289726019 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.289777994 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.289783955 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.289835930 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.295243979 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.295284033 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.295319080 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.295325041 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.295360088 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.295367956 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.295854092 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.302850008 CET	49765	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.302865982 CET	443	49765	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.331324100 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.336489916 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.336549044 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.336591005 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.336627007 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.336642027 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.336668968 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.336683035 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.336704969 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.336786985 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.336791992 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.343775988 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.343838930 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.343851089 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.360881090 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.360933065 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.360945940 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.374094963 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.374129057 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.374284983 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.374492884 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.374507904 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.401452065 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.455692053 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.504215002 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.504232883 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.530966997 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.531034946 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.531044960 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.540353060 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.540391922 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.540412903 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.540421963 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.540472984 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.547961950 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:08.548006058 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:08.548120975 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:08.548305988 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.552417994 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:08.552438974 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:08.556013107 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.556096077 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.556122065 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.563925982 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.564002991 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.564054012 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.572526932 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.572578907 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.572588921 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.579583883 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.579663038 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.579679012 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.587449074 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.587503910 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.587532043 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.595201015 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.595299959 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.595416069 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.678803921 CET	49782	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:08.678831100 CET	443	49782	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:08.740041971 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.740080118 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.740137100 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.740233898 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.740272045 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.895978928 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:08.908000946 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:08.908011913 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:08.908615112 CET	49783	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.908643007 CET	443	49783	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.909202099 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:08.909284115 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:08.910877943 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:08.910949945 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:08.911098003 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:08.911112070 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:08.916548967 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.916613102 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.916668892 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.917251110 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.917269945 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.945540905 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.945585012 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.945828915 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.946378946 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.946392059 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.953682899 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.953718901 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.953843117 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.954056025 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:08.954065084 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:08.968425035 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.187802076 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:09.187834024 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:09.187886000 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:09.188373089 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:09.188388109 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:09.232347012 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:09.232404947 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:09.232465029 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:09.325339079 CET	443	49788	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:09.325603008 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:09.325634003 CET	443	49788	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:09.326721907 CET	443	49788	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:09.326778889 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:09.328110933 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:09.328212976 CET	443	49788	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:09.336937904 CET	49734	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:09.336975098 CET	443	49734	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:09.374646902 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:09.374675989 CET	443	49788	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:09.420975924 CET	49788	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:09.461911917 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.462174892 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.462191105 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.463309050 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.463397026 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.463845015 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.463920116 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.464174032 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.464180946 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.475049973 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.475085974 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.475095987 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.475128889 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.475133896 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.475147009 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.475167990 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.475183010 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.475183964 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.475204945 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.475222111 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.483340979 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.483412981 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.484167099 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.484261036 CET	443	49785	216.137.52.40	192.168.2.10
Dec 10, 2024 14:21:09.484432936 CET	49785	443	192.168.2.10	216.137.52.40
Dec 10, 2024 14:21:09.515261889 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.573113918 CET	49672	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:09.591079950 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:09.592210054 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:09.592227936 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:09.592582941 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:09.593142033 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:09.593210936 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:09.593317986 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:09.602880001 CET	49811	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:09.602929115 CET	443	49811	173.222.162.55	192.168.2.10
Dec 10, 2024 14:21:09.603111982 CET	49811	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:09.625737906 CET	49811	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:09.625778913 CET	443	49811	173.222.162.55	192.168.2.10
Dec 10, 2024 14:21:09.635339975 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:09.874689102 CET	49672	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:09.960057020 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.960163116 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.960218906 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.962822914 CET	49791	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.962840080 CET	443	49791	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.967397928 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.967449903 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:09.967694044 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.968120098 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:09.968135118 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.069427967 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.069482088 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.069513083 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.069547892 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.069552898 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.069580078 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.069605112 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.069633007 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.069670916 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.069679976 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.086077929 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.086121082 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.086152077 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.086179972 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.086222887 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.133584976 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.133913040 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.133944035 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.134288073 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.135124922 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.135199070 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.135787964 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.136111021 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.136137962 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.166176081 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.166599035 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.166623116 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.166975975 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.167596102 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.167670012 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.167963982 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.177666903 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.178040028 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.178054094 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.179102898 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.179163933 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.180165052 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.180234909 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.180927992 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.180936098 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.188730001 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.215332031 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.234292984 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.234321117 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.250237942 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:10.251147032 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:10.251166105 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:10.252386093 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:10.252454996 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:10.255985022 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:10.256072998 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:10.256139994 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:10.264053106 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.264122009 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.264128923 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.264148951 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.264204979 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.272181988 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.280283928 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.280353069 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.280374050 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.288131952 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.288188934 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.288214922 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.295954943 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.296016932 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.296036959 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.303325891 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:10.312120914 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.312195063 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.312196970 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.312222004 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.312289953 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.319804907 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.327595949 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.327663898 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.327677965 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.327692986 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.327740908 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.334011078 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.340627909 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.340727091 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.340751886 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.347322941 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.347368956 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.347387075 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.391350031 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.391429901 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.395378113 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.408915997 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.409535885 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.409567118 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.409926891 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.411026001 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:10.411046028 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:10.411467075 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.411542892 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.411562920 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.454097033 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.455516100 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.455598116 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.455631971 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.459330082 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.464677095 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.464715958 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.464765072 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.464798927 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.464849949 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.469263077 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.478091955 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.478102922 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.478171110 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.478209019 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.486632109 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.486695051 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.486721039 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.486735106 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.486779928 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.495122910 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.495132923 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.495203972 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.503621101 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.503628016 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.503720999 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.508135080 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.508205891 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.516565084 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.516660929 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.520407915 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:10.520426035 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.520426035 CET	49672	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:10.525118113 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.525259972 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.571378946 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.571501970 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.571713924 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.572292089 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.572318077 CET	443	49802	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.572364092 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.572364092 CET	49802	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.619664907 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.619729042 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.619776964 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.619818926 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.619834900 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.619856119 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.619873047 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.619905949 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.619965076 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.619972944 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.628087997 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.628154039 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.628168106 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.628195047 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.628245115 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.634296894 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.634344101 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.634382010 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.634422064 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.634450912 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.634499073 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.634506941 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.634531021 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.634547949 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.635011911 CET	49803	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.635035038 CET	443	49803	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.642800093 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.643030882 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.643042088 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.646656036 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.646734953 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.647178888 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.647227049 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.647290945 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.647615910 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.647631884 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.651285887 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.651339054 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.651350975 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.651659012 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.651724100 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.655052900 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.655133963 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.661990881 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.662059069 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.668873072 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.668962955 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.675818920 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.675890923 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.679255962 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.679321051 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.686225891 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.686311007 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.693059921 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.693121910 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.699814081 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.699877977 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.703289986 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.703344107 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.710160017 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.710231066 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.713725090 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.713793039 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.720712900 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.720803022 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.727611065 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.727690935 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.734340906 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.734453917 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.737974882 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.738048077 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.744647980 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.744735956 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.753617048 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.753700972 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.753726959 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.753757954 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.753813982 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.753966093 CET	49804	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:10.753979921 CET	443	49804	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:10.761110067 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.761151075 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.761219978 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.761456966 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.761468887 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.838855982 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.838963985 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.843220949 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.843286991 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.849294901 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.849375963 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.854772091 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.854835987 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.857563019 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.857621908 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.861732006 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.861779928 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.861834049 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.861840010 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.861915112 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.862479925 CET	49806	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.862494946 CET	443	49806	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.863226891 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.863276958 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.869709969 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.869782925 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.873497009 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.873640060 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.875813961 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.875915051 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.880866051 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.880934000 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.883416891 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.883502007 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.888432980 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.888497114 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.893383026 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.893438101 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.898991108 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.899051905 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.906850100 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.906858921 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.906925917 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.906943083 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.922430992 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.922458887 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.922513962 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.922535896 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.922563076 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.939969063 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.939994097 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.940057039 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.940084934 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.940121889 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.957654953 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.957673073 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.957771063 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:10.957789898 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:10.980464935 CET	443	49811	173.222.162.55	192.168.2.10
Dec 10, 2024 14:21:10.980576992 CET	49811	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:11.016307116 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.033966064 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.033978939 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.034018993 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.034020901 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.034041882 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.034111977 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.034117937 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.034159899 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.047451973 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.047472000 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.047525883 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.047542095 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.047581911 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.047596931 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.057183981 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.057240009 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.057254076 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.057266951 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.057301998 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.066935062 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.066956043 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.067028046 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.067037106 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.067074060 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.070548058 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:11.071528912 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:11.071706057 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:11.078243017 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.078265905 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.078320980 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.078336954 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.078355074 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.088463068 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.088494062 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.088526011 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.088572979 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.088593006 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.094638109 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.094652891 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.094691038 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.094701052 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.094729900 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.101042986 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.101068974 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.101102114 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.101110935 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.101146936 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.106950045 CET	49800	443	192.168.2.10	142.250.181.2
Dec 10, 2024 14:21:11.106977940 CET	443	49800	142.250.181.2	192.168.2.10
Dec 10, 2024 14:21:11.155908108 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.180303097 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.182380915 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.182399988 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.183527946 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.183593035 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.184323072 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.184396982 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.184499979 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.223176003 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.223191977 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.223221064 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.223262072 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.223273993 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.223344088 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.223344088 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.227332115 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.228944063 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.228960037 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.228981018 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.229021072 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.229031086 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.229058027 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.234040022 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.234049082 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.235327959 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.235347033 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.235388994 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.235399961 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.235430956 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.241408110 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.241421938 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.241473913 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.241483927 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.241511106 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.247020006 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.247040987 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.247092962 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.247103930 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.247118950 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.253602028 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.253623009 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.253712893 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.253726006 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.259057045 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.259083033 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.259123087 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.259130955 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.259166002 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.265264988 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.265280962 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.265322924 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.265332937 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.265360117 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.279150963 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.280894041 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.304932117 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:11.304971933 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:11.305051088 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:11.314508915 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:11.314523935 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:11.415612936 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.415641069 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.415693045 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.415702105 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.415731907 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.415764093 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.421137094 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.421155930 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.421228886 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.421236038 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.421295881 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.427300930 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.427336931 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.427371025 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.427380085 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.427407980 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.427419901 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.433537960 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.433556080 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.433624983 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.433634043 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.433676004 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.439743996 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.439763069 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.439820051 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.439830065 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.439867020 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.445632935 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.445648909 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.445694923 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.445703983 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.445722103 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.445759058 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.446507931 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.451111078 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.451128960 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.451178074 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.451185942 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.451215982 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.451236010 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.457295895 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.457312107 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.457362890 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.457371950 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.457413912 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.460846901 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.460908890 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.460916996 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.490458965 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.490514994 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.490581036 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.491031885 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.491059065 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.513993025 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.612217903 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.612246037 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.612298012 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.612308025 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.612337112 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.612346888 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.617037058 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.617104053 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.617120028 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.617125988 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.617167950 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.622435093 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.622458935 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.622529030 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.622534990 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.622589111 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.629240990 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.629261971 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.629350901 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.629359007 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.629404068 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.633861065 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.633908033 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.633936882 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.633968115 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.633995056 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.633996964 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.634032011 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.634047031 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.634079933 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.634440899 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.635000944 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.635018110 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.635087967 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.635094881 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.635135889 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.641149044 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.641168118 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.641235113 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.641242981 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.641302109 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.643335104 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.643418074 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.643444061 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.647289038 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.647330999 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.647380114 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.647403002 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.647433996 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.647454977 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.651669979 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.651705027 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.651758909 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.651783943 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.651799917 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.651832104 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.651865005 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.652064085 CET	49813	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:11.652077913 CET	443	49813	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:11.652537107 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.652561903 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.652602911 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.652611017 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.652652025 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.652671099 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.795598984 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.795653105 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.795722008 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.796427011 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.796447039 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.803487062 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.803517103 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.803616047 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.803639889 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.803653955 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.803791046 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.807080030 CET	49672	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:11.809331894 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.809357882 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.809425116 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.809437990 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.809576035 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.815143108 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.815165997 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.815222025 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.815236092 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.815267086 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.815285921 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.821400881 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.821420908 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.821475029 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.821511984 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.821531057 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.821557999 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.827721119 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.827755928 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.827811003 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.827822924 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.827874899 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.827874899 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.833899021 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.833923101 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.833981037 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.833992958 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.834047079 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.839240074 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.839262962 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.839329004 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.839337111 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.839380980 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.844352007 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.844393969 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.844420910 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.844449043 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.844470024 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.870435953 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.870652914 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.870665073 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.871011972 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.871479034 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.871560097 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.871839046 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.893574953 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.919331074 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.990113020 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.990390062 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.990406036 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.990742922 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.991070032 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.991131067 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.991214037 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.995141983 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.995171070 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.995223999 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.995244026 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:11.995282888 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:11.995389938 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.001444101 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.001461029 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.001528978 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.001538992 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.001595020 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.002599955 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.002664089 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.002675056 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.002720118 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.002721071 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.002763033 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.004149914 CET	49799	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.004170895 CET	443	49799	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.035335064 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.339771032 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.339813948 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.339840889 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.339871883 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.339879990 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.339890957 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.339922905 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.339953899 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.339991093 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.340017080 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.352282047 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.352358103 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.352421045 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.352943897 CET	49816	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.352963924 CET	443	49816	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.528202057 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.528281927 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.528315067 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.528357029 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.528393984 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.528407097 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.528407097 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.528423071 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.528495073 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.536431074 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.546299934 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.546334028 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.546406031 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.546417952 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.546492100 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.554626942 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.609302044 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.647737026 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.647878885 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.648176908 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.648327112 CET	49818	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:12.648340940 CET	443	49818	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:12.735980988 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:12.736321926 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:12.736354113 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:12.736730099 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:12.737195969 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:12.737282991 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:12.737394094 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:12.783333063 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:13.020962954 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.021210909 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:13.021245003 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.022521019 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.022587061 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:13.022943974 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:13.023051023 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.023121119 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:13.023133039 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.024950027 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.025146008 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.025163889 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.026242018 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.026304007 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.026629925 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.026691914 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.026741982 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.064579010 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:13.067338943 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.112087011 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.112111092 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.187808990 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:13.187952042 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:13.188008070 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:13.190296888 CET	49822	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:13.190313101 CET	443	49822	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:13.194602966 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.194633961 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.194778919 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.195677042 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.195688963 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.295552015 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.490458965 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.490510941 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.490547895 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.490554094 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.490583897 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.490641117 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.490647078 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.490653992 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.490695953 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.490700960 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.498732090 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.498783112 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.498810053 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.506987095 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.507036924 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.507055044 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.515455961 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.515518904 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.515775919 CET	49826	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:13.515794039 CET	443	49826	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:13.838398933 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.838440895 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.838471889 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.838495970 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.838526964 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:13.838566065 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.838581085 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:13.843178988 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:13.843247890 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:14.150176048 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.150212049 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:14.150290012 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.150559902 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.150573015 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:14.151360035 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.151407957 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:14.151534081 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.151931047 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.151942015 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:14.152000904 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.152807951 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.152825117 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:14.153470039 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:14.153484106 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:14.165290117 CET	49819	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:14.165316105 CET	443	49819	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:14.216274023 CET	49672	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:14.304100990 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:14.304147959 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:14.304321051 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:14.304567099 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:14.304593086 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:14.304651022 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:14.305043936 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:14.305058956 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:14.305305958 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:14.305330992 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:14.386277914 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:14.386311054 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:14.386370897 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:14.386713982 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:14.386729956 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:14.409223080 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:14.421217918 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.421258926 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:14.421329975 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.421601057 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.421643972 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:14.421855927 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.422059059 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.422120094 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:14.422188997 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.422463894 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:14.422473907 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:14.422729969 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.422746897 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:14.422899961 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:14.422921896 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.422931910 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:14.423109055 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:14.423131943 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:14.423377991 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:14.423443079 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:14.423753977 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:14.444340944 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:14.444385052 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:14.444458961 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:14.444700956 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:14.444719076 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:14.467334986 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:14.860503912 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:14.860629082 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:14.860927105 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:14.861191034 CET	49835	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:14.861202002 CET	443	49835	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:15.364054918 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.364361048 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.364393950 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.364440918 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.364630938 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.364640951 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.364743948 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.365017891 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.365153074 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.365215063 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.365502119 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.365591049 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.365678072 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.365818024 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.365825891 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.365936041 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.365955114 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.366076946 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.366089106 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.366863966 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.366933107 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.367285967 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.367357969 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.367398977 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.367418051 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.422076941 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.422086000 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.468972921 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.806921959 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.807001114 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.807068110 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.807538986 CET	49838	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.807560921 CET	443	49838	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.809212923 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.809262991 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.809429884 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.809647083 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.809658051 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.815670013 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.815741062 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.815774918 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.815807104 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.815823078 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.815835953 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.815848112 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.815870047 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.816088915 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.816097975 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.820914984 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.820959091 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.820991039 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.821019888 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.821024895 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.821033955 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.821149111 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.821161985 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.821237087 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.824331045 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.824390888 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.824398041 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.829242945 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.837600946 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.837702036 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.837718010 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.837728977 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.837766886 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.840840101 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.840898037 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.840905905 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.846081972 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.890877008 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.890877008 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.890896082 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.934989929 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.937764883 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.984618902 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:15.984630108 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:15.991468906 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.991781950 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.991813898 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.992834091 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.992907047 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.993288994 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.993350029 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.993612051 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.993781090 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.993978024 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.993994951 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.995179892 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.995333910 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.995795965 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.995820999 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:15.995829105 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:15.995943069 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.011543036 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.011591911 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.011622906 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.011646032 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.011926889 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.013056993 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.016791105 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.016886950 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.016897917 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.016907930 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.016982079 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.017064095 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.017064095 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.017241955 CET	49839	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.017254114 CET	443	49839	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.019413948 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.020880938 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:16.020920038 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:16.021320105 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:16.021640062 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:16.021651030 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:16.027339935 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.027390003 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.027415991 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.027424097 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.027470112 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.033853054 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.033871889 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.035270929 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.043462038 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.043559074 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.043567896 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.049119949 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.049144983 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.051399946 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.051484108 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.051491022 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.059233904 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.059309006 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.059320927 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.067425013 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.067497969 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.067503929 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.074932098 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.075181961 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.075193882 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.076246023 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.076309919 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.076783895 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.076852083 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.076913118 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.077807903 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.082055092 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.082110882 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.082149982 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.082158089 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.082221031 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.089076996 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.093439102 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.096132040 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.096193075 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.096195936 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.096206903 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.096265078 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.111098051 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.111516953 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.111546040 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.112107038 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.112286091 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.112314939 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.112624884 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.112701893 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.113367081 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.113425970 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.113720894 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.114156008 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.114219904 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.118341923 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.118359089 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.118638039 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.118649006 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.118962049 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.119045019 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.119159937 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.119179010 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.119328022 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.119698048 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.119797945 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.120238066 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.120310068 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.120440006 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.120462894 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.124686003 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.124696970 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.140445948 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.140769005 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:16.140801907 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.141901970 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.141990900 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:16.143167973 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:16.143250942 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.143548012 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:16.143558025 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.171556950 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.171561956 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.171561956 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.171578884 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.171616077 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.190179110 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:16.199556112 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.202090979 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.206262112 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.206273079 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.206872940 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.206998110 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.207005024 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.216669083 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.216684103 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.216892958 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.216902971 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.221863985 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.225955009 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.230022907 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.230087996 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.230098009 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.230123997 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.234406948 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.234574080 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.234581947 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.237894058 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.243159056 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.243547916 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.251704931 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.251854897 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.260345936 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.260843992 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.264832973 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.265079975 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.273449898 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.273727894 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.282078981 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.282378912 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.286684036 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.286896944 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.392517090 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.393981934 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.396900892 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.398036957 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.404252052 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.405864000 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.410187006 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.413479090 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.413543940 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.413552046 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.413652897 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.419147015 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.425327063 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.425384998 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.425393105 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.425427914 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.428373098 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.434020996 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.434040070 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.434525967 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.437858105 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.437864065 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.440594912 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.441869974 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.441898108 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.443736076 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.445895910 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.445913076 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.449763060 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.449934006 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.449959040 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.454229116 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.455849886 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.456036091 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.459069967 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.459558964 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.462021112 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.462088108 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.462208033 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.462217093 CET	443	49837	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:16.462249041 CET	49837	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:16.797312021 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.798455000 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.798512936 CET	443	49842	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.798690081 CET	49842	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.802536011 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.802649975 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.802694082 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.802723885 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.802753925 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.802762985 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.802778006 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.802959919 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.803021908 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.803030014 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.803850889 CET	49843	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:16.803872108 CET	443	49843	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:16.810374022 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.810674906 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.813966036 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.821017027 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.821316004 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.823827982 CET	49847	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:16.823849916 CET	443	49847	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:16.902540922 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.902582884 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.902618885 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.902657032 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.902879953 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.902894020 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.902901888 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.903070927 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.903383017 CET	49845	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:16.903395891 CET	443	49845	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:16.982812881 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:16.982855082 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:16.983150005 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:16.983150005 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:16.983190060 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:16.999103069 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.999154091 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.999190092 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.999221087 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:16.999295950 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:16.999320984 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.012327909 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.012428999 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.012466908 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:17.012480021 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.012722969 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:17.018762112 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.022124052 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.022377014 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.022404909 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.022753000 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.023237944 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.023237944 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.023268938 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.023336887 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.031415939 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.031611919 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:17.031632900 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.077851057 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:17.077852964 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.118576050 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.171360970 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:17.171391964 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.204910994 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.205008030 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:17.205612898 CET	49849	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:17.205635071 CET	443	49849	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:17.233436108 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.233649969 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.233661890 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.234003067 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.234369993 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.234445095 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.234652042 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.266401052 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.266452074 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.266525984 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.266530037 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.266546965 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.266688108 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.266695976 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.275331020 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.279345036 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.279392004 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.279406071 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.279416084 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.279464006 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.286021948 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.298650980 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.298717022 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.298724890 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.348855019 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:17.348903894 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:17.349004030 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:17.349302053 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:17.349318981 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:17.351203918 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.351749897 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:17.351799011 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:17.351855040 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:17.352080107 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:17.352094889 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:17.385691881 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.427573919 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.427623987 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.427661896 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.427665949 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.427685022 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.427727938 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.427736998 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.434289932 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.434300900 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.443425894 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.443463087 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.443483114 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.443505049 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.443557978 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.451889992 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.457747936 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.457809925 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.457824945 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.458038092 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.458089113 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.458113909 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.463792086 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.463861942 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.463875055 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.466423988 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466474056 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466506958 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466514111 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.466540098 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466574907 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466579914 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.466639042 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466679096 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.466686010 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466758013 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.466799021 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.468041897 CET	49852	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.468060970 CET	443	49852	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.473432064 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.473484039 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.473499060 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.487493038 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.487549067 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.487562895 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.500899076 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.500956059 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.500968933 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.505184889 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.514394999 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.514480114 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.514496088 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.527879953 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.528000116 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.528017044 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.541223049 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.541279078 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.541302919 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.547035933 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.553719044 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.553776979 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.553791046 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.566626072 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.566698074 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.566705942 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.579184055 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.579231977 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.579236984 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.579247952 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.579325914 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.592271090 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.594204903 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.594233990 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.599137068 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.599174023 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.599231958 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.600611925 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:17.600625992 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:17.618194103 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.618257046 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.618287086 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.624229908 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.624285936 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.624301910 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.633378983 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.633388042 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.633491993 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.633536100 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.633559942 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.646958113 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.647015095 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.647039890 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.649763107 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.649817944 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.649826050 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.651897907 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.651981115 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.651988029 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.656266928 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.656341076 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.656347990 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.660809040 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.660871983 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.660886049 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.662554026 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.662609100 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.662616968 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.667357922 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.667412043 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.667418957 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.672657967 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.672702074 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.672720909 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.674227953 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.674269915 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.674302101 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.681495905 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.681572914 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.681582928 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.688184023 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.688230991 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.688258886 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.689471960 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.689521074 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.689553976 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.689574957 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.689589024 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.689618111 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.689644098 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.689650059 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.689687014 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.690191984 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.690275908 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.690283060 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.695480108 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.699136972 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.699174881 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.699249029 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.699258089 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.699325085 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.700982094 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.701061010 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.701092005 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.703803062 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.703988075 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.703999043 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.707909107 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.712408066 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.712605953 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.712615013 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.713635921 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.713798046 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.713845015 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.717684984 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.717751026 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.717765093 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.725609064 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.725671053 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.725675106 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.725688934 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.725732088 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.726290941 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.726350069 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.726385117 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.734338045 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.739049911 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.739101887 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.739119053 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.743134022 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.743194103 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.743206024 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.752794981 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.752846956 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.752882957 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.755249023 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.769419909 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.769496918 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.769510031 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.770757914 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.770837069 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.770844936 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.773478031 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.773535967 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.773602962 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.773834944 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.773859024 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.773909092 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.773947954 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.773958921 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.773969889 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.774050951 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.776535988 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.780029058 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.780090094 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.780102015 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.788683891 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.788760900 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.788772106 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.797333956 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.797384024 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.797394037 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.797866106 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.797898054 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.805504084 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.805607080 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.805622101 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.808726072 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.812076092 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.812114000 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.812139988 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.812186956 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.812273979 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.813882113 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.814050913 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.814062119 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.816463947 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.822707891 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.822788000 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.822802067 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.823340893 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.823374033 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.823398113 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.823437929 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.823481083 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.828627110 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.828681946 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.829628944 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.841523886 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.841598034 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.841641903 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.849737883 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.851480961 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.851522923 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.851538897 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.851579905 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.851627111 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.853543997 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:17.853590012 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:17.853655100 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:17.854219913 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:17.854264975 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:17.854317904 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:17.856339931 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:17.856350899 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:17.856669903 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:17.856688023 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:17.862375975 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.865834951 CET	49846	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.865850925 CET	443	49846	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.873150110 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.873188972 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.873209000 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.873239994 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.873294115 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.881365061 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.883822918 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.885158062 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.885230064 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.885241985 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.885387897 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.885457039 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.885790110 CET	49854	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:17.885803938 CET	443	49854	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:17.894695044 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.894752026 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.894799948 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.905649900 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.905683041 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.905711889 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.905744076 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.905788898 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.915337086 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.926184893 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.926225901 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.926234961 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.926250935 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.926295996 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.929474115 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.935286999 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.935343027 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.935359001 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.944235086 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.944284916 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.944303036 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.953041077 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.953097105 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.953116894 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.961596012 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.961652994 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.961678028 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.970096111 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.970160007 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.970180988 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.977703094 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.977761030 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.977782965 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.985737085 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.985799074 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.985819101 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.993717909 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:17.993771076 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:17.993791103 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.002531052 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.002583027 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.002592087 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.009939909 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.010001898 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.010010958 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.015018940 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.015084982 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.015094042 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.020076990 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.020129919 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.020143032 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.025408983 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.025463104 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.025490046 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.031575918 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.031630039 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.031646013 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.034991980 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.035036087 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.035048008 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.040312052 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.040357113 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.040371895 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.045062065 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.045113087 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.045131922 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.050287008 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.050344944 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.050369024 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.055334091 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.055381060 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.055396080 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.060132027 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.060173035 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.060184002 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.065474987 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.065577984 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.065587997 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.070024014 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.070065022 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.070079088 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.075733900 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.075782061 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.075793028 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.079838037 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.079883099 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.079895973 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.084811926 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.084862947 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.084873915 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.089358091 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.089394093 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.089406013 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.089420080 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.089458942 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.093874931 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.098783970 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.098825932 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.098869085 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.098881960 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.098931074 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.103539944 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.108227015 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.108263016 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.108279943 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.108289957 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.108342886 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.113344908 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.117686033 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.117733002 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.117753029 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.121726990 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.121784925 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.121804953 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.121817112 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.122083902 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.126435995 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.131172895 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.131200075 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.131222010 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.131256104 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.131337881 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.135720968 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.140222073 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.140265942 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.140276909 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.144380093 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.144433975 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.144444942 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.148968935 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.149003983 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.149040937 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.149055958 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.149101019 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.153263092 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.157520056 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.157582998 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.157599926 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.161823034 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.161880970 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.161890984 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.166001081 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.166057110 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.166071892 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.170274973 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.170309067 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.170351028 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.170365095 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.170411110 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.174266100 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.175048113 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.175110102 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.175138950 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.179471016 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.179517031 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.179539919 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.183089018 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.183135986 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.183162928 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.187222004 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.187295914 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.187326908 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.191185951 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.194410086 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.194983006 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.195688009 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.195725918 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.198964119 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.199882030 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.199903965 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.202384949 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.202500105 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.202511072 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.205777884 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.205918074 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.205934048 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.209430933 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.209683895 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.209717989 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.212830067 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.212891102 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.212908983 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.215970039 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.216284990 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.216311932 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.218835115 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.218970060 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.219002962 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.222374916 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.222456932 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.222491026 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.225558996 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.225816965 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.225841045 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.228457928 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.228600025 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.228617907 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.231734991 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.231816053 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.231834888 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.234915972 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.235326052 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.235353947 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.237970114 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.238068104 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.238091946 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.240832090 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.241158962 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.241170883 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.243933916 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.244103909 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.244122982 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.247440100 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.247524023 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.247550011 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.252291918 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.252823114 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.252842903 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.252861023 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.254539967 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.257349968 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.257805109 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.257903099 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.257916927 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.267060995 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.267182112 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.267198086 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.267565012 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.267724037 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.267735004 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.268655062 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.268786907 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.268795967 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.281302929 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.281434059 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.281455994 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.282007933 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.282135963 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.282145977 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.283087015 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.283205986 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.283216000 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.295635939 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.295747995 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.295779943 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.296123981 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.296241045 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.296257973 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.297185898 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.297341108 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.297363997 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.309530973 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.309668064 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.309703112 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.310344934 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.310854912 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.310869932 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.311269045 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.312014103 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.312022924 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.323374987 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.323465109 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.323466063 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.323486090 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.323548079 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.324350119 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.325359106 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.325505972 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.325603008 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.325642109 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.328229904 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.467847109 CET	49848	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:18.467889071 CET	443	49848	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:18.580791950 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:18.580832005 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:18.581213951 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:18.581681967 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:18.581693888 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:18.674829006 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:18.675129890 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:18.675148010 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:18.676202059 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:18.676357985 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:18.676707029 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:18.676774025 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:18.676959991 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:18.676965952 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:18.718179941 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:18.812305927 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:18.812633991 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:18.812645912 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:18.812978983 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:18.813780069 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:18.813843966 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:18.814276934 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:18.814307928 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:18.814361095 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:18.814395905 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:18.814414978 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:18.814420938 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:18.989324093 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:18.994059086 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:18.994091034 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:18.994537115 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.022883892 CET	49672	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:19.033922911 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.036331892 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.039602995 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.039813042 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.039992094 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.039994001 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.040010929 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.040608883 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.041101933 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.041122913 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.041134119 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.041302919 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.042167902 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.042320013 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.042861938 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.042947054 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.043493032 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.043523073 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.043530941 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.043557882 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.043833971 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.084573030 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.084577084 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.084604979 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.084639072 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.084666014 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.135869980 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.352828026 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:19.352916002 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:19.352972031 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:19.353533030 CET	49863	443	192.168.2.10	104.20.7.133
Dec 10, 2024 14:21:19.353557110 CET	443	49863	104.20.7.133	192.168.2.10
Dec 10, 2024 14:21:19.358405113 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.358436108 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.358531952 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.358712912 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.358731031 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.431612015 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.431658983 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.431698084 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.431742907 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.431749105 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.431767941 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.431796074 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.431807995 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.431866884 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.431871891 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.439865112 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.439938068 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.445754051 CET	49865	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:19.445784092 CET	443	49865	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:19.828394890 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:19.828481913 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:19.828540087 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:19.829051971 CET	49857	443	192.168.2.10	142.250.181.100
Dec 10, 2024 14:21:19.829065084 CET	443	49857	142.250.181.100	192.168.2.10
Dec 10, 2024 14:21:19.833408117 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.834108114 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.834131002 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.834780931 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.835017920 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.835036039 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.835231066 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.835292101 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.836105108 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.836163044 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.836436033 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.836509943 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.836695910 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.836786032 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.836884975 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.836893082 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.837070942 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.837085009 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:19.890037060 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.890079021 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:19.891371965 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.891472101 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.891522884 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.891531944 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.895236015 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.895286083 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.895323038 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.895323992 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.895337105 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.895371914 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.895386934 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.899221897 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.899270058 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.899276018 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.902935028 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.902980089 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.902997017 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.907284021 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.907332897 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.907339096 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.916980982 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.917037964 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.917062044 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.918313980 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.918368101 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.918375015 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.926603079 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.926655054 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.926666975 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:19.927747011 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.927798986 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:19.927805901 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:19.968164921 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:19.968417883 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.010499001 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.014575958 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:20.061933041 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.061942101 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.061975002 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:20.062014103 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:20.082721949 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.082753897 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.082782030 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.082788944 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.082962990 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.083476067 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.083512068 CET	443	49859	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.083564997 CET	49859	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.088498116 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:20.088552952 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:20.091250896 CET	49860	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:20.091267109 CET	443	49860	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:20.244334936 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.244370937 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.244452953 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.244688988 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:20.244699955 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:20.258452892 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:20.258465052 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:20.258660078 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:20.259037971 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:20.259047985 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:20.274502039 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:20.277893066 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:20.277920008 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:20.278434992 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:20.278527975 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:20.279176950 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:20.279299974 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:20.280400038 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:20.280493021 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:20.280642986 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:20.306418896 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:20.306443930 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:20.306729078 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:20.306729078 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:20.306756020 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:20.323323011 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:20.327359915 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:20.327366114 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:20.374306917 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:20.453953981 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:20.453984976 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:20.458048105 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:20.458682060 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:20.458698988 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:20.522305012 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.522353888 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.522433043 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.522478104 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.522492886 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.522501945 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.522850037 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.523597956 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.523633957 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.523690939 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.523715973 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.523749113 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.526362896 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.530483007 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.530915976 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.531790018 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.531852007 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.531986952 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.532012939 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.535955906 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.539807081 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.539892912 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.544696093 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.546034098 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.546046972 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.562207937 CET	49866	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.562227011 CET	443	49866	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.587019920 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.587043047 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.640731096 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.642218113 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.645953894 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.646387100 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.646398067 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.687686920 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.709773064 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.718637943 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:20.718688011 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:20.718905926 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:20.719099045 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.719238997 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:20.719254971 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:20.719257116 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.719285965 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.721909046 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:20.721942902 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:20.722074986 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:20.722315073 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:20.722323895 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:20.722868919 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:20.722898960 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:20.723145008 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:20.723330021 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:20.723368883 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:20.723578930 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:20.723592043 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:20.723632097 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:20.723790884 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:20.723803997 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:20.727515936 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.727691889 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.727703094 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.728363037 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:20.728404999 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:20.728904009 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:20.728935003 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:20.728996038 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:20.729073048 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:20.729180098 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:20.729196072 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:20.729330063 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:20.729342937 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:20.735851049 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:20.735876083 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:20.736056089 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.736151934 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.736151934 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:20.736160040 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.736366987 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:20.736375093 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:20.747850895 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.747920990 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.747934103 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.761123896 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.761280060 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.761288881 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.771251917 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.771718979 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.771739006 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.785094976 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.785164118 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.785177946 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.797194958 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:20.797205925 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:20.797374010 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:20.797574997 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.797609091 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:20.797616959 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:20.797663927 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.797692060 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.810445070 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.810766935 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.810775995 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.823196888 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.823746920 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.823760033 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.835973024 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.836622000 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.836631060 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.843169928 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:20.843898058 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:20.843908072 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:20.844325066 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:20.844710112 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:20.844789028 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:20.844953060 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:20.848850965 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.849411964 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.849441051 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.887340069 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:20.890708923 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.906339884 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.908545017 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.908636093 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.908755064 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.908766031 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.908974886 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.913028002 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.919423103 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.919554949 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.919779062 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.919806004 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.919898033 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.930403948 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.940900087 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.940958023 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.941029072 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.941051960 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.941555977 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.942970991 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.953857899 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.953934908 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.953946114 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.964869022 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.964942932 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.964951992 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.975291967 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.975434065 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.975457907 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.986084938 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.986243010 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.986265898 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.996912956 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:20.997123003 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:20.997148037 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.007492065 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.007685900 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.007708073 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.017596960 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.017997980 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.018023014 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.029601097 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.029815912 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.029834986 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.036967993 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.037048101 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.037065029 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.050601959 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.050961018 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.050985098 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.061574936 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.062171936 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.062189102 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.067358017 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.068057060 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.068073034 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.070413113 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.070647955 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.070656061 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.080120087 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.080537081 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.080559969 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.092225075 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.092593908 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.092614889 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.100965977 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.101100922 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.101119995 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.104284048 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.104506969 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.104520082 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.107430935 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.107709885 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.107724905 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.108663082 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.108741999 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.109131098 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.109154940 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.109548092 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.112425089 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.112704992 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.112720966 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.116981983 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.117460012 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.118626118 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.118834019 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.118846893 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.122523069 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.122782946 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.122807026 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.125293016 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.125515938 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.127742052 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.127831936 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.127850056 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.132778883 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.132982969 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.132996082 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.135596991 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.135647058 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.135674953 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.135693073 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.137377977 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.137732983 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.137887955 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.137907982 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.142831087 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.143889904 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.143913031 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.147686958 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.147819996 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.147840977 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.149416924 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.149652004 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.152853012 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.152981043 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.153004885 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.157916069 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.158947945 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.158968925 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.162910938 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.162993908 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.163100004 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.163110018 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.163129091 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.167890072 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.169079065 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.169588089 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.169598103 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.169922113 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.173353910 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.178045988 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.178781986 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.178797007 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.182713032 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.182816029 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.182825089 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.187675953 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.187824965 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.187834978 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.192378998 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.192404985 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.194411039 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.194420099 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.197357893 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.199676037 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.199681997 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.199784040 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.201981068 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.206800938 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.206861973 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.206868887 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.212356091 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.212387085 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.212418079 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.212430954 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.212488890 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.216312885 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.221060991 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.221101999 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.221116066 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.225900888 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.225954056 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.225961924 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.227861881 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.227912903 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.230384111 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.230530024 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.230622053 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.230629921 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.231338024 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.235121012 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.241745949 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.241808891 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.241885900 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.241895914 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.241960049 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.244127035 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.252110958 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.252185106 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.252192974 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.252345085 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.252403021 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.252738953 CET	49867	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:21.252748013 CET	443	49867	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:21.287178040 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:21.287249088 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:21.287345886 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:21.300502062 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.300545931 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.300554991 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.300573111 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.301032066 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.306885004 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.306948900 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.307539940 CET	49884	443	192.168.2.10	104.20.6.133
Dec 10, 2024 14:21:21.307565928 CET	443	49884	104.20.6.133	192.168.2.10
Dec 10, 2024 14:21:21.316101074 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.316154003 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.316184998 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.316222906 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.329891920 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.330012083 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.332221985 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:21.332247019 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:21.332508087 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:21.332684994 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:21.332691908 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:21.343482018 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.343544006 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.343550920 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.357201099 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.357250929 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.357264996 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.370903015 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.371067047 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.371092081 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.384443045 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.384494066 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.384500980 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.397002935 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.397108078 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.397114038 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.409512997 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.409672976 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.409678936 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.422086954 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.422133923 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.422139883 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.434694052 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.434742928 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.434748888 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.447422028 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.447671890 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.447678089 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.492463112 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.492515087 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.492531061 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.492549896 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.492675066 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.494806051 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.501629114 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.501671076 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.501677036 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.512708902 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.512793064 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.512800932 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.523449898 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.523494005 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.523502111 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.533643007 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.533700943 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.533719063 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.543474913 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.543520927 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.543529034 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.553039074 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.553082943 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.553090096 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.562601089 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.562679052 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.562688112 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.572006941 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.572068930 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.572084904 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.581639051 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.581883907 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.581902981 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.600255013 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.602036953 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.602045059 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.607403040 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.610034943 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.610090017 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.610131025 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.610140085 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.610152006 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.626039982 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.626146078 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.626163960 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.628102064 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.628278971 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.628287077 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.636136055 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.636192083 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.636199951 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.655644894 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.655741930 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.655751944 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.657144070 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.657218933 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.657226086 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.660655975 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.663429976 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.663531065 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.663539886 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.663871050 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.671077967 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.674504042 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.675837994 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.675844908 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.683273077 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.683885098 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.683891058 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.687333107 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.687402010 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.687408924 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.692559004 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.694801092 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.694875956 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.694883108 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.695878029 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.697556973 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.702785969 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.702924967 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.702991009 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.702997923 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.703879118 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.707640886 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.712750912 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.712806940 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.712889910 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.712896109 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.715881109 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.717761993 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.722773075 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.722867012 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.722934961 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.722942114 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.723880053 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.727808952 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.733766079 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.733860970 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.733869076 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.737704039 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.737763882 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.737770081 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.742690086 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.742747068 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.742753983 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.747540951 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.747594118 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.747601032 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.752415895 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.752526999 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.752599955 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.752608061 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.755881071 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.757227898 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.761866093 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.761951923 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.762010098 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.762016058 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.763478041 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.763488054 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.767570972 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.771327972 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.771389961 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.771398067 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.771855116 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.772300005 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.776904106 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.777570009 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.777575970 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.781510115 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.781590939 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.781595945 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.786289930 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.789746046 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.789791107 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.789798021 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.791882992 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.791892052 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.795010090 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.796212912 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.796219110 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.799329996 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.799396992 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.799401999 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.803790092 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.807327032 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.807435989 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.807445049 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.807873011 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.808113098 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.812397957 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.815797091 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.815875053 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.815901995 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.815913916 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.815926075 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.820061922 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.823337078 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.823364019 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.824318886 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.824378967 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.824389935 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.828401089 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.828831911 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.828905106 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.829241037 CET	49875	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:21.829258919 CET	443	49875	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:21.944725037 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:21.951045036 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:21.991852999 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:21.996723890 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:21.999775887 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:21.999851942 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.009490013 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.010011911 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.010041952 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.011253119 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.011531115 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.014035940 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:22.014071941 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:22.014229059 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:22.014655113 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:22.014676094 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:22.014760971 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.014780045 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.016235113 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.016242027 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:22.016279936 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.016288042 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.016303062 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.016365051 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:22.016822100 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:22.016840935 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.017924070 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.017983913 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:22.018244028 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:22.018255949 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:22.018745899 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.018806934 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.018834114 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.018845081 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.018888950 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.020113945 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:22.020190954 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:22.020602942 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.020692110 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.021774054 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.021893024 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.021920919 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:22.021986008 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.022243023 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.022253990 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.022452116 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:22.022461891 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:22.022541046 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.022553921 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.022588968 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.022600889 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.022679090 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:22.022686958 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.064201117 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.064224958 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:22.064239979 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:22.064240932 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.064264059 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.092148066 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.092665911 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.092680931 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.093771935 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.093931913 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.094913006 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.095022917 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.095062017 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.095109940 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.095119953 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.095428944 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.095448971 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.096565008 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.096638918 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.097867966 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.097942114 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.097961903 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.143322945 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.144124031 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.144378901 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.144390106 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.155642033 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.164921045 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.164937019 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.166032076 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.166081905 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.167306900 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.167370081 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.167943954 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.167954922 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.170099020 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.170130014 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:22.170312881 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.170604944 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.170646906 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:22.170707941 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.170886993 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.170895100 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:22.171036005 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.171049118 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:22.199162960 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.215274096 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.368870020 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.368910074 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:22.368987083 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.370493889 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.370528936 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.370582104 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.371355057 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:22.371377945 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:22.371694088 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.371709108 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.406902075 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:22.407300949 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:22.407330036 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:22.409069061 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:22.409132957 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:22.412873030 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:22.413321018 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:22.413470030 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:22.419574976 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.419617891 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.419675112 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.419867992 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.419882059 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.425554037 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.425777912 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.425806046 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.426882982 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.426951885 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.428613901 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.428687096 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.428797960 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.428807974 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.447285891 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.447355032 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.447402000 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.449680090 CET	49900	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.449702024 CET	443	49900	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.451159000 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.451208115 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.451265097 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.451739073 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:22.451765060 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:22.459968090 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:22.459985018 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:22.473417997 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.473494053 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.473539114 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:22.473925114 CET	49901	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:22.473939896 CET	443	49901	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:22.475373030 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.475420952 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.475475073 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.475541115 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.475730896 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.475748062 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.505803108 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:22.509399891 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.509440899 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.509500980 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.510665894 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.510684967 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.523509979 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.523550987 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.523617029 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.523843050 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.523859978 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.552969933 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:22.553014994 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:22.553083897 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:22.553385019 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:22.553402901 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:22.553975105 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:22.554044962 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:22.554097891 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:22.554502964 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:22.554522038 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:22.554939032 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:22.554971933 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:22.555048943 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:22.555229902 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:22.555242062 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:22.556869984 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:22.556898117 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:22.556950092 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:22.557324886 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:22.557344913 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:22.567795038 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.568267107 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.568280935 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.569485903 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.569556952 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.570813894 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.570884943 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.570983887 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.570991993 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.604171038 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.604249954 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.604316950 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.605956078 CET	49899	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.605974913 CET	443	49899	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.606226921 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.606309891 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.606363058 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.607151985 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.607183933 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.607247114 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.607489109 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:22.607501984 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:22.607667923 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.607667923 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.607677937 CET	443	49898	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:22.607728958 CET	49898	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:22.615056038 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.615096092 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.615153074 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.615356922 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:22.615371943 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:22.624732018 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.702014923 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:22.702269077 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:22.702287912 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:22.703406096 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:22.703479052 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:22.707927942 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:22.708005905 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:22.708487034 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:22.708493948 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:22.752183914 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:22.752899885 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.752954960 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.752993107 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.753000975 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.753011942 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.753053904 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.753058910 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.761089087 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.761512995 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.761565924 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.766119957 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.766159058 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.766168118 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.766175032 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.766217947 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.772361040 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.784703970 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.784801960 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.784818888 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.791837931 CET	49887	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.791862965 CET	443	49887	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.792349100 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.792398930 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.793083906 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.793088913 CET	443	49886	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:22.793098927 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.793140888 CET	49886	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:22.958842993 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.959773064 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.959846973 CET	443	49891	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:22.959909916 CET	49891	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:22.964864969 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.964920044 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.964971066 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.966816902 CET	49904	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.966825962 CET	443	49904	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.981096029 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.981142044 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:22.981223106 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.981611967 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:22.981627941 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:23.020695925 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.021022081 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.021029949 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.022103071 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.022169113 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.022495031 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.022562027 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.022597075 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.067040920 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.067053080 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.092741013 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.092791080 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.092822075 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.092839003 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.092855930 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.092905045 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.101243973 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.109275103 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.109324932 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.109338045 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.110006094 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.110049009 CET	443	49896	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.110100031 CET	49896	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.110173941 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:23.110263109 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:23.110316038 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:23.112205982 CET	49897	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:23.112224102 CET	443	49897	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:23.113044977 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.114132881 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:23.114187956 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:23.114247084 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:23.114554882 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:23.114573956 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:23.230062962 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:23.230225086 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:23.232139111 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:23.232162952 CET	443	49902	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:23.232196093 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:23.232341051 CET	49902	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:23.235929966 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.235979080 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.236015081 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.236047983 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.236049891 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.236074924 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.236104012 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.245275021 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.245371103 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.245387077 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.258191109 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.258342981 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.258362055 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.313865900 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.313896894 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.355194092 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.355230093 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.355264902 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.355283022 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.355441093 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.427753925 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.427810907 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.427922964 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.427933931 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.428385019 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.428430080 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.428595066 CET	443	49890	142.250.181.1	192.168.2.10
Dec 10, 2024 14:21:23.428706884 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.428706884 CET	49890	443	192.168.2.10	142.250.181.1
Dec 10, 2024 14:21:23.705972910 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.706020117 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.706052065 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.706082106 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.706103086 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.706109047 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.706134081 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.706159115 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.706207991 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.707287073 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:23.707657099 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:23.707664967 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:23.708024025 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:23.708079100 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:23.708760023 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:23.708935976 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:23.709207058 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:23.709207058 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:23.709216118 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:23.709264040 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:23.711585999 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:23.711831093 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:23.711843967 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:23.712863922 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:23.713205099 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:23.713283062 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:23.713378906 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:23.714265108 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.725203991 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.725554943 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.725577116 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.737049103 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.738128901 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.738152981 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.749804020 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:23.749815941 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:23.759319067 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:23.770303965 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:23.770436049 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:23.770540953 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:23.770556927 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:23.770689011 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:23.770709038 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:23.771723032 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:23.771786928 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:23.771819115 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:23.771912098 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:23.773022890 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:23.773022890 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:23.773087978 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:23.773106098 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:23.773125887 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:23.773257017 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:23.773264885 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:23.781007051 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.796632051 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:23.819322109 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:23.825155020 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.827884912 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:23.827896118 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:23.827903032 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:23.860970974 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.861202002 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.861208916 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.861280918 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.861454010 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.861478090 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.861553907 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.861826897 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.861924887 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.861982107 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.862014055 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.862059116 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.862313986 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.862381935 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.862425089 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.862448931 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:23.874787092 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:23.874825001 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.874840021 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.898550987 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.898752928 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.898775101 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.904721975 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.905138016 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.905164003 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.911863089 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.911870003 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:23.913717985 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.914521933 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.914541960 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.925832033 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.926047087 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.926065922 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.940309048 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.940566063 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.940581083 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.947747946 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:23.948188066 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:23.948203087 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:23.949580908 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:23.949719906 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:23.950620890 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:23.950754881 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:23.950793982 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:23.953670025 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.953706026 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.953886032 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.953897953 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.953999996 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.967514038 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.975260973 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:23.976402044 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:23.976418972 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:23.976742983 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:23.979105949 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.979260921 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.979269981 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.979676962 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:23.979676962 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:23.979691982 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:23.979753017 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:23.991646051 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.991794109 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.991947889 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.991956949 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:23.992096901 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:23.995320082 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:24.003247976 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:24.003257036 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:24.004302025 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.016882896 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.016942978 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.017467976 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.017478943 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.017605066 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.029115915 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.034528017 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:24.050138950 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:24.062939882 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.063229084 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.063246965 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.064304113 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.064429045 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.064647913 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.064871073 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.064879894 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.064899921 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.064929008 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.064955950 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.065979004 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.066335917 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.066335917 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.066513062 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.066521883 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.066586018 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.083411932 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.083427906 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.089943886 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.090065002 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.090073109 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.092833042 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.094136000 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.094141960 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.097040892 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.097068071 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.097239017 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.097244978 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.097641945 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.097668886 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.099039078 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.099122047 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.100213051 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.100297928 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.100456953 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.102498055 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.103944063 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.103951931 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.107270956 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.107433081 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.107439041 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.111321926 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.111852884 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.112576962 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.112621069 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.112634897 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.112663031 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.112663031 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.112670898 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.112683058 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.114337921 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.114343882 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.115418911 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.115487099 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.120284081 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.120342970 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.121561050 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.121592045 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.121597052 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.121679068 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.121685028 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.130574942 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.130764008 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.130769968 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.139292002 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.139687061 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.139694929 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.143925905 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.143946886 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.148053885 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.148348093 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.148355007 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.157063961 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.157334089 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.157344103 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.159498930 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.159521103 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.163661957 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.164171934 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.164180994 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.164525032 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.164947033 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.164947033 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.164963961 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.165013075 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.165638924 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.166085005 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.166094065 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.170538902 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:24.170608997 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:24.170876980 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:24.173901081 CET	49930	443	192.168.2.10	50.31.142.255
Dec 10, 2024 14:21:24.173901081 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.173919916 CET	443	49930	50.31.142.255	192.168.2.10
Dec 10, 2024 14:21:24.173935890 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.174035072 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.174329996 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.174345016 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.174712896 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.175916910 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.175940990 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.176177025 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.176191092 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.176351070 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.183794022 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.190766096 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.197621107 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.197879076 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.197899103 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.198966980 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.199254990 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.200335979 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.200440884 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.200592995 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.200602055 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.206352949 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.207806110 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:24.207940102 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:24.207988977 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:24.208954096 CET	49936	443	192.168.2.10	34.96.105.8
Dec 10, 2024 14:21:24.208966017 CET	443	49936	34.96.105.8	192.168.2.10
Dec 10, 2024 14:21:24.209270000 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.209384918 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.209399939 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.210982084 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.211049080 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.211055040 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.213460922 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.213794947 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.213874102 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.213880062 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.214150906 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.214162111 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.214513063 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.214921951 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.214998007 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.215049028 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.218759060 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.218803883 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.218821049 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.218827963 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.218889952 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.227641106 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.236274958 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.236363888 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.236377954 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.244409084 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.244441986 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.244462967 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.244471073 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.244617939 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.252722979 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.253254890 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.259321928 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.261630058 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.261661053 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.261730909 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.261737108 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.261863947 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.268991947 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.272747993 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:24.272907019 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:24.272975922 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:24.273325920 CET	49937	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:24.273343086 CET	443	49937	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:24.281752110 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.283519030 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.283643007 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.283709049 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.283719063 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.286241055 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.286672115 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.286678076 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.287928104 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.289422035 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.292035103 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.292095900 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.292099953 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.295497894 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.295567036 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.295685053 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.295691013 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.295731068 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.296572924 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.296617031 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.296685934 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.297077894 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.297091961 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.298103094 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.301162958 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.301295996 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.301301956 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.303653002 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.304126024 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.304151058 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.305212975 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.305284977 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.306063890 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.306189060 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.306195021 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.309910059 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.310056925 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.310060978 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.314699888 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.315872908 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.315876961 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.319583893 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.320396900 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.320401907 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.324368954 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.326198101 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.326203108 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.329185009 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.329246998 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.329252005 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.333543062 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.333606005 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.333611012 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.338170052 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.339878082 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.339881897 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.342592955 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.342672110 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.342677116 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.344974995 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.347227097 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.347299099 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.347304106 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.351320028 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.355384111 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.355390072 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.355429888 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.355489016 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.355494976 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.359914064 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.363598108 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.363605976 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.364213943 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.364299059 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.364305019 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.368978977 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.370968103 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.370975018 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.372788906 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.375884056 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.375890017 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.376966000 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.377023935 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.377028942 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.381211996 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.381539106 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.381551981 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.385556936 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.385637045 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.385649920 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.389518976 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.391889095 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.391901016 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.393693924 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.393753052 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.393759012 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.393857002 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:24.397726059 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.399872065 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.399878025 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.402162075 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.402225018 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.412405014 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.412611008 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.415792942 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:24.415800095 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.416282892 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.421399117 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.421466112 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.421549082 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.429600954 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:24.429713964 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.443679094 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.443697929 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.447333097 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:24.457827091 CET	49914	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:24.457844019 CET	443	49914	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:24.464351892 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:24.464428902 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:24.464499950 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:24.475519896 CET	49939	443	192.168.2.10	174.137.133.49
Dec 10, 2024 14:21:24.475568056 CET	443	49939	174.137.133.49	192.168.2.10
Dec 10, 2024 14:21:24.489557028 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.495323896 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.498322964 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:24.498991966 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:24.499473095 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:24.500641108 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:24.500658035 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:24.500663042 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:24.501048088 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:24.507703066 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:24.507817030 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:24.523930073 CET	49942	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:24.523941994 CET	443	49942	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:24.523987055 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:24.524045944 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:24.524054050 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:24.524070024 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:24.524106026 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:24.531133890 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:24.532020092 CET	49919	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:24.532031059 CET	443	49919	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:24.548046112 CET	49940	443	192.168.2.10	51.89.9.251
Dec 10, 2024 14:21:24.548054934 CET	443	49940	51.89.9.251	192.168.2.10
Dec 10, 2024 14:21:24.575323105 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:24.762229919 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.762269020 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.762362003 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.762486935 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.762676954 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.762700081 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.763896942 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.763968945 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.781380892 CET	49921	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.781399012 CET	443	49921	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.806308031 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:24.806322098 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:24.806382895 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:24.806780100 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:24.806791067 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:24.861994982 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.862075090 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.862145901 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:24.863173962 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.863529921 CET	49948	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:24.863543034 CET	443	49948	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:24.865509033 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.865588903 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.868544102 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.868562937 CET	443	49928	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:24.868575096 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.868609905 CET	49928	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:24.882102966 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.883810043 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.883865118 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.897227049 CET	49926	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:24.897260904 CET	443	49926	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:24.915020943 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.915082932 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.915136099 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.915661097 CET	49929	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.915673018 CET	443	49929	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.916038990 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.916069031 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.916156054 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.917613983 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.917639971 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.969017982 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.970936060 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.971075058 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.981281042 CET	49933	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.981309891 CET	443	49933	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.981590986 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.981620073 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:24.981709957 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.983654976 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:24.983661890 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.000356913 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.000415087 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.000443935 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.000473022 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.000490904 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.000505924 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.000530958 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.008866072 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.008920908 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.008929014 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.017855883 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.019443989 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.019494057 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.019912004 CET	49935	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.019941092 CET	443	49935	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.020620108 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.020652056 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.020721912 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.021032095 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.021497011 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.021506071 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.025286913 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.025302887 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.031672955 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:25.031742096 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:25.031878948 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:25.032191038 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:25.032212973 CET	443	49951	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:25.032222033 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:25.032254934 CET	49951	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:25.044792891 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:25.044847012 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:25.044950962 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:25.045241117 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:25.045255899 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:25.046327114 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:25.046336889 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:25.046399117 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:25.046602964 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:25.046617031 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:25.055643082 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.055679083 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.055702925 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.055728912 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.055814028 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.055814028 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.055825949 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.062705994 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.062722921 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.069036961 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.069145918 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.069159985 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.076250076 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.076324940 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.076344967 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.087487936 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.087569952 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.087579966 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.095885992 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.095928907 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.096172094 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.096394062 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.096406937 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.105757952 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.107038021 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.107172966 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.108278990 CET	49943	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.108293056 CET	443	49943	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.108513117 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.109210014 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.109231949 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.109299898 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.110480070 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.110491991 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.119863033 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.123868942 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.123919010 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.123933077 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.139416933 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.171391964 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.175662994 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.186310053 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.194806099 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.194874048 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.197942019 CET	49934	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.197957993 CET	443	49934	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.218348980 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.218369961 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.247705936 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.247781038 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.247802019 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.255750895 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.255829096 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.255840063 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.281884909 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.282026052 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.282037973 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.286921024 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.286983967 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.287003040 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.298907995 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.298960924 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.298989058 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.310295105 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.310333967 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.310363054 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.310369968 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.310419083 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.316915989 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.316951990 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.317044973 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317061901 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317075968 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.317188025 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317245960 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317257881 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.317312956 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317524910 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317538977 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.317691088 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317703962 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.317785025 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.317897081 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.317907095 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.330203056 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.330281019 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.330288887 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.360354900 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.360384941 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.360411882 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.360424042 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.360476017 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.361027002 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:25.361067057 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:25.361341953 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:25.362195015 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:25.362210035 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:25.363631010 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.373606920 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.373634100 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.373666048 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.373686075 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.373749971 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.382292986 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.437375069 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.437386990 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.439472914 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.439548969 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.439554930 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.444906950 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.444968939 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.444974899 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.449279070 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.449348927 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.449366093 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.452368975 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.452456951 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.452461958 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.458913088 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.459053040 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.459060907 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.473176003 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.473292112 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.473304987 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.484111071 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.484163046 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.484236956 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.484471083 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.484484911 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.490894079 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.490921021 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.491095066 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.491110086 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.491202116 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.493494987 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.501976013 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.502041101 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.502049923 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.512897015 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.512964010 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.512976885 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.523796082 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.523852110 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.523858070 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.534504890 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.534615040 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.534621954 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.544589043 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.544617891 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.544656038 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.544672012 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.544717073 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.554604053 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.560481071 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:25.560513973 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:25.560637951 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:25.560832024 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:25.560847044 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:25.567054033 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.567080975 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.567143917 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.567148924 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.567203045 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.573016882 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.573070049 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.573123932 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.573129892 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.582092047 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.582170010 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.583020926 CET	49920	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:25.583036900 CET	443	49920	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:25.631450891 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:25.631483078 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:25.631541014 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:25.632828951 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:25.632849932 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:25.633034945 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:25.634371042 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:25.634377956 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:25.635287046 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:25.635296106 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:25.635936022 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:25.635956049 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:25.636182070 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:25.638541937 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:25.638555050 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:25.699779034 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:25.699825048 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:25.699887991 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:25.700228930 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:25.700242996 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:25.771889925 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:25.771917105 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:25.772023916 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:25.772433996 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:25.772445917 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:25.774219036 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:25.774239063 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:25.774291992 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:25.774445057 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:25.774458885 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:25.775321007 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:25.775355101 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:25.775453091 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:25.775851965 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:25.775865078 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:25.870563984 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.870783091 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.870795012 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.871166945 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.871551991 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.871611118 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.871695995 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.915330887 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.921617031 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.987904072 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.988164902 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.988183022 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.988538027 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.988964081 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:25.989039898 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:25.989233017 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.031339884 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.273714066 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.274095058 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.274108887 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.275156021 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.275264978 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.277364016 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.277426958 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.277849913 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.277864933 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.327467918 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.455115080 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:26.455940008 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:26.455949068 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:26.456825972 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:26.457331896 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:26.457407951 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:26.457772970 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:26.474217892 CET	50015	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:26.474262953 CET	443	50015	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:26.474329948 CET	50015	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:26.475516081 CET	50015	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:26.475531101 CET	443	50015	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:26.497224092 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:26.497750044 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:26.497767925 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:26.498272896 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:26.499223948 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:26.499298096 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:26.499330997 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:26.500597000 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:26.543338060 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:26.544814110 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:26.544850111 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:26.544951916 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:26.545787096 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:26.545805931 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:26.617130995 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.617434978 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.617458105 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.617810965 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.618168116 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.618249893 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.618319035 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.663326979 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.671477079 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.671696901 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.671722889 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.672059059 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.672660112 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.672879934 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.672945023 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.673105955 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.673723936 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.673748016 CET	443	49961	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.673892021 CET	49961	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.674210072 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.674252987 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.674312115 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.675923109 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.675946951 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.677464962 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.677489996 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.677578926 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.677946091 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.677958012 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.714282036 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.714584112 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.714600086 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.715658903 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.715711117 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.716114044 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.716177940 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.716373920 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.716382980 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.719327927 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.727581024 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.727658987 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.727826118 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.728677988 CET	49981	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.728696108 CET	443	49981	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.748150110 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.748194933 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.748492002 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.751326084 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:26.751339912 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:26.764967918 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.788727045 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:26.789033890 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:26.789071083 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:26.789433002 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:26.789947987 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:26.790031910 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:26.790249109 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:26.790278912 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:26.790913105 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.793065071 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.793083906 CET	443	49962	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.793209076 CET	49962	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.793684006 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.793709993 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.793777943 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.794986963 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.795001030 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.799036980 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:26.799078941 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:26.799158096 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:26.799309969 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:26.799325943 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:26.811933041 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.812786102 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.812794924 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.813872099 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.813947916 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.814435959 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.814505100 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.814774990 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.814784050 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:26.842724085 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:26.843334913 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:26.843344927 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:26.843687057 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:26.844099045 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:26.844161034 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:26.844206095 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:26.850307941 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:26.860548019 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:26.863162994 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:26.863177061 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:26.864339113 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:26.864434004 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:26.891330957 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:26.891366959 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:26.989999056 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:26.995331049 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:26.995345116 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:26.996561050 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:26.996615887 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:26.999372005 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.003753901 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:27.003777981 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.004199982 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.006159067 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.007745028 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:27.007913113 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.007925987 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.008019924 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:27.008024931 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.008961916 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.009119034 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.009183884 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.009394884 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.009460926 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.011943102 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.011970043 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.012073994 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.012083054 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.013030052 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.013108969 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.013117075 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.013169050 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.015672922 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.015774012 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.015856028 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:27.019134998 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.019243956 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.019494057 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.019594908 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.022756100 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:27.022766113 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:27.022984982 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.023003101 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.023081064 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.023086071 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.023169041 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.023192883 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.023216009 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:27.026561975 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:27.026621103 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:27.026738882 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:27.053936958 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.056704998 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.059245110 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.059252977 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.059254885 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.059286118 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.060492992 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.060566902 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.060794115 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.060858011 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.061988115 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:27.063199043 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.063676119 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.063731909 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.071332932 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:27.077470064 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.077487946 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.077543974 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.146519899 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.155646086 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.155663013 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.174747944 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.202467918 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.230603933 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.230611086 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.231067896 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.231085062 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.231575012 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.232242107 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.232254982 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.232290983 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.234199047 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.234285116 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.238379955 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.238416910 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.252243042 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.252500057 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:27.252521038 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.252880096 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.253915071 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:27.253983974 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.254595041 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:27.259166956 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:27.259694099 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:27.259758949 CET	443	49969	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:27.259808064 CET	49969	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:27.264987946 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.280610085 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.295339108 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.315107107 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.315285921 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:27.315294027 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.315475941 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.316045046 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:27.316176891 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:27.316400051 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.316417933 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:27.316700935 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.316715002 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.316807032 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.316951036 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.317096949 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:27.317147970 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:27.317190886 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:27.317203045 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:27.317245960 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:27.317293882 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:27.317312002 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:27.317409039 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.317426920 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.324826002 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:27.327028990 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:27.327117920 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:27.329529047 CET	49972	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:27.329544067 CET	443	49972	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:27.354692936 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:27.354773045 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:27.354846954 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:27.357647896 CET	50000	443	192.168.2.10	35.190.0.66
Dec 10, 2024 14:21:27.357660055 CET	443	50000	35.190.0.66	192.168.2.10
Dec 10, 2024 14:21:27.361203909 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.361226082 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.361227036 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.391062021 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:27.392051935 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:27.392060995 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:27.393174887 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:27.393240929 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:27.394279957 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:27.394409895 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:27.394499063 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:27.394515991 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:27.430875063 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.431509018 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.431571007 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.431977034 CET	49976	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.431996107 CET	443	49976	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.432687998 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.432720900 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.432782888 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.433218002 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.433231115 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.446424007 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:27.446748018 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:27.446758032 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:27.491799116 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.493324041 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.493398905 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.509068966 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.509145021 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.509352922 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:27.517774105 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.519603014 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.519665003 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.530627012 CET	50001	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:27.530662060 CET	443	50001	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:27.532912016 CET	49979	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.532932997 CET	443	49979	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.533565044 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.533602953 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.533736944 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.535831928 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.535846949 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.536315918 CET	49980	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.536349058 CET	443	49980	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.536773920 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.536801100 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.536885977 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.537261009 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.537277937 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.547650099 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:27.559830904 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:27.559866905 CET	443	49999	52.57.179.60	192.168.2.10
Dec 10, 2024 14:21:27.559945107 CET	49999	443	192.168.2.10	52.57.179.60
Dec 10, 2024 14:21:27.561477900 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:27.561929941 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.561983109 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.562175035 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.562366009 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.562377930 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.604135990 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.608747005 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.608817101 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.613197088 CET	49984	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.613234997 CET	443	49984	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.640093088 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.643490076 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.643685102 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.644870996 CET	49985	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.644890070 CET	443	49985	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.645217896 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.645251989 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.645324945 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.645802021 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.645816088 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.659780025 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:27.660325050 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:27.660341024 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:27.660398960 CET	443	50004	35.186.193.173	192.168.2.10
Dec 10, 2024 14:21:27.660453081 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:27.660453081 CET	50004	443	192.168.2.10	35.186.193.173
Dec 10, 2024 14:21:27.667674065 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.667763948 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.667891026 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.668195963 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.668217897 CET	443	50006	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:27.668235064 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.668262005 CET	50006	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:27.686755896 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.686803102 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.687052965 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.687424898 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.687434912 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.696778059 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.696820974 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.697031021 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.697253942 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.697266102 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.698724031 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.698769093 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.699074984 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.699310064 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.699330091 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.709460020 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.709542990 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.709709883 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.710421085 CET	50005	443	192.168.2.10	178.250.1.9
Dec 10, 2024 14:21:27.710441113 CET	443	50005	178.250.1.9	192.168.2.10
Dec 10, 2024 14:21:27.719609976 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:27.719690084 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:27.719717026 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.719780922 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.721966028 CET	49982	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.722001076 CET	443	49982	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:27.723283052 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.723340988 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:27.723408937 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.723921061 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:27.723933935 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:27.739391088 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.739526033 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.739640951 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.739722967 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.739732981 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.739772081 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.739860058 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.752120018 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.752201080 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.752206087 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.757450104 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.757520914 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.757534027 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.762170076 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:27.762203932 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:27.762290001 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:27.762527943 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:27.762543917 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:27.809027910 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.810574055 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.810648918 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.811144114 CET	49988	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.811167002 CET	443	49988	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.811841965 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.811880112 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.811989069 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.813060045 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.813076019 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.814971924 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.816791058 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.816879988 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.817128897 CET	49990	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.817146063 CET	443	49990	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.817487001 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.819083929 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.819175959 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.820486069 CET	49989	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:27.820502043 CET	443	49989	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:27.857707024 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:27.857727051 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:27.857851982 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:27.858117104 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:27.858128071 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:27.859004974 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.859051943 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.859066010 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.859080076 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.859592915 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.863225937 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.898653984 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.903441906 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:27.903455019 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.903896093 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.904444933 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:27.904521942 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.904752970 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:27.912930965 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:27.913830996 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:27.913844109 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:27.914202929 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:27.914515972 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:27.914576054 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:27.914665937 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:27.935009003 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.935214043 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.935228109 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.936111927 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.936191082 CET	443	49991	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:27.936323881 CET	49991	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:27.938620090 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.938659906 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.938688993 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.938714027 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.938775063 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:27.938775063 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:27.938797951 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.947323084 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.953083992 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.953157902 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:27.953166962 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.955326080 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:27.961606026 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.961653948 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:27.961664915 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:27.962214947 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.962647915 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:27.962662935 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.963001966 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.963910103 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:27.963974953 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:27.964047909 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:27.986112118 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.986160994 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.986186981 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.986212969 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.986232042 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.986267090 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.986279964 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.999495029 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.999572992 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.999600887 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:27.999624968 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:27.999665976 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.005618095 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.007328987 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.018382072 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.018469095 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.018491030 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.058401108 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.058484077 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.058492899 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.058506012 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.058629036 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.062752008 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.063546896 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.107737064 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.130440950 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.130511045 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.130531073 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.135576963 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.135638952 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.135658026 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.145313025 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.145396948 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.145416021 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.158869982 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.158921957 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.158941984 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.170716047 CET	443	50015	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:28.171211004 CET	50015	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:28.171226025 CET	443	50015	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:28.171616077 CET	443	50015	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:28.172467947 CET	50015	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:28.172552109 CET	443	50015	172.217.19.193	192.168.2.10
Dec 10, 2024 14:21:28.175422907 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.175442934 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.175543070 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.175553083 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.175602913 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.175633907 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.186824083 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.186908007 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.186925888 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.191592932 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.191622972 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.191673994 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.191684961 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.191890001 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.194825888 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.194884062 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.194895983 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.199760914 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.203704119 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.203787088 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.203808069 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.212372065 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.212402105 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.212481022 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.212507963 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.212527990 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.212542057 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.223382950 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.223495960 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.223515034 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.226391077 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.226430893 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.226476908 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.226489067 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.226605892 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.236418009 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.236474991 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.236489058 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.237868071 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.244925022 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.244993925 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.245654106 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.245686054 CET	443	50002	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.245820045 CET	50002	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.247040987 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.247119904 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.247133970 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.249146938 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.249171019 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.249182940 CET	443	49994	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:28.249212980 CET	49994	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:28.250305891 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.250355005 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.250375032 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.261080027 CET	50015	443	192.168.2.10	172.217.19.193
Dec 10, 2024 14:21:28.264758110 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.264785051 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.264827013 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.264841080 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.264933109 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.267550945 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.267581940 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.267662048 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.267988920 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.268028021 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.268090963 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.269037008 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.269049883 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.269320011 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.269334078 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.277899981 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.277925968 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.278083086 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.278315067 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.278323889 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.322247028 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.324347973 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.324419022 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.324439049 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.328614950 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.328670025 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.328705072 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.328713894 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.328778982 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.334346056 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.342991114 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.343050003 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.343058109 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.343117952 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.343169928 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.343175888 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.343760014 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.343791962 CET	443	49998	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:28.343904018 CET	49998	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:28.349009991 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:28.349047899 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:28.349194050 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:28.349503040 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:28.349519014 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:28.351953030 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.351983070 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.352107048 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.352441072 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.352452040 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.356121063 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.356169939 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.356241941 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.356519938 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.356535912 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.356865883 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.356935978 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.357049942 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.357582092 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.357582092 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.357590914 CET	443	50018	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.357647896 CET	50018	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.359133959 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.359160900 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.359421968 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.359652996 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.359666109 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.370667934 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.382735968 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.382750988 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.383670092 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.384840012 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.384943962 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.385754108 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.400464058 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.400492907 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.400655031 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.400832891 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.400844097 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.412291050 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.412323952 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.412381887 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.412828922 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:28.412844896 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:28.415527105 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.415604115 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.415676117 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.416150093 CET	50019	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:28.416177034 CET	443	50019	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:28.427333117 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.431104898 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:28.431175947 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:28.431240082 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:28.432383060 CET	50016	443	192.168.2.10	35.214.136.108
Dec 10, 2024 14:21:28.432414055 CET	443	50016	35.214.136.108	192.168.2.10
Dec 10, 2024 14:21:28.491952896 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.492240906 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.492260933 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.492605925 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.493098021 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.493170023 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.493660927 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:28.535340071 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:28.590662956 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:28.590929985 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:28.590960979 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:28.592077971 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:28.592168093 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:28.592546940 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:28.592617035 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:28.592725992 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:28.639338017 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:28.643477917 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:28.643484116 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:28.643495083 CET	49672	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:28.752005100 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:28.969960928 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:28.969990969 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:28.970238924 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:28.971568108 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:28.971594095 CET	443	50069	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:28.971709967 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:28.973604918 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:28.973614931 CET	443	50069	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:28.974179029 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:28.974193096 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:28.981741905 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:28.982073069 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:28.982105017 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:28.983211994 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:28.983273029 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:28.987508059 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:28.987577915 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:28.987890005 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:28.987905025 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.000240088 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.000308990 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.000478983 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.002569914 CET	50021	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.002588987 CET	443	50021	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.005285978 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.005299091 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.005409002 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.005783081 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.005795002 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.098989010 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.099358082 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:29.099394083 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.100579977 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.100683928 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:29.103240967 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:29.103344917 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.103650093 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:29.103671074 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.104412079 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.104650974 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.104671001 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.105024099 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.105740070 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.105839968 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.106230021 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.131272078 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.133620024 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.133637905 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.133996964 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.134541035 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.134607077 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.135047913 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.151325941 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.160588026 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.160634041 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:29.179331064 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.185782909 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.187016964 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.187078953 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.193660021 CET	50017	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.193690062 CET	443	50017	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.194210052 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.194238901 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.194338083 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.195075989 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.195086002 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.197724104 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.197782040 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.197839022 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.198780060 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.198800087 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.224628925 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.227191925 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.245965004 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.245969057 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.245987892 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.246001959 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.246578932 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.247311115 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.247843981 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.247857094 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.247956991 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.248236895 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.248311996 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.248867989 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.249053001 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.249067068 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.266742945 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:29.275074959 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:29.275094986 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:29.275574923 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:29.276139975 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:29.276205063 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:29.276263952 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:29.276287079 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:29.291330099 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.294039965 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.294204950 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.294260025 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.314490080 CET	50020	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.314527988 CET	443	50020	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.315418959 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.315454960 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.315531015 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.316044092 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.316052914 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.342838049 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.353441954 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.353454113 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.354588985 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.354665995 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.356913090 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.356976986 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.357722998 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.357732058 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.364958048 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.365088940 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:29.394150019 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.394449949 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.397595882 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.402055025 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.402070045 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.402278900 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.402286053 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.402441025 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.402462959 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.402473927 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.403260946 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.403326988 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.403466940 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.403511047 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.403517962 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.404452085 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.404525995 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.404922962 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.405038118 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.405194998 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.405311108 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.405318022 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.405364990 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.447328091 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.447340012 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.484247923 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.504399061 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.504487038 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.504587889 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.506711006 CET	50045	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.506735086 CET	443	50045	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.509514093 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.509555101 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.509644985 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.509859085 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:29.509875059 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:29.517636061 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.523518085 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.523526907 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.524892092 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.525063992 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.544564962 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.544658899 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.544739962 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:29.563366890 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.580952883 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:29.647243023 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.647304058 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.647332907 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.647350073 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.647397995 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.694391966 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.694587946 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.702152967 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:29.702183008 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:29.703736067 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:29.739418983 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:29.739593983 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:29.746486902 CET	50044	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:29.746511936 CET	443	50044	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:29.746737957 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.746750116 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.750056028 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:29.791693926 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.795321941 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:29.863459110 CET	50047	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:29.863482952 CET	443	50047	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:29.868473053 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:29.868510962 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:29.868643045 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:29.868968010 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:29.868994951 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:29.869129896 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:29.869656086 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:29.869673014 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:29.870199919 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:29.870213985 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:29.941149950 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.942003965 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.942027092 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.942167044 CET	443	50031	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.942213058 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.942270041 CET	50031	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.942312002 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.942343950 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.942403078 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.942722082 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.942733049 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.943723917 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:29.943744898 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:29.943835020 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:29.944094896 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:29.944111109 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:29.983480930 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:29.983979940 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:29.983999014 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:29.985888958 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:29.985949993 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:29.986583948 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:29.986691952 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:29.987044096 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:29.987056017 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:29.990787983 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.991034985 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.991040945 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.991779089 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.992108107 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.992196083 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.992255926 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.994005919 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.994199038 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.994208097 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.994527102 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.994860888 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.994913101 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:29.995049953 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:29.995069027 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.028497934 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:30.028573990 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:30.028613091 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:30.029727936 CET	50034	443	192.168.2.10	142.250.181.66
Dec 10, 2024 14:21:30.029738903 CET	443	50034	142.250.181.66	192.168.2.10
Dec 10, 2024 14:21:30.032407045 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.034615040 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.034692049 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.035212994 CET	50032	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.035226107 CET	443	50032	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.035661936 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.035696983 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.035754919 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.036223888 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.036237001 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.037993908 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.038027048 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.038264036 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.038285017 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.038443089 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.038456917 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.039320946 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.040473938 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.040540934 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.040939093 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.040967941 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.041049004 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.041162968 CET	50033	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.041169882 CET	443	50033	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.041626930 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.041646957 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.041874886 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.042274952 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.042290926 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.042705059 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.042720079 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.046328068 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.046806097 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:30.046814919 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.047909021 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.047974110 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:30.048645020 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:30.048711061 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.048782110 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:30.049326897 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.049341917 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.049474955 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.049704075 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.049716949 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.052967072 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.053330898 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.053339958 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.053654909 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.054061890 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.054122925 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.054270983 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.054295063 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.055867910 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.056066990 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.056082010 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.056410074 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.056761980 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.056814909 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.056883097 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.063460112 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.063646078 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.078047037 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:30.078073025 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:30.078239918 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:30.078454971 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:30.078464985 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:30.078963995 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.095321894 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.100312948 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.100534916 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.100553989 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.101612091 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.101667881 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.102087021 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.102150917 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.102252960 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.102260113 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.103321075 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.106792927 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.107033014 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.107048988 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.108105898 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.108165026 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.108515978 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.108587027 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.108737946 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.108762026 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.113737106 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:30.113812923 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:30.113899946 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:30.115183115 CET	50059	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:30.115192890 CET	443	50059	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:30.147578001 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.148701906 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.148715019 CET	443	50038	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.148761034 CET	50038	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.149497032 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.149545908 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.149663925 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.150834084 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.150851965 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.196829081 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.197312117 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.198313951 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.198367119 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.201550961 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.201618910 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.203780890 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.205238104 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.205396891 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.248716116 CET	50040	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.248735905 CET	443	50040	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.251811028 CET	50041	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.251838923 CET	443	50041	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.253163099 CET	50042	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.253176928 CET	443	50042	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.255331039 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.255392075 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:30.257740021 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:30.257780075 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:30.257839918 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:30.258511066 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:30.258533955 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:30.266289949 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.266323090 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.266321898 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.266331911 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.351284027 CET	443	49811	173.222.162.55	192.168.2.10
Dec 10, 2024 14:21:30.351376057 CET	49811	443	192.168.2.10	173.222.162.55
Dec 10, 2024 14:21:30.367156029 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.370738029 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.370934010 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.390106916 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.391347885 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:30.391364098 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.391762972 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.392853975 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:30.392918110 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.393719912 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:30.406596899 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.407567024 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.407597065 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.408025026 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.408561945 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.408647060 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.408965111 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.423841953 CET	50046	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.423883915 CET	443	50046	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.435332060 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.443644047 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.451332092 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.670488119 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.670686960 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.670696974 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.670952082 CET	443	50069	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.671238899 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.671250105 CET	443	50069	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.671734095 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.671788931 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.672338009 CET	443	50069	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.672441959 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.672545910 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.672611952 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.672811985 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.672822952 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.673399925 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.673554897 CET	443	50069	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.673787117 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.673826933 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.673877001 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.673887014 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.673893929 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.673986912 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.674000978 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.687180042 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.687207937 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.687228918 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.687238932 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.687339067 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.693295002 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.705730915 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.705817938 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.705831051 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.721182108 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.721590996 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.721613884 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.721951008 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.722579956 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.722645998 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.722961903 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.748074055 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.748116970 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.748142004 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.748162031 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.748173952 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.748181105 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.748224020 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.756218910 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.756290913 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.762003899 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.767322063 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.767541885 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.767585993 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.767599106 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.780999899 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.781097889 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.781106949 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.797215939 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.797296047 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.797306061 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.828413010 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.828488111 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.835534096 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.835555077 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.835558891 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.835563898 CET	443	50069	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:30.835689068 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.835741997 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.835792065 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.842232943 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.842247009 CET	443	50053	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.842258930 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.842293024 CET	50053	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.848858118 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.848946095 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.848990917 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.850938082 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.850981951 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.851021051 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.851043940 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.851047039 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.851063967 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.851085901 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.851202965 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.851303101 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.851341963 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:30.852431059 CET	50076	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.852443933 CET	443	50076	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.854409933 CET	50056	443	192.168.2.10	172.217.21.36
Dec 10, 2024 14:21:30.854424953 CET	443	50056	172.217.21.36	192.168.2.10
Dec 10, 2024 14:21:30.856456995 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.856497049 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.856554985 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.856919050 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:30.856931925 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:30.864872932 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.864938974 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.864957094 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.865612984 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.865673065 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.865681887 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.866714954 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.866760969 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.866836071 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.867422104 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.867439032 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.868160009 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.870932102 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.870981932 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.870989084 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.871718884 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.871778011 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.871789932 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.880451918 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.880523920 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.880528927 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.882999897 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.883060932 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.883071899 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.900154114 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.902939081 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.903008938 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.903016090 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.908776045 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.913311958 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.913364887 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.913376093 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.914391994 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.914467096 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.914716005 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.914736032 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.916023970 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.916096926 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.916815996 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.917696953 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.917763948 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.918064117 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.918071032 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.920195103 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.920273066 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.921284914 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.921323061 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.921379089 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:30.921427011 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.921468973 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.921482086 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.921488047 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.921525955 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.925683975 CET	50062	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.925703049 CET	443	50062	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.926403999 CET	50074	443	192.168.2.10	37.252.171.85
Dec 10, 2024 14:21:30.926418066 CET	443	50074	37.252.171.85	192.168.2.10
Dec 10, 2024 14:21:30.934937000 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.935264111 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.935328007 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.935338974 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.945156097 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.945223093 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.945254087 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.952594042 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.952703953 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.952718019 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.952727079 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.952785015 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.953804970 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.953888893 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.953912973 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.959861040 CET	50069	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:30.959866047 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.961483955 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.961497068 CET	443	50057	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.961570978 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.961570978 CET	50057	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.962723017 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.963547945 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.963740110 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.963814020 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.966290951 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.966348886 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.966361046 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.970309019 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.973031998 CET	50063	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.973052025 CET	443	50063	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.973062038 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.973128080 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.973181009 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.973186970 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.973233938 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.975039959 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.975096941 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.975128889 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.975786924 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.985728979 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.989006996 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.989063025 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.989077091 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.989588976 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.989619017 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.989669085 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.990039110 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.990055084 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.998495102 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.998580933 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.998608112 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.998619080 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:30.998671055 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:30.999831915 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:30.999883890 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:30.999897957 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.004719973 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.004962921 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.004971981 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.005507946 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.005917072 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.005989075 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.006056070 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.013957977 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.014008045 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.014028072 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.027162075 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.027218103 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.027251005 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.038041115 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.038094044 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.038121939 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.039788961 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.039836884 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.039845943 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.048145056 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.048196077 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.048204899 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.051328897 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.052862883 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.052912951 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.052920103 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.056644917 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.056682110 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.056915998 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.057024956 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.057034969 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.057259083 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.057306051 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.057322025 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.057511091 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.060445070 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.060502052 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.060512066 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.064923048 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.064963102 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.065608025 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.065710068 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.065735102 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.065916061 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.065934896 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.066306114 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.066404104 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.066450119 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.066468954 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.070317984 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.077337027 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.077390909 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.077409029 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.078021049 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.078063011 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.078263998 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.078279972 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.078434944 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.078478098 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.078555107 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.078567982 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.089584112 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.089718103 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.089911938 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.089989901 CET	50054	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.090007067 CET	443	50054	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.091484070 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.091528893 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.091542959 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.104871988 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.104935884 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.104948044 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.114496946 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.114527941 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.114583969 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.115371943 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.115386009 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.116525888 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.116579056 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.116588116 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.119036913 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.119097948 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.120234013 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.120245934 CET	443	50055	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.120254993 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.120294094 CET	50055	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.134186029 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.134265900 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.134288073 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.135481119 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.135541916 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.135550976 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.140281916 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.140330076 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.140340090 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.146553993 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.146627903 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.146667957 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.155119896 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.155141115 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.155172110 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.155209064 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.155245066 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.156537056 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.156591892 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.156656027 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.162431955 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.164158106 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:31.164180040 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.164531946 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.175007105 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:31.175121069 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.175672054 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:31.175719023 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:31.175806046 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:31.175863028 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:31.190285921 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:31.190335989 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:31.190399885 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:31.190751076 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:31.190771103 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:31.193811893 CET	50058	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.193850040 CET	443	50058	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.195146084 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:31.195183992 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:31.195250988 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:31.196237087 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:31.196261883 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:31.196361065 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:31.196546078 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:31.196579933 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:31.196646929 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:31.198709011 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:31.198731899 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:31.204046965 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:31.204061031 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:31.210935116 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:31.210961103 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:31.212230921 CET	50080	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:31.212254047 CET	443	50080	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:31.223340034 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.254440069 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.254472971 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.254523039 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.254976988 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:31.254992008 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:31.304124117 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.306816101 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:31.306857109 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.308336973 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.308417082 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:31.309039116 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:31.309118032 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.309192896 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:31.309205055 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.322015047 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:31.322086096 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:31.322356939 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:31.322617054 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:31.322638035 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:31.333128929 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:31.333172083 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:31.333223104 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:31.333790064 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:31.333827972 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:31.333930016 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:31.334209919 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:31.334227085 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:31.334276915 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:31.334453106 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:31.334470034 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:31.334598064 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:31.334614992 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:31.334753036 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:31.334764004 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:31.358464003 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:31.467910051 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.468177080 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.468209028 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.469590902 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.469655991 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.470087051 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.470170975 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.470309973 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.470319986 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.496604919 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.496675968 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.497447968 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.497519016 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.497704029 CET	443	50068	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.497733116 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.497761965 CET	50068	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.564395905 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:31.564637899 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:31.564665079 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:31.564924002 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.565128088 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:31.565146923 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.565177917 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.565517902 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:31.565597057 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:31.565788984 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:31.566251040 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.566314936 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.566694975 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.566838026 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.566955090 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.567020893 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.607336044 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:31.629841089 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.629925966 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.630141973 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:31.642283916 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.642796040 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.642832041 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.643929958 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.644009113 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.644288063 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.644366026 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.644577026 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.644594908 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.653086901 CET	50089	443	192.168.2.10	104.18.26.193
Dec 10, 2024 14:21:31.653115034 CET	443	50089	104.18.26.193	192.168.2.10
Dec 10, 2024 14:21:31.662651062 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.662703037 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.662974119 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.663193941 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.663208008 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.675327063 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.675375938 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.680721045 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.680741072 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:31.701553106 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.702847004 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.702918053 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.703331947 CET	50075	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.703351974 CET	443	50075	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.703938961 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.703970909 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.704045057 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.704504967 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.704515934 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.708959103 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.709016085 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.709243059 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.709439039 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.709458113 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.725326061 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.725611925 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.725641012 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.725928068 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.726062059 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.726161957 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.726182938 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.726433992 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.726563931 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.726568937 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.726701975 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.726725101 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.726998091 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.727077961 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.727118969 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.742249012 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.742335081 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.742446899 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:31.745592117 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.745862961 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.745873928 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.746299982 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.747138977 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.747205019 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.747472048 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.747637033 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.747656107 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.748162031 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.748167992 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.748414040 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.748437881 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.748547077 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.748882055 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.748955965 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.749264002 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.749459028 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.749521017 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.751955032 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.752033949 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.752357006 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.752371073 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.761054039 CET	50096	443	192.168.2.10	74.119.117.16
Dec 10, 2024 14:21:31.761085987 CET	443	50096	74.119.117.16	192.168.2.10
Dec 10, 2024 14:21:31.766220093 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.771332026 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.781816959 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:31.791328907 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.791332006 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.810338020 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.810420036 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.810497999 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.813230038 CET	50077	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.813247919 CET	443	50077	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.814553976 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.814579010 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.814989090 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.815685034 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.815696001 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.826208115 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.826252937 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.826884031 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.827112913 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.827133894 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.853692055 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.854028940 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.854054928 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.856481075 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.856550932 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.857245922 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.857245922 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.857258081 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.857356071 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:31.924817085 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.924817085 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.929095030 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.929182053 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.929229975 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.935221910 CET	50099	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:31.935256958 CET	443	50099	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:31.985574007 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:31.985595942 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.074157953 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.088402033 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:32.088421106 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.088922024 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.090624094 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:32.090703964 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.094480991 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:32.139328003 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.179028034 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.305645943 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:32.308660030 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:32.308809042 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:32.386255980 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.386317968 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.386388063 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.386420965 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.386460066 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.394635916 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.395854950 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.402955055 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.403029919 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.413408995 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.413568020 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.413628101 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.413680077 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.427165031 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.427319050 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.427887917 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.450139999 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.451122046 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.451236010 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.472786903 CET	50082	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:32.472809076 CET	443	50082	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:32.491389036 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.528445005 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.528739929 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.528852940 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:32.531702042 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.532934904 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.533072948 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.539694071 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:32.539715052 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.540319920 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.545911074 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.547693014 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.547802925 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.555586100 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.556011915 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.556694031 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.556773901 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.556835890 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.556845903 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.557234049 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.557285070 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.562073946 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.562190056 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.564142942 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:32.569436073 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:32.569869995 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:32.570018053 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.572715998 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.572740078 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.573141098 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:32.573169947 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:32.573179007 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.573532104 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:32.574054956 CET	50083	443	192.168.2.10	172.217.19.226
Dec 10, 2024 14:21:32.574078083 CET	443	50083	172.217.19.226	192.168.2.10
Dec 10, 2024 14:21:32.579677105 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:32.579693079 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:32.580045938 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:32.580745935 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.580832005 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.582010984 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:32.582082987 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:32.585701942 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:32.585793018 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:32.585832119 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:32.587920904 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.587966919 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.588031054 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:32.588409901 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:32.592562914 CET	50088	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.592595100 CET	443	50088	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.593377113 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.593419075 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.593485117 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.601906061 CET	50094	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.601926088 CET	443	50094	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.602303982 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.602334976 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.602529049 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.603657007 CET	50091	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.603673935 CET	443	50091	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.604098082 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.604135036 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.604228020 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.604993105 CET	50102	443	192.168.2.10	35.244.159.8
Dec 10, 2024 14:21:32.605000019 CET	443	50102	35.244.159.8	192.168.2.10
Dec 10, 2024 14:21:32.606518030 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.606549025 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.608699083 CET	50095	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.608725071 CET	443	50095	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.609750032 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.609764099 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.610547066 CET	50093	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.610558987 CET	443	50093	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.611985922 CET	50092	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.612011909 CET	443	50092	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.612886906 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.612905025 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.631329060 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:32.631334066 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.635329962 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:32.655986071 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.657514095 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.657658100 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.658674002 CET	50097	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.658698082 CET	443	50097	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.659339905 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.659390926 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.659468889 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.659861088 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.659877062 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.679136038 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.691035986 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.691066027 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.692393064 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.692457914 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.702181101 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.702375889 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.702747107 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:32.702781916 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.702797890 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.703488111 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:32.703507900 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:32.704664946 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:32.704757929 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:32.705972910 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:32.706069946 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:32.706124067 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:32.744302034 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.744358063 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.744426966 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.744657993 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.744673967 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.745187998 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.745446920 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.745460033 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.745810032 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.746268988 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.746368885 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.746413946 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.746431112 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.750221968 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.750264883 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.750344992 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.750801086 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.750813961 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.751333952 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:32.765006065 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:32.765036106 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:32.786499023 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.786555052 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.786657095 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.786907911 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:32.786926031 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:32.804945946 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.805471897 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.805505037 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.806678057 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.806739092 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.807136059 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.807210922 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.807292938 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.851330996 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.879272938 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:32.879492998 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:32.879522085 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:32.880662918 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:32.880726099 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:32.881850958 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:32.881927013 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:32.881979942 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:32.882098913 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:32.882112026 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:32.882260084 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:32.882282019 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:32.882750988 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:32.883091927 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:32.883208036 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:32.883224964 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:32.890439034 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.890539885 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.890551090 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.890552998 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.893564939 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:32.893605947 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:32.893893003 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:32.894160986 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:32.894172907 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:32.927339077 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:32.943877935 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.944216013 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.944231987 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.944574118 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.945283890 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.945353985 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.945839882 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:32.945862055 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:32.959485054 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.959561110 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.959673882 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:32.960329056 CET	50110	443	192.168.2.10	35.208.249.213
Dec 10, 2024 14:21:32.960361958 CET	443	50110	35.208.249.213	192.168.2.10
Dec 10, 2024 14:21:32.964843035 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:32.964947939 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:32.976504087 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:32.976808071 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:32.976840973 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:32.978034019 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:32.978097916 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:32.978490114 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:32.978588104 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:32.978655100 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:32.978665113 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:33.011498928 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.011765957 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.011801004 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.012903929 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.012984991 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.013510942 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.013612986 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.013757944 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.013772964 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.050406933 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.051609993 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:33.051629066 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.052859068 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.052936077 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:33.058962107 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:33.059079885 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.062455893 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:33.062473059 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.076895952 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:33.076917887 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.076931953 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.079624891 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:33.079709053 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:33.079802990 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:33.080418110 CET	50108	443	192.168.2.10	188.166.17.21
Dec 10, 2024 14:21:33.080435991 CET	443	50108	188.166.17.21	192.168.2.10
Dec 10, 2024 14:21:33.085731030 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:33.085813999 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:33.085891962 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:33.086397886 CET	50109	443	192.168.2.10	52.19.235.127
Dec 10, 2024 14:21:33.086416960 CET	443	50109	52.19.235.127	192.168.2.10
Dec 10, 2024 14:21:33.126415968 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:33.126470089 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:33.126837969 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:33.127370119 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:33.127383947 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:33.128426075 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:33.128470898 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:33.128669977 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:33.129998922 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:33.130011082 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:33.157342911 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:33.157401085 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:33.202662945 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:33.202739000 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:33.202858925 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:33.203416109 CET	50119	443	192.168.2.10	18.233.180.144
Dec 10, 2024 14:21:33.203439951 CET	443	50119	18.233.180.144	192.168.2.10
Dec 10, 2024 14:21:33.207288027 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:33.207365990 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:33.207448959 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:33.208369017 CET	50121	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:33.208378077 CET	443	50121	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:33.208978891 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:33.209024906 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:33.209096909 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:33.209326029 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:33.209342957 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:33.334786892 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:33.334875107 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:33.334920883 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:33.336368084 CET	50127	443	192.168.2.10	104.18.27.193
Dec 10, 2024 14:21:33.336405993 CET	443	50127	104.18.27.193	192.168.2.10
Dec 10, 2024 14:21:33.395176888 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.395839930 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.395852089 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.396208048 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.396747112 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.396811008 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.396835089 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.399173975 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.399386883 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.399405956 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.399921894 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.400490046 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.400557995 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.400746107 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.400799036 CET	443	50103	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.400846958 CET	50103	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.401746035 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.401830912 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.402189970 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.402200937 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.439321995 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.489219904 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.489543915 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.489588976 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.489646912 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.489670038 CET	443	50104	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.489682913 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.489713907 CET	50104	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.510641098 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.510935068 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.510950089 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.511276007 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.513122082 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.513122082 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.513137102 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.513186932 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.516156912 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.516813993 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.516844034 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.517220974 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.517586946 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.517664909 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.517819881 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.523020029 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:33.523092985 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:33.523143053 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:33.524621010 CET	50107	443	192.168.2.10	37.252.172.123
Dec 10, 2024 14:21:33.524643898 CET	443	50107	37.252.172.123	192.168.2.10
Dec 10, 2024 14:21:33.532346010 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.532356977 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.563334942 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:33.591500044 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.592629910 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.592684984 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.592844963 CET	443	50105	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.592866898 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.592931986 CET	50105	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.607543945 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.608091116 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.608143091 CET	443	50106	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.608189106 CET	50106	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.656373978 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:33.698383093 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.698422909 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.698451996 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.698468924 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.698476076 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.698513031 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.698542118 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.706703901 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.706754923 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.706763029 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.714183092 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.714334965 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.714396000 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:33.714946032 CET	50120	443	192.168.2.10	18.165.220.26
Dec 10, 2024 14:21:33.714965105 CET	443	50120	18.165.220.26	192.168.2.10
Dec 10, 2024 14:21:33.720753908 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.720807076 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.720818043 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.730354071 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.730417967 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.730427027 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.789690018 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.807672024 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.807718992 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.807750940 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.807763100 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.807775974 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.807806015 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.807826996 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.817492008 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.821120024 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.821173906 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.821188927 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.821197987 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.821228981 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.825793982 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.884846926 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.884898901 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.884929895 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.892515898 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.892565966 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.892592907 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.904098034 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.904154062 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.904186010 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.912825108 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.912874937 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.912904978 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.922523975 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.922574043 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.922605991 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.927433014 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.927496910 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.927525043 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.931504965 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.931557894 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.931588888 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:33.935875893 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.935937881 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.935962915 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.945832014 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.945879936 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.945908070 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.959325075 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.959377050 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.959405899 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.972439051 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.972501993 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.972520113 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.984791994 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.984869957 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:33.984905958 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:33.985652924 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:33.993762016 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.003791094 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.003838062 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.003865957 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.004239082 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.004292965 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.004322052 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.010360956 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.010422945 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.010453939 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.012861013 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.012912035 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.012937069 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.022157907 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.022216082 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.022243977 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.023087025 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.023139000 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.023175001 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.031327963 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.031377077 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.031399012 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.044863939 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.044904947 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.044930935 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.056221962 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.056279898 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.056307077 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.070394993 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.070460081 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.070477009 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.094589949 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.094647884 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.094666004 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.094765902 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.094831944 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.094856024 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.096673965 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.096715927 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.096725941 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.098429918 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.098470926 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.098489046 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.101114988 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.101162910 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.101171970 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.106408119 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.106463909 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.106492043 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.108016968 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.108612061 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.108668089 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.108679056 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.113306999 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.113353968 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.113363028 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.113487959 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.113567114 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.115180016 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:34.115206957 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.116401911 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.116471052 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:34.116838932 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:34.116913080 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.116975069 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:34.116988897 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.119407892 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.119460106 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.119476080 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.131531000 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.131577969 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.131593943 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.147651911 CET	50117	443	192.168.2.10	172.217.17.66
Dec 10, 2024 14:21:34.147691011 CET	443	50117	172.217.17.66	192.168.2.10
Dec 10, 2024 14:21:34.170614004 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:34.186577082 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.201127052 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.203295946 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.203347921 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.203363895 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.207633018 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.207679033 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.207695007 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.210897923 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.211817026 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.212069988 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.212131977 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.212842941 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.212893963 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.213998079 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.214063883 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.214073896 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.218480110 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.218509912 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.218527079 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.218534946 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.218589067 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.223866940 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.234525919 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.234555006 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.234611988 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.234622955 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.234664917 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.245156050 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.245254993 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.245332956 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.245342016 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.250256062 CET	50128	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.250281096 CET	443	50128	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.251002073 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.251040936 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.251173019 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.253598928 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.253614902 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.255860090 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.255940914 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.255950928 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.266529083 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.266587973 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.266612053 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.277009010 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.277076960 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.277105093 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.287890911 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.288027048 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.288038969 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.298234940 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.298297882 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.298305035 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.299813986 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.302556992 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.302586079 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.303133011 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.304609060 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.304733992 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.306212902 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.306632042 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.306792974 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.307225943 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.307250023 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.307347059 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.307382107 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.307740927 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.307759047 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.307794094 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.307801008 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.308204889 CET	50129	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.308223009 CET	443	50129	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.308469057 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.308538914 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.308746099 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.308798075 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.309111118 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.309176922 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.310242891 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.310327053 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.310580015 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.310647011 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.310655117 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.314007998 CET	50114	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.314026117 CET	443	50114	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.315752983 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.317445040 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.317550898 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.320342064 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.321767092 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.321912050 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.347194910 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.347239971 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.347371101 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.347645044 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:34.347656965 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:34.347721100 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:34.349258900 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.349284887 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.349415064 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:34.349423885 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:34.350326061 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.350884914 CET	50130	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.350895882 CET	443	50130	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.351306915 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.351351976 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.351356030 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.351586103 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.352138996 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.352166891 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.352616072 CET	50131	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.352632046 CET	443	50131	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.355329990 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.369138956 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.422761917 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.428539038 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.428560019 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.429846048 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.429863930 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.429917097 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.430521965 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.430615902 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.431004047 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.431020021 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.436680079 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.440141916 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.440157890 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.440607071 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.441602945 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.441694975 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.449974060 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.454248905 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.454991102 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.455014944 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.456156015 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.456240892 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.457493067 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.457567930 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.458053112 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.458070040 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.478135109 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.484666109 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:34.484725952 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:34.485116005 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:34.487215042 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:34.487242937 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:34.492250919 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.492645979 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.492669106 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.493741035 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.493823051 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.496093035 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.496170044 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.496575117 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.496583939 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.499331951 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.502166033 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.548993111 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.549249887 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.549374104 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.549521923 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:34.565402985 CET	50149	443	192.168.2.10	34.98.64.218
Dec 10, 2024 14:21:34.565434933 CET	443	50149	34.98.64.218	192.168.2.10
Dec 10, 2024 14:21:34.579981089 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:34.580241919 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:34.580275059 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:34.580657005 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:34.581248999 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:34.581387043 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:34.581404924 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:34.627334118 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:34.630942106 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:34.751944065 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.751986980 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.752054930 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.752449989 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.752466917 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.755126953 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.755171061 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.755310059 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.755848885 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:34.755865097 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:34.756388903 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.756419897 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.756552935 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.756768942 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:34.756782055 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:34.814872980 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.819128036 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.855858088 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.871515036 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.884206057 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.884232044 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.884351969 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.884377003 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.884901047 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.884915113 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.885291100 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.885380983 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.885663033 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.885742903 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.885907888 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.885977983 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:34.927335978 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:34.927336931 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.090667009 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:35.090760946 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:35.090823889 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:35.101294041 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.103466988 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.106007099 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.110266924 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.112757921 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.113626003 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.113689899 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.114021063 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.114083052 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.176007986 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.177680016 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.177732944 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.241497040 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.243189096 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.243242979 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.258956909 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.261934996 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.261993885 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.292464018 CET	50152	443	192.168.2.10	185.184.8.90
Dec 10, 2024 14:21:35.292484045 CET	443	50152	185.184.8.90	192.168.2.10
Dec 10, 2024 14:21:35.297174931 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.299129009 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.299177885 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.326744080 CET	50145	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.326766968 CET	443	50145	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.328361988 CET	50142	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.328367949 CET	443	50142	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.328929901 CET	50179	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.328967094 CET	443	50179	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.329020977 CET	50179	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.330336094 CET	50139	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.330352068 CET	443	50139	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.330780983 CET	50180	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.330816031 CET	443	50180	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.330863953 CET	50180	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.331214905 CET	50138	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.331248045 CET	443	50138	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.331470966 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.331484079 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.331532001 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.331847906 CET	50133	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.331873894 CET	443	50133	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.332163095 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.332181931 CET	443	50182	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.332226038 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.332592964 CET	50146	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.332607031 CET	443	50146	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.333247900 CET	50179	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.333287001 CET	443	50179	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.333513021 CET	50180	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.333534002 CET	443	50180	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.333729029 CET	50147	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.333743095 CET	443	50147	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.334573984 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.334583998 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.335124969 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.335144043 CET	443	50182	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.448889017 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.448928118 CET	443	50183	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.448992014 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.449187040 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.449198008 CET	443	50183	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.450833082 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.450865030 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.450941086 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.451121092 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.451138973 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.452866077 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.452898979 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.452950001 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.453963995 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.453979015 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.456197977 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.456211090 CET	443	50186	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.456274986 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.456512928 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:35.456527948 CET	443	50186	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:35.629559040 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.629693985 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.629743099 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:35.630285978 CET	50150	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:35.630304098 CET	443	50150	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.631901026 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.631978989 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.632074118 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:35.632714987 CET	50151	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:35.632735014 CET	443	50151	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.634322882 CET	50190	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:35.634346962 CET	443	50190	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:35.634394884 CET	50190	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:35.634649038 CET	50190	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:35.634660006 CET	443	50190	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:36.158390045 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.158776999 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.158790112 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.159254074 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.161068916 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.161175013 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.162878036 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.163204908 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.163264990 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.164232016 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.164238930 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.164506912 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.164516926 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.164817095 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.164874077 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.165334940 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.165388107 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.165505886 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.165533066 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.165827990 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.165904045 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.166168928 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.166256905 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.166843891 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.167124987 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.167810917 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.167872906 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.167895079 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.168356895 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.168369055 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.168543100 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.168553114 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.169380903 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.169431925 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.169534922 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.170510054 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.170557022 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.170644999 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.170653105 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.207328081 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.215328932 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.215333939 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.219280958 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.219858885 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.455774069 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.456054926 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.456072092 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.456429958 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.456876993 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.456965923 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.457427979 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.457977057 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.458159924 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.458172083 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.459222078 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.459301949 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.459757090 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.459849119 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.460052013 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.460063934 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.462893963 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.463268995 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.463299990 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.464127064 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.464987040 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.465112925 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.465135098 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.500958920 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.500958920 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.500977039 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.511336088 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.516603947 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.753036976 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.753057957 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.753077030 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.753083944 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.753097057 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.753104925 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.753135920 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.753160000 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.753175974 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.753205061 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.875283003 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.875338078 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.875365973 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.875391960 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.875437975 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.919984102 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.920023918 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.920062065 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.920068979 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.920094013 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.932096958 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.932161093 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.932892084 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.932924032 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.933077097 CET	443	50163	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.933120012 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.933134079 CET	50163	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.939739943 CET	50196	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.939774036 CET	443	50196	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.939903021 CET	50196	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.940165043 CET	50196	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:36.940181017 CET	443	50196	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:36.961728096 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.961750984 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.961776972 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.961791992 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.961806059 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.961815119 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:36.961854935 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:36.963995934 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.964162111 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.964359045 CET	50160	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.964373112 CET	443	50160	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.964750051 CET	50197	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.964767933 CET	443	50197	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.965128899 CET	50197	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.965466022 CET	50197	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.965476990 CET	443	50197	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.972094059 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.972152948 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.972212076 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.972472906 CET	50166	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.972481966 CET	443	50166	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.972734928 CET	50198	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.972773075 CET	443	50198	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.972825050 CET	50198	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.973596096 CET	50198	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:36.973606110 CET	443	50198	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:36.979499102 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.979541063 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.979578018 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.979612112 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.979623079 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.979643106 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.979850054 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.987772942 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:36.988183975 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:36.988192081 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:37.002986908 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:37.003047943 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:37.003063917 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:37.011943102 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:37.012301922 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:37.012314081 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:37.020044088 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:37.020306110 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:37.020814896 CET	50164	443	192.168.2.10	172.217.19.230
Dec 10, 2024 14:21:37.020831108 CET	443	50164	172.217.19.230	192.168.2.10
Dec 10, 2024 14:21:37.024308920 CET	50201	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.024338961 CET	443	50201	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.024449110 CET	50201	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.024848938 CET	50201	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.024857998 CET	443	50201	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.029793024 CET	50202	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.029819965 CET	443	50202	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.029872894 CET	50202	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.030786037 CET	50202	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.030797005 CET	443	50202	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.033741951 CET	443	50179	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.034077883 CET	50179	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.034107924 CET	443	50179	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.034467936 CET	443	50179	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.034764051 CET	50179	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.034862041 CET	443	50179	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.034879923 CET	50179	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.036827087 CET	443	50182	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.037046909 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.037053108 CET	443	50182	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.037760973 CET	443	50180	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.037966013 CET	50180	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.037975073 CET	443	50180	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.038328886 CET	443	50182	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.038338900 CET	443	50180	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.038393021 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.038455963 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.038700104 CET	50180	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.038769960 CET	443	50180	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.039006948 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.039067030 CET	443	50182	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.039138079 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.039145947 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.039278984 CET	50180	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.039350033 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.039354086 CET	443	50182	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.040344000 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.040417910 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.040754080 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.040827990 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.040874958 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.057436943 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:37.057514906 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:37.057517052 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:37.057580948 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:37.058146954 CET	50168	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:37.058160067 CET	443	50168	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:37.077816010 CET	50179	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.077835083 CET	443	50179	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.081906080 CET	50203	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.081947088 CET	443	50203	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.082031965 CET	50203	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.082334995 CET	50203	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.082345963 CET	443	50203	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.083326101 CET	443	50180	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.087322950 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.093790054 CET	50182	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.094237089 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.094245911 CET	443	50181	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.136501074 CET	443	50183	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.136905909 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.136919022 CET	443	50183	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.137943029 CET	443	50183	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.137995958 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.138633966 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.138685942 CET	443	50183	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.138801098 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.141788006 CET	50181	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.142807961 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.143016100 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.143029928 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.144074917 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.144153118 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.144284964 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.144530058 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.144577980 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.144584894 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.144661903 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.144675016 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.145159960 CET	443	50186	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.145333052 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.145344019 CET	443	50186	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.145751953 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.145849943 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.146209002 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.146209002 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.146224022 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.146265984 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.146373987 CET	443	50186	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.146502972 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.146809101 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.146869898 CET	443	50186	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.146966934 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.146974087 CET	443	50186	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.181957960 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.181968927 CET	443	50183	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.191324949 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.197968960 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.197969913 CET	50186	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.197979927 CET	443	50184	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.197987080 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.197994947 CET	443	50185	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.203829050 CET	50205	443	192.168.2.10	13.226.2.71
Dec 10, 2024 14:21:37.203869104 CET	443	50205	13.226.2.71	192.168.2.10
Dec 10, 2024 14:21:37.204005957 CET	50205	443	192.168.2.10	13.226.2.71
Dec 10, 2024 14:21:37.205471039 CET	50205	443	192.168.2.10	13.226.2.71
Dec 10, 2024 14:21:37.205487013 CET	443	50205	13.226.2.71	192.168.2.10
Dec 10, 2024 14:21:37.228948116 CET	50183	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.244971991 CET	50184	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.244976044 CET	50185	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.263189077 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.263859987 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.263937950 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.263978958 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.264743090 CET	50172	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.264754057 CET	443	50172	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.265244961 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.265254021 CET	50206	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.265285015 CET	443	50206	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.265307903 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.265341043 CET	50206	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.265954018 CET	50206	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.265964031 CET	443	50206	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.267046928 CET	50170	443	192.168.2.10	172.217.17.34
Dec 10, 2024 14:21:37.267056942 CET	443	50170	172.217.17.34	192.168.2.10
Dec 10, 2024 14:21:37.272588968 CET	50207	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:37.272620916 CET	443	50207	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:37.272691011 CET	50207	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:37.272865057 CET	50207	443	192.168.2.10	54.72.141.208
Dec 10, 2024 14:21:37.272877932 CET	443	50207	54.72.141.208	192.168.2.10
Dec 10, 2024 14:21:37.318348885 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.318423986 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.318456888 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.318468094 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.318500042 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.318542004 CET	50171	443	192.168.2.10	172.217.17.70
Dec 10, 2024 14:21:37.318547964 CET	443	50171	172.217.17.70	192.168.2.10
Dec 10, 2024 14:21:37.325052977 CET	443	50190	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:37.325316906 CET	50190	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:37.325333118 CET	443	50190	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:37.325706005 CET	443	50190	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:37.326005936 CET	50190	443	192.168.2.10	142.250.181.14
Dec 10, 2024 14:21:37.326061964 CET	443	50190	142.250.181.14	192.168.2.10
Dec 10, 2024 14:21:37.326193094 CET	50190	443	192.168.2.10	142.250.181.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 10, 2024 14:20:57.687916994 CET	192.168.2.10	1.1.1.1	0xdbed	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:20:57.688163996 CET	192.168.2.10	1.1.1.1	0x7cc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 14:20:59.100888968 CET	192.168.2.10	1.1.1.1	0x8f90	Standard query (0)	t.ly	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:20:59.101429939 CET	192.168.2.10	1.1.1.1	0x5d4b	Standard query (0)	t.ly	65	IN (0x0001)	false
Dec 10, 2024 14:21:03.670542955 CET	192.168.2.10	1.1.1.1	0x3c15	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.670706034 CET	192.168.2.10	1.1.1.1	0x17b8	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:03.671909094 CET	192.168.2.10	1.1.1.1	0x496a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.672466040 CET	192.168.2.10	1.1.1.1	0x534a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:03.677084923 CET	192.168.2.10	1.1.1.1	0x770f	Standard query (0)	t.ly	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.677567005 CET	192.168.2.10	1.1.1.1	0xe95	Standard query (0)	t.ly	65	IN (0x0001)	false
Dec 10, 2024 14:21:04.722719908 CET	192.168.2.10	1.1.1.1	0x2a58	Standard query (0)	r.wdfl.co	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:04.723249912 CET	192.168.2.10	1.1.1.1	0xcb8	Standard query (0)	r.wdfl.co	65	IN (0x0001)	false
Dec 10, 2024 14:21:05.772151947 CET	192.168.2.10	1.1.1.1	0x2c1b	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:05.772303104 CET	192.168.2.10	1.1.1.1	0xbda	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:07.160816908 CET	192.168.2.10	1.1.1.1	0x3fb0	Standard query (0)	r.wdfl.co	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.161001921 CET	192.168.2.10	1.1.1.1	0xf5ec	Standard query (0)	r.wdfl.co	65	IN (0x0001)	false
Dec 10, 2024 14:21:07.496671915 CET	192.168.2.10	1.1.1.1	0xe798	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.496865988 CET	192.168.2.10	1.1.1.1	0xc9b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:08.333554029 CET	192.168.2.10	1.1.1.1	0x34a0	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:08.333823919 CET	192.168.2.10	1.1.1.1	0xc5a	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:14.166305065 CET	192.168.2.10	1.1.1.1	0xb41a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.166449070 CET	192.168.2.10	1.1.1.1	0x37a4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:14.246179104 CET	192.168.2.10	1.1.1.1	0xda90	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.246321917 CET	192.168.2.10	1.1.1.1	0x9829	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:14.273910999 CET	192.168.2.10	1.1.1.1	0xebdf	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.274072886 CET	192.168.2.10	1.1.1.1	0xe1e0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:14.306030989 CET	192.168.2.10	1.1.1.1	0x278f	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.306241035 CET	192.168.2.10	1.1.1.1	0x8a99	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Dec 10, 2024 14:21:16.840035915 CET	192.168.2.10	1.1.1.1	0x618d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:16.840286970 CET	192.168.2.10	1.1.1.1	0x2fe5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:17.211334944 CET	192.168.2.10	1.1.1.1	0x5649	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:17.211471081 CET	192.168.2.10	1.1.1.1	0xbc44	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Dec 10, 2024 14:21:17.213985920 CET	192.168.2.10	1.1.1.1	0x6228	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:17.214164972 CET	192.168.2.10	1.1.1.1	0x1a98	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Dec 10, 2024 14:21:17.692087889 CET	192.168.2.10	1.1.1.1	0xacd	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:17.692372084 CET	192.168.2.10	1.1.1.1	0x6be0	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:18.442831993 CET	192.168.2.10	1.1.1.1	0xdc5c	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:18.443221092 CET	192.168.2.10	1.1.1.1	0xd139	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.106772900 CET	192.168.2.10	1.1.1.1	0xd2df	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.107207060 CET	192.168.2.10	1.1.1.1	0x61ff	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.119817972 CET	192.168.2.10	1.1.1.1	0x564d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.120443106 CET	192.168.2.10	1.1.1.1	0xce5e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.168190956 CET	192.168.2.10	1.1.1.1	0x4cd6	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.168340921 CET	192.168.2.10	1.1.1.1	0xca8f	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.579541922 CET	192.168.2.10	1.1.1.1	0x1443	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.579875946 CET	192.168.2.10	1.1.1.1	0x8f5e	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.581922054 CET	192.168.2.10	1.1.1.1	0x561c	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.582257986 CET	192.168.2.10	1.1.1.1	0x289c	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.584516048 CET	192.168.2.10	1.1.1.1	0x44d3	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.584516048 CET	192.168.2.10	1.1.1.1	0x91c4	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.585246086 CET	192.168.2.10	1.1.1.1	0x11b1	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.585659981 CET	192.168.2.10	1.1.1.1	0x152c	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.586589098 CET	192.168.2.10	1.1.1.1	0x9c9a	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.587646961 CET	192.168.2.10	1.1.1.1	0x5d11	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.588138103 CET	192.168.2.10	1.1.1.1	0x8b75	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.588398933 CET	192.168.2.10	1.1.1.1	0x3497	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.588751078 CET	192.168.2.10	1.1.1.1	0x4622	Standard query (0)	gtrace.mediago.io	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.589164972 CET	192.168.2.10	1.1.1.1	0x2093	Standard query (0)	gtrace.mediago.io	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.595144987 CET	192.168.2.10	1.1.1.1	0xa091	Standard query (0)	analytics.pangle-ads.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.595329046 CET	192.168.2.10	1.1.1.1	0x52e	Standard query (0)	analytics.pangle-ads.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:20.596903086 CET	192.168.2.10	1.1.1.1	0x3184	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.597217083 CET	192.168.2.10	1.1.1.1	0x9c2	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.369692087 CET	192.168.2.10	1.1.1.1	0x2ab7	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.369920969 CET	192.168.2.10	1.1.1.1	0x52f6	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.415071011 CET	192.168.2.10	1.1.1.1	0xc356	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.415251017 CET	192.168.2.10	1.1.1.1	0x1a12	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.415822983 CET	192.168.2.10	1.1.1.1	0x4bca	Standard query (0)	ads.travelaudience.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.416028976 CET	192.168.2.10	1.1.1.1	0xf2ef	Standard query (0)	ads.travelaudience.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.416479111 CET	192.168.2.10	1.1.1.1	0x532c	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.416626930 CET	192.168.2.10	1.1.1.1	0x1e82	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.416955948 CET	192.168.2.10	1.1.1.1	0x92e1	Standard query (0)	dsp.adkernel.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.417083979 CET	192.168.2.10	1.1.1.1	0x8033	Standard query (0)	dsp.adkernel.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.417543888 CET	192.168.2.10	1.1.1.1	0xf469	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.417725086 CET	192.168.2.10	1.1.1.1	0x776a	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.418184042 CET	192.168.2.10	1.1.1.1	0x10fb	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.418291092 CET	192.168.2.10	1.1.1.1	0x66cb	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.418697119 CET	192.168.2.10	1.1.1.1	0xf23a	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.419056892 CET	192.168.2.10	1.1.1.1	0xc300	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Dec 10, 2024 14:21:22.543277979 CET	192.168.2.10	1.1.1.1	0x6a40	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.543540001 CET	192.168.2.10	1.1.1.1	0x7596	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:24.547358990 CET	192.168.2.10	1.1.1.1	0x8fa8	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:24.547544956 CET	192.168.2.10	1.1.1.1	0xaada	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:24.907197952 CET	192.168.2.10	1.1.1.1	0x8ff6	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:24.907334089 CET	192.168.2.10	1.1.1.1	0x3f0	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:24.909074068 CET	192.168.2.10	1.1.1.1	0x1c81	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:24.909302950 CET	192.168.2.10	1.1.1.1	0x903f	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:25.174221039 CET	192.168.2.10	1.1.1.1	0x9bdf	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.174319029 CET	192.168.2.10	1.1.1.1	0xdad6	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:25.221055031 CET	192.168.2.10	1.1.1.1	0x4a76	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.221160889 CET	192.168.2.10	1.1.1.1	0x9229	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:25.558923960 CET	192.168.2.10	1.1.1.1	0x1501	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.559087992 CET	192.168.2.10	1.1.1.1	0x1f94	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:25.631956100 CET	192.168.2.10	1.1.1.1	0x63f4	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.632015944 CET	192.168.2.10	1.1.1.1	0x2f8	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:25.632323980 CET	192.168.2.10	1.1.1.1	0x7099	Standard query (0)	gcm.ctnsnet.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.632507086 CET	192.168.2.10	1.1.1.1	0x64f4	Standard query (0)	gcm.ctnsnet.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:25.636986971 CET	192.168.2.10	1.1.1.1	0x5f9	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.637228012 CET	192.168.2.10	1.1.1.1	0x66c4	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:25.637520075 CET	192.168.2.10	1.1.1.1	0xd894	Standard query (0)	gtracenep.admaster.cc	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.637743950 CET	192.168.2.10	1.1.1.1	0x8e7f	Standard query (0)	gtracenep.admaster.cc	65	IN (0x0001)	false
Dec 10, 2024 14:21:27.624037981 CET	192.168.2.10	1.1.1.1	0xf0e6	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:27.624234915 CET	192.168.2.10	1.1.1.1	0xdd44	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:27.714533091 CET	192.168.2.10	1.1.1.1	0xfab8	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:27.714787006 CET	192.168.2.10	1.1.1.1	0x635a	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:28.262897968 CET	192.168.2.10	1.1.1.1	0x3963	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:28.263345003 CET	192.168.2.10	1.1.1.1	0x358c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:28.274801970 CET	192.168.2.10	1.1.1.1	0xa016	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:28.274965048 CET	192.168.2.10	1.1.1.1	0xb936	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:28.827183008 CET	192.168.2.10	1.1.1.1	0x5c7d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:28.827831984 CET	192.168.2.10	1.1.1.1	0x98ec	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:29.940227032 CET	192.168.2.10	1.1.1.1	0xd257	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:29.940267086 CET	192.168.2.10	1.1.1.1	0x7143	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:30.119801998 CET	192.168.2.10	1.1.1.1	0xe3b6	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:30.120075941 CET	192.168.2.10	1.1.1.1	0xec93	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:30.851075888 CET	192.168.2.10	1.1.1.1	0x9d94	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:30.851277113 CET	192.168.2.10	1.1.1.1	0x6f27	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:30.971710920 CET	192.168.2.10	1.1.1.1	0x7c61	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:30.971889019 CET	192.168.2.10	1.1.1.1	0x8784	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:31.052504063 CET	192.168.2.10	1.1.1.1	0x3857	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.052738905 CET	192.168.2.10	1.1.1.1	0x24e4	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:31.193469048 CET	192.168.2.10	1.1.1.1	0x1919	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.193599939 CET	192.168.2.10	1.1.1.1	0xdb0f	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:31.194586992 CET	192.168.2.10	1.1.1.1	0xa6d8	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.194719076 CET	192.168.2.10	1.1.1.1	0x9f9	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:31.195576906 CET	192.168.2.10	1.1.1.1	0xe132	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.195844889 CET	192.168.2.10	1.1.1.1	0x66ee	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:31.346141100 CET	192.168.2.10	1.1.1.1	0x92e7	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.346318007 CET	192.168.2.10	1.1.1.1	0xbd89	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Dec 10, 2024 14:21:31.501238108 CET	192.168.2.10	1.1.1.1	0x5875	Standard query (0)	tpt.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.501487970 CET	192.168.2.10	1.1.1.1	0xdf31	Standard query (0)	tpt.dotomi.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:31.759941101 CET	192.168.2.10	1.1.1.1	0x78f6	Standard query (0)	tpt.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.760091066 CET	192.168.2.10	1.1.1.1	0xf4e4	Standard query (0)	tpt.dotomi.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:32.751512051 CET	192.168.2.10	1.1.1.1	0x6a2a	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:32.751744986 CET	192.168.2.10	1.1.1.1	0x9edd	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:33.752053022 CET	192.168.2.10	1.1.1.1	0x1471	Standard query (0)	tpt.mediaplex.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:33.752218962 CET	192.168.2.10	1.1.1.1	0x9e79	Standard query (0)	tpt.mediaplex.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:34.345191002 CET	192.168.2.10	1.1.1.1	0xfb41	Standard query (0)	fw.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.345607996 CET	192.168.2.10	1.1.1.1	0x9901	Standard query (0)	fw.adsafeprotected.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:36.163676977 CET	192.168.2.10	1.1.1.1	0x8c9	Standard query (0)	www.jared.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:36.163834095 CET	192.168.2.10	1.1.1.1	0x2d30	Standard query (0)	www.jared.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:36.517096043 CET	192.168.2.10	1.1.1.1	0x189	Standard query (0)	www.jared.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:36.517272949 CET	192.168.2.10	1.1.1.1	0x7979	Standard query (0)	www.jared.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:36.935698032 CET	192.168.2.10	1.1.1.1	0x9c1	Standard query (0)	tpt.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:36.936008930 CET	192.168.2.10	1.1.1.1	0x610f	Standard query (0)	tpt.dotomi.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:36.939208031 CET	192.168.2.10	1.1.1.1	0x9e48	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:36.939471960 CET	192.168.2.10	1.1.1.1	0xf5ac	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:37.065258026 CET	192.168.2.10	1.1.1.1	0xa30f	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.065589905 CET	192.168.2.10	1.1.1.1	0x701f	Standard query (0)	static.adsafeprotected.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:37.133384943 CET	192.168.2.10	1.1.1.1	0x7fde	Standard query (0)	fw.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.133939981 CET	192.168.2.10	1.1.1.1	0xa7fb	Standard query (0)	fw.adsafeprotected.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:38.959916115 CET	192.168.2.10	1.1.1.1	0xd775	Standard query (0)	tpt.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:38.960055113 CET	192.168.2.10	1.1.1.1	0xa389	Standard query (0)	tpt.dotomi.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:39.510111094 CET	192.168.2.10	1.1.1.1	0xe7d3	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:39.510421991 CET	192.168.2.10	1.1.1.1	0xdd54	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 14:21:40.152642012 CET	192.168.2.10	1.1.1.1	0x1119	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.153237104 CET	192.168.2.10	1.1.1.1	0xe1f6	Standard query (0)	static.adsafeprotected.com	65	IN (0x0001)	false
Dec 10, 2024 14:21:40.558087111 CET	192.168.2.10	1.1.1.1	0xfdb5	Standard query (0)	dt.adsafeprotected.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.558361053 CET	192.168.2.10	1.1.1.1	0xb4aa	Standard query (0)	dt.adsafeprotected.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 10, 2024 14:20:46.466825962 CET	1.1.1.1	192.168.2.10	0xf495	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:20:46.466825962 CET	1.1.1.1	192.168.2.10	0xf495	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:20:57.824949026 CET	1.1.1.1	192.168.2.10	0x7cc	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 14:20:57.825331926 CET	1.1.1.1	192.168.2.10	0xdbed	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:20:59.240427971 CET	1.1.1.1	192.168.2.10	0x8f90	No error (0)	t.ly		104.20.7.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:20:59.240427971 CET	1.1.1.1	192.168.2.10	0x8f90	No error (0)	t.ly		104.20.6.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:20:59.241734028 CET	1.1.1.1	192.168.2.10	0x5d4b	No error (0)	t.ly			65	IN (0x0001)	false
Dec 10, 2024 14:21:03.807842016 CET	1.1.1.1	192.168.2.10	0x17b8	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:03.808779955 CET	1.1.1.1	192.168.2.10	0x496a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.808779955 CET	1.1.1.1	192.168.2.10	0x496a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.808842897 CET	1.1.1.1	192.168.2.10	0x3c15	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.808842897 CET	1.1.1.1	192.168.2.10	0x3c15	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.809406042 CET	1.1.1.1	192.168.2.10	0x534a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:03.814248085 CET	1.1.1.1	192.168.2.10	0x770f	No error (0)	t.ly		104.20.6.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.814248085 CET	1.1.1.1	192.168.2.10	0x770f	No error (0)	t.ly		104.20.7.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:03.815449953 CET	1.1.1.1	192.168.2.10	0xe95	No error (0)	t.ly			65	IN (0x0001)	false
Dec 10, 2024 14:21:04.862118006 CET	1.1.1.1	192.168.2.10	0x2a58	No error (0)	r.wdfl.co	d2qumtq956sbet.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:04.862118006 CET	1.1.1.1	192.168.2.10	0x2a58	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.40	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:04.862118006 CET	1.1.1.1	192.168.2.10	0x2a58	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.2	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:04.862118006 CET	1.1.1.1	192.168.2.10	0x2a58	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.25	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:04.862118006 CET	1.1.1.1	192.168.2.10	0x2a58	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.107	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:04.943398952 CET	1.1.1.1	192.168.2.10	0xcb8	No error (0)	r.wdfl.co	d2qumtq956sbet.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:05.908941031 CET	1.1.1.1	192.168.2.10	0xbda	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:05.908989906 CET	1.1.1.1	192.168.2.10	0x2c1b	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:05.908989906 CET	1.1.1.1	192.168.2.10	0x2c1b	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.299381971 CET	1.1.1.1	192.168.2.10	0x3fb0	No error (0)	r.wdfl.co	d2qumtq956sbet.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:07.299381971 CET	1.1.1.1	192.168.2.10	0x3fb0	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.40	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.299381971 CET	1.1.1.1	192.168.2.10	0x3fb0	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.107	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.299381971 CET	1.1.1.1	192.168.2.10	0x3fb0	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.2	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.299381971 CET	1.1.1.1	192.168.2.10	0x3fb0	No error (0)	d2qumtq956sbet.cloudfront.net		216.137.52.25	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.299503088 CET	1.1.1.1	192.168.2.10	0xf5ec	No error (0)	r.wdfl.co	d2qumtq956sbet.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:07.633713007 CET	1.1.1.1	192.168.2.10	0xe798	No error (0)	googleads.g.doubleclick.net		172.217.17.66	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:07.634047985 CET	1.1.1.1	192.168.2.10	0xc9b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:08.470304012 CET	1.1.1.1	192.168.2.10	0x34a0	No error (0)	td.doubleclick.net		142.250.181.2	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.303337097 CET	1.1.1.1	192.168.2.10	0x37a4	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:14.303477049 CET	1.1.1.1	192.168.2.10	0xb41a	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.383018970 CET	1.1.1.1	192.168.2.10	0xda90	No error (0)	googleads.g.doubleclick.net		172.217.17.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.385492086 CET	1.1.1.1	192.168.2.10	0x9829	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:14.410856009 CET	1.1.1.1	192.168.2.10	0xebdf	No error (0)	googleads.g.doubleclick.net		142.250.181.66	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:14.411175966 CET	1.1.1.1	192.168.2.10	0xe1e0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:14.443464041 CET	1.1.1.1	192.168.2.10	0x8a99	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Dec 10, 2024 14:21:14.443563938 CET	1.1.1.1	192.168.2.10	0x278f	No error (0)	ep1.adtrafficquality.google		172.217.19.226	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:16.977051020 CET	1.1.1.1	192.168.2.10	0x618d	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:16.982343912 CET	1.1.1.1	192.168.2.10	0x2fe5	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:17.348164082 CET	1.1.1.1	192.168.2.10	0x5649	No error (0)	ep2.adtrafficquality.google		172.217.19.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:17.350970984 CET	1.1.1.1	192.168.2.10	0x6228	No error (0)	ep1.adtrafficquality.google		172.217.17.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:17.351152897 CET	1.1.1.1	192.168.2.10	0x1a98	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Dec 10, 2024 14:21:17.828902006 CET	1.1.1.1	192.168.2.10	0xacd	No error (0)	s0.2mdn.net		172.217.19.230	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:18.579807997 CET	1.1.1.1	192.168.2.10	0xdc5c	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:18.579807997 CET	1.1.1.1	192.168.2.10	0xdc5c	No error (0)	www3.l.google.com		142.250.181.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:18.580252886 CET	1.1.1.1	192.168.2.10	0xd139	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.243607044 CET	1.1.1.1	192.168.2.10	0xd2df	No error (0)	ep2.adtrafficquality.google		172.217.19.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.256658077 CET	1.1.1.1	192.168.2.10	0x564d	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.257910967 CET	1.1.1.1	192.168.2.10	0xce5e	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:20.305731058 CET	1.1.1.1	192.168.2.10	0x4cd6	No error (0)	ep2.adtrafficquality.google		142.250.181.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.718148947 CET	1.1.1.1	192.168.2.10	0x1443	No error (0)	s0.2mdn.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.719599962 CET	1.1.1.1	192.168.2.10	0x561c	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.719599962 CET	1.1.1.1	192.168.2.10	0x561c	No error (0)	cdn.w55c.net		52.57.179.60	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.719599962 CET	1.1.1.1	192.168.2.10	0x561c	No error (0)	cdn.w55c.net		18.184.231.22	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.719599962 CET	1.1.1.1	192.168.2.10	0x561c	No error (0)	cdn.w55c.net		18.185.176.13	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.719599962 CET	1.1.1.1	192.168.2.10	0x561c	No error (0)	cdn.w55c.net		3.64.238.102	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.721268892 CET	1.1.1.1	192.168.2.10	0x44d3	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.721268892 CET	1.1.1.1	192.168.2.10	0x44d3	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.721268892 CET	1.1.1.1	192.168.2.10	0x44d3	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.721347094 CET	1.1.1.1	192.168.2.10	0x289c	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.721724987 CET	1.1.1.1	192.168.2.10	0x11b1	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.721724987 CET	1.1.1.1	192.168.2.10	0x11b1	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.722493887 CET	1.1.1.1	192.168.2.10	0x152c	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.724710941 CET	1.1.1.1	192.168.2.10	0x8b75	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.724710941 CET	1.1.1.1	192.168.2.10	0x8b75	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.724710941 CET	1.1.1.1	192.168.2.10	0x8b75	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.724710941 CET	1.1.1.1	192.168.2.10	0x8b75	No error (0)	chidc2.outbrain.org		50.31.142.255	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.726000071 CET	1.1.1.1	192.168.2.10	0x4622	No error (0)	gtrace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.727921963 CET	1.1.1.1	192.168.2.10	0x3497	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.727921963 CET	1.1.1.1	192.168.2.10	0x3497	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.727921963 CET	1.1.1.1	192.168.2.10	0x3497	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.731887102 CET	1.1.1.1	192.168.2.10	0x52e	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:20.733470917 CET	1.1.1.1	192.168.2.10	0x3184	No error (0)	cm.g.doubleclick.net		172.217.17.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.796201944 CET	1.1.1.1	192.168.2.10	0x9c9a	No error (0)	match.prod.bidr.io		52.19.235.127	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.796201944 CET	1.1.1.1	192.168.2.10	0x9c9a	No error (0)	match.prod.bidr.io		34.252.79.168	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.796201944 CET	1.1.1.1	192.168.2.10	0x9c9a	No error (0)	match.prod.bidr.io		52.17.25.220	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.796201944 CET	1.1.1.1	192.168.2.10	0x9c9a	No error (0)	match.prod.bidr.io		52.17.155.166	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.796201944 CET	1.1.1.1	192.168.2.10	0x9c9a	No error (0)	match.prod.bidr.io		63.32.181.175	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.796201944 CET	1.1.1.1	192.168.2.10	0x9c9a	No error (0)	match.prod.bidr.io		52.19.24.0	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.796201944 CET	1.1.1.1	192.168.2.10	0x9c9a	No error (0)	match.prod.bidr.io		34.249.70.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:20.825639009 CET	1.1.1.1	192.168.2.10	0xa091	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.506561995 CET	1.1.1.1	192.168.2.10	0x2ab7	No error (0)	www.googletagservices.com		172.217.17.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.551944017 CET	1.1.1.1	192.168.2.10	0xc356	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.552591085 CET	1.1.1.1	192.168.2.10	0x4bca	No error (0)	ads.travelaudience.com		35.190.0.66	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.553055048 CET	1.1.1.1	192.168.2.10	0x532c	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.553874969 CET	1.1.1.1	192.168.2.10	0x1e82	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.554105997 CET	1.1.1.1	192.168.2.10	0x92e1	No error (0)	dsp.adkernel.com		174.137.133.49	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556377888 CET	1.1.1.1	192.168.2.10	0xf469	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556377888 CET	1.1.1.1	192.168.2.10	0xf469	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556377888 CET	1.1.1.1	192.168.2.10	0xf469	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556377888 CET	1.1.1.1	192.168.2.10	0xf469	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556377888 CET	1.1.1.1	192.168.2.10	0xf469	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556377888 CET	1.1.1.1	192.168.2.10	0xf469	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556459904 CET	1.1.1.1	192.168.2.10	0xc300	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.556508064 CET	1.1.1.1	192.168.2.10	0x10fb	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.639842033 CET	1.1.1.1	192.168.2.10	0x66cb	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.660227060 CET	1.1.1.1	192.168.2.10	0xf23a	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.680146933 CET	1.1.1.1	192.168.2.10	0x6a40	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:22.680146933 CET	1.1.1.1	192.168.2.10	0x6a40	No error (0)	www3.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:22.681235075 CET	1.1.1.1	192.168.2.10	0x7596	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:24.684794903 CET	1.1.1.1	192.168.2.10	0x8fa8	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:24.684794903 CET	1.1.1.1	192.168.2.10	0x8fa8	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:24.685174942 CET	1.1.1.1	192.168.2.10	0xaada	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:24.685174942 CET	1.1.1.1	192.168.2.10	0xaada	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.044014931 CET	1.1.1.1	192.168.2.10	0x8ff6	No error (0)	dsum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.044014931 CET	1.1.1.1	192.168.2.10	0x8ff6	No error (0)	dsum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.044069052 CET	1.1.1.1	192.168.2.10	0x3f0	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.045799017 CET	1.1.1.1	192.168.2.10	0x1c81	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.316308022 CET	1.1.1.1	192.168.2.10	0x9bdf	No error (0)	cm.g.doubleclick.net		172.217.17.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.360157013 CET	1.1.1.1	192.168.2.10	0x4a76	No error (0)	www.googletagservices.com		172.217.17.66	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.697437048 CET	1.1.1.1	192.168.2.10	0x1f94	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:25.699136972 CET	1.1.1.1	192.168.2.10	0x1501	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.769644022 CET	1.1.1.1	192.168.2.10	0x7099	No error (0)	gcm.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.769829988 CET	1.1.1.1	192.168.2.10	0x63f4	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.769829988 CET	1.1.1.1	192.168.2.10	0x63f4	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.769829988 CET	1.1.1.1	192.168.2.10	0x63f4	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.773739100 CET	1.1.1.1	192.168.2.10	0x5f9	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.773739100 CET	1.1.1.1	192.168.2.10	0x5f9	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:25.773762941 CET	1.1.1.1	192.168.2.10	0x66c4	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.774466038 CET	1.1.1.1	192.168.2.10	0x8e7f	No error (0)	gtracenep.admaster.cc	gtrace.mediago.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.774862051 CET	1.1.1.1	192.168.2.10	0xd894	No error (0)	gtracenep.admaster.cc	gtrace.mediago.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:25.774862051 CET	1.1.1.1	192.168.2.10	0xd894	No error (0)	gtrace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:26.040160894 CET	1.1.1.1	192.168.2.10	0x2f8	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:26.040160894 CET	1.1.1.1	192.168.2.10	0x2f8	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:26.040160894 CET	1.1.1.1	192.168.2.10	0x2f8	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:27.761575937 CET	1.1.1.1	192.168.2.10	0xf0e6	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:27.761575937 CET	1.1.1.1	192.168.2.10	0xf0e6	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:27.853311062 CET	1.1.1.1	192.168.2.10	0xfab8	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:27.853311062 CET	1.1.1.1	192.168.2.10	0xfab8	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:27.853847027 CET	1.1.1.1	192.168.2.10	0x635a	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:28.399699926 CET	1.1.1.1	192.168.2.10	0x3963	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:28.400007963 CET	1.1.1.1	192.168.2.10	0x358c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:28.411597013 CET	1.1.1.1	192.168.2.10	0xa016	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:28.411609888 CET	1.1.1.1	192.168.2.10	0xb936	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:28.968206882 CET	1.1.1.1	192.168.2.10	0x5c7d	No error (0)	googleads.g.doubleclick.net		172.217.19.226	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:28.968466997 CET	1.1.1.1	192.168.2.10	0x98ec	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:30.076991081 CET	1.1.1.1	192.168.2.10	0xd257	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:30.076991081 CET	1.1.1.1	192.168.2.10	0xd257	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:30.077522993 CET	1.1.1.1	192.168.2.10	0x7143	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:30.256416082 CET	1.1.1.1	192.168.2.10	0xe3b6	No error (0)	dsum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:30.256416082 CET	1.1.1.1	192.168.2.10	0xe3b6	No error (0)	dsum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:30.256978035 CET	1.1.1.1	192.168.2.10	0xec93	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 10, 2024 14:21:30.988667011 CET	1.1.1.1	192.168.2.10	0x9d94	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:30.988792896 CET	1.1.1.1	192.168.2.10	0x6f27	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:31.111484051 CET	1.1.1.1	192.168.2.10	0x7c61	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.111545086 CET	1.1.1.1	192.168.2.10	0x8784	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.189455986 CET	1.1.1.1	192.168.2.10	0x3857	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332087994 CET	1.1.1.1	192.168.2.10	0xdb0f	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332087994 CET	1.1.1.1	192.168.2.10	0xdb0f	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		18.233.180.144	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		52.23.100.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		44.205.182.185	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		34.225.22.174	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		44.194.37.91	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		54.172.83.147	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		44.210.213.98	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332442045 CET	1.1.1.1	192.168.2.10	0xa6d8	No error (0)	sync.ipredictive.com		34.197.8.73	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332742929 CET	1.1.1.1	192.168.2.10	0x1919	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332742929 CET	1.1.1.1	192.168.2.10	0x1919	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332742929 CET	1.1.1.1	192.168.2.10	0x1919	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.26	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332742929 CET	1.1.1.1	192.168.2.10	0x1919	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.31	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332742929 CET	1.1.1.1	192.168.2.10	0x1919	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.332742929 CET	1.1.1.1	192.168.2.10	0x1919	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.65	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.333225965 CET	1.1.1.1	192.168.2.10	0xe132	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:31.483352900 CET	1.1.1.1	192.168.2.10	0xbd89	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.483406067 CET	1.1.1.1	192.168.2.10	0x92e7	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.811517000 CET	1.1.1.1	192.168.2.10	0xdf31	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.840678930 CET	1.1.1.1	192.168.2.10	0x5875	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.898550987 CET	1.1.1.1	192.168.2.10	0xf4e4	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:31.898987055 CET	1.1.1.1	192.168.2.10	0x78f6	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:32.893076897 CET	1.1.1.1	192.168.2.10	0x6a2a	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:32.893076897 CET	1.1.1.1	192.168.2.10	0x6a2a	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.000742912 CET	1.1.1.1	192.168.2.10	0x1471	No error (0)	tpt.mediaplex.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:34.067574978 CET	1.1.1.1	192.168.2.10	0x9e79	No error (0)	tpt.mediaplex.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	fw.adsafeprotected.com	iefw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	iefw.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.72.141.208	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.194.154.49	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.214.250.15	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.247.49.181	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.48.150.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		18.200.179.112	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.213.154.13	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.482016087 CET	1.1.1.1	192.168.2.10	0xfb41	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.251.132.103	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:34.483607054 CET	1.1.1.1	192.168.2.10	0x9901	No error (0)	fw.adsafeprotected.com	iefw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:34.483607054 CET	1.1.1.1	192.168.2.10	0x9901	No error (0)	iefw.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:36.717046976 CET	1.1.1.1	192.168.2.10	0x2d30	No error (0)	www.jared.com	www.jared.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:36.717132092 CET	1.1.1.1	192.168.2.10	0x7979	No error (0)	www.jared.com	www.jared.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:36.717704058 CET	1.1.1.1	192.168.2.10	0x8c9	No error (0)	www.jared.com	www.jared.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:36.719155073 CET	1.1.1.1	192.168.2.10	0x189	No error (0)	www.jared.com	www.jared.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.075891018 CET	1.1.1.1	192.168.2.10	0x9c1	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.075906038 CET	1.1.1.1	192.168.2.10	0x9e48	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.079108953 CET	1.1.1.1	192.168.2.10	0xf5ac	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:37.083870888 CET	1.1.1.1	192.168.2.10	0x610f	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.203016043 CET	1.1.1.1	192.168.2.10	0x701f	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.203351021 CET	1.1.1.1	192.168.2.10	0xa30f	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.203351021 CET	1.1.1.1	192.168.2.10	0xa30f	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.71	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.203351021 CET	1.1.1.1	192.168.2.10	0xa30f	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.32	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.203351021 CET	1.1.1.1	192.168.2.10	0xa30f	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.20	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.203351021 CET	1.1.1.1	192.168.2.10	0xa30f	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.82	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	fw.adsafeprotected.com	iefw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	iefw.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.72.141.208	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.194.154.49	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.247.49.181	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.214.250.15	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		18.200.179.112	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.213.154.13	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		34.251.132.103	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.270517111 CET	1.1.1.1	192.168.2.10	0x7fde	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.48.150.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:37.272000074 CET	1.1.1.1	192.168.2.10	0xa7fb	No error (0)	fw.adsafeprotected.com	iefw.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:37.272000074 CET	1.1.1.1	192.168.2.10	0xa7fb	No error (0)	iefw.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:39.097968102 CET	1.1.1.1	192.168.2.10	0xa389	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:39.098098993 CET	1.1.1.1	192.168.2.10	0xd775	No error (0)	tpt.dotomi.com	bfp.global.ipv4.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:39.646805048 CET	1.1.1.1	192.168.2.10	0xe7d3	No error (0)	ad.doubleclick.net		172.217.17.70	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:39.647109032 CET	1.1.1.1	192.168.2.10	0xdd54	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 10, 2024 14:21:40.294935942 CET	1.1.1.1	192.168.2.10	0x1119	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:40.294935942 CET	1.1.1.1	192.168.2.10	0x1119	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.71	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.294935942 CET	1.1.1.1	192.168.2.10	0x1119	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.32	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.294935942 CET	1.1.1.1	192.168.2.10	0x1119	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.20	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.294935942 CET	1.1.1.1	192.168.2.10	0x1119	No error (0)	d162h6x3rxav67.cloudfront.net		13.226.2.82	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.402120113 CET	1.1.1.1	192.168.2.10	0xe1f6	No error (0)	static.adsafeprotected.com	d162h6x3rxav67.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696223974 CET	1.1.1.1	192.168.2.10	0xb4aa	No error (0)	dt.adsafeprotected.com	dt-external-217593033.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt.adsafeprotected.com	dt-external-217593033.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		54.237.134.139	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		34.239.232.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		3.214.212.104	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		52.204.180.45	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		52.54.75.191	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		52.55.96.116	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		34.201.198.130	A (IP address)	IN (0x0001)	false
Dec 10, 2024 14:21:40.696252108 CET	1.1.1.1	192.168.2.10	0xfdb5	No error (0)	dt-external-217593033.us-east-1.elb.amazonaws.com		50.19.108.247	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49741	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:00 UTC	652	OUT	GET /8cSDx HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:01 UTC	675	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 13:21:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private location: https://t.ly/?ref=expired&url=https://t.ly/8cSDx x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 302 Vary: Accept-Encoding CF-Cache-Status: BYPASS Server-Timing: cfCacheStatus;desc="BYPASS" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd891b9ba90f8f-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:01 UTC	694	IN	Data Raw: 33 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 74 2e 6c 79 2f 3f 72 65 66 3d 65 78 70 69 72 65 64 26 61 6d 70 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 74 2e 6c 79 2f 38 63 53 44 78 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 74 2e 6c 79 2f 3f 72 65 66 3d 65 78 70 69 72 65 64 26 61 6d 70 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 74 Data Ascii: 39f<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://t.ly/?ref=expired&url=https://t.ly/8cSDx'" /> <title>Redirecting to https://t.ly/?ref=expired&url=https://t
2024-12-10 13:21:01 UTC	240	IN	Data Raw: 22 3a 22 38 65 66 64 38 39 31 62 39 62 61 39 30 66 38 66 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 2e 31 30 2e 35 22 2c 22 73 65 72 76 65 72 54 69 6d 69 6e 67 22 3a 7b 22 6e 61 6d 65 22 3a 7b 22 63 66 45 78 74 50 72 69 22 3a 74 72 75 65 2c 22 63 66 4c 34 22 3a 74 72 75 65 2c 22 63 66 53 70 65 65 64 42 72 61 69 6e 22 3a 74 72 75 65 2c 22 63 66 43 61 63 68 65 53 74 61 74 75 73 22 3a 74 72 75 65 7d 7d 2c 22 74 6f 6b 65 6e 22 3a 22 64 65 65 37 64 39 66 30 66 62 39 66 34 34 66 38 38 39 31 30 61 34 32 39 30 30 64 64 61 39 35 38 22 2c 22 62 22 3a 31 7d 27 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ":"8efd891b9ba90f8f","version":"2024.10.5","serverTiming":{"name":{"cfExtPri":true,"cfL4":true,"cfSpeedBrain":true,"cfCacheStatus":true}},"token":"dee7d9f0fb9f44f88910a42900dda958","b":1}' crossorigin="anonymous"></script></body></html>
2024-12-10 13:21:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49742	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:01 UTC	682	OUT	GET /?ref=expired&url=https://t.ly/8cSDx HTTP/1.1 Host: t.ly Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:01 UTC	1333	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; expires=Tue, 24 Dec 2024 13:21:01 GMT; Max-Age=1209600; path=/; domain=.t.ly; secure; samesite=lax Set-Cookie: tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; expires=Tue, 24 Dec 2024 13:21:01 GMT; Max-Age=1209600; path=/; domain=.t.ly; secure; httponly; samesite=lax x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200
2024-12-10 13:21:01 UTC	270	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 33 3a 32 31 3a 30 31 20 47 4d 54 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 42 59 50 41 53 53 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 63 66 43 61 63 68 65 53 74 61 74 75 73 3b 64 65 73 63 3d 22 42 59 50 41 53 53 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 31 35 35 35 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 64 38 39 31 65 66 65 61 66 31 35 64 37 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 Data Ascii: Last-Modified: Tue, 10 Dec 2024 13:21:01 GMTCF-Cache-Status: BYPASSServer-Timing: cfCacheStatus;desc="BYPASS"Strict-Transport-Security: max-age=15552000; includeSubDomains; preloadServer: cloudflareCF-RAY: 8efd891efeaf15d7-EWRalt-svc: h3=":443
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 6f 72 6c 64 26 23 30 33 39 3b 73 20 53 68 6f 72 74 65 73 74 20 55 52 4c 20 53 68 6f 72 74 65 6e 65 72 20 7c 20 54 2e 4c 59 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 Data Ascii: 7ff9<!DOCTYPE html><html lang="en" xml:lang="en" lang="en"><head> <title>World's Shortest URL Shortener \| T.LY</title> <meta charset="utf-8"> <link rel="icon" type="image/x-icon" href="/favicon.ico"> <meta http-equiv="X-UA-Compat
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 6f 62 73 74 65 72 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 63 66 2d 66 6f 6e 74 73 2f 73 2f 6c 6f 62 73 74 65 72 2f 35 2e 30 2e 31 38 2f 76 69 65 74 6e 61 6d 65 73 65 2f 34 30 30 2f 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 Data Ascii: splay:swap;}@font-face {font-family:Lobster;font-style:normal;font-weight:400;src:url(/cf-fonts/s/lobster/5.0.18/vietnamese/400/normal.woff2);unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 6c 79 22 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 69 64 3d 22 74 6c 79 2d 73 63 68 65 6d 61 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 40 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 40 74 79 70 65 22 3a 20 22 57 65 62 73 69 74 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 40 69 64 22 3a 20 22 68 74 74 70 73 3a 2f 2f 74 2e 6c 79 2f 23 77 65 62 73 69 74 65 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d Data Ascii: > <link rel="canonical" href="https://t.ly"> <script id="tly-schema" type="application/ld+json"> { "@context": "https://schema.org", "@type": "Website", "@id": "https://t.ly/#website", "nam
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 68 6f 72 74 65 6e 20 75 72 6c 2c 20 73 68 6f 72 74 20 6c 69 6e 6b 2c 20 73 68 6f 72 74 65 6e 20 6c 69 6e 6b 2c 20 6c 69 6e 6b 20 73 68 6f 72 74 65 6e 65 72 2c 20 73 68 6f 72 74 2c 20 71 72 20 63 6f 64 65 73 2c 20 66 72 65 65 2c 20 6c 69 6e 6b 20 72 65 74 61 72 67 65 74 69 6e 67 2c 20 70 69 78 65 6c 2c 20 73 68 6f 72 74 65 73 74 2c 20 55 52 4c 2c 20 74 69 6e 79 2c 20 73 65 63 75 72 65 2c 20 73 61 66 65 2c 20 74 2e 6c 79 2c 20 73 68 6f 72 74 2c 20 62 69 74 2e 6c 79 2c 20 67 6f 6f 2e 67 6c 2c 20 74 2e 63 6f 2c 20 6c 69 6e 6b 2c 20 6c 6f 6e 67 20 75 72 6c 20 73 68 6f 72 74 65 6e 65 64 2c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e Data Ascii: horten url, short link, shorten link, link shortener, short, qr codes, free, link retargeting, pixel, shortest, URL, tiny, secure, safe, t.ly, short, bit.ly, goo.gl, t.co, link, long url shortened, custom domain" /> <meta name="twitter:description
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 61 6e 61 67 65 6d 65 6e 74 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 2e 4c 59 20 69 73 20 74 68 65 20 57 6f 72 6c 64 26 23 30 33 39 3b 73 20 53 68 6f 72 74 65 73 74 20 46 72 65 65 20 55 52 4c 20 53 68 6f 72 74 65 6e 65 72 20 74 6f 6f 6c 20 74 68 61 74 20 74 61 6b 65 73 20 61 20 6c 6f 6e 67 20 55 52 4c 20 61 6e 64 20 74 75 72 6e 73 20 69 74 20 69 6e 74 6f 20 73 68 6f 72 74 20 6c 69 6e 6b 73 20 6f 72 20 51 52 20 63 6f 64 65 73 20 74 68 61 74 20 61 72 65 20 65 61 73 79 20 74 6f 20 73 68 61 72 65 20 61 6e 64 20 74 72 61 63 6b 20 74 68 65 20 61 6e 61 6c 79 74 69 63 73 2e 20 43 72 65 61 74 65 20 73 68 6f 72 74 20 62 72 61 6e 64 65 64 20 55 Data Ascii: anagement" /> <meta property="og:description" content="T.LY is the World's Shortest Free URL Shortener tool that takes a long URL and turns it into short links or QR codes that are easy to share and track the analytics. Create short branded U
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 74 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 20 49 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 6d 61 69 6e 74 61 69 6e 20 74 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 63 75 72 69 74 79 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 72 65 2d 65 6e 61 62 6c 65 20 69 74 20 61 66 74 65 72 20 6c 6f 67 67 69 6e 67 20 69 6e 2e 22 3a 22 41 66 74 65 72 20 6c 6f 67 67 69 6e 67 20 69 6e 20 76 69 61 20 79 6f 75 72 20 65 6d 65 72 67 65 6e 63 79 20 74 6f 6b 65 6e 2c 20 74 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 69 73 61 62 6c 65 Data Ascii: two-factor authentication will be disabled for your account. If you would like to maintain two-factor authentication security, you should re-enable it after logging in.":"After logging in via your emergency token, two-factor authentication will be disable
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 77 69 74 63 68 20 74 6f 20 74 68 65 20 3a 70 6c 61 6e 4e 61 6d 65 20 70 6c 61 6e 3f 22 3a 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 77 69 74 63 68 20 74 6f 20 74 68 65 20 3a 70 6c 61 6e 4e 61 6d 65 20 70 6c 61 6e 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 6c 65 74 65 20 74 68 69 73 20 74 6f 6b 65 6e 3f 20 49 66 20 64 65 6c 65 74 65 64 2c 20 41 50 49 20 72 65 71 75 65 73 74 73 20 74 68 61 74 20 61 74 74 65 6d 70 74 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 69 6e 67 20 74 68 69 73 20 74 6f 6b 65 6e 20 77 69 6c 6c 20 6e 6f 20 6c 6f 6e 67 65 72 20 62 65 20 61 63 63 65 70 74 65 64 2e 22 3a 22 41 72 Data Ascii: u sure you want to switch to the :planName plan?":"Are you sure you want to switch to the :planName plan?","Are you sure you want to delete this token? If deleted, API requests that attempt to authenticate using this token will no longer be accepted.":"Ar
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 54 6f 6b 65 6e 22 3a 22 43 72 65 61 74 65 20 41 50 49 20 54 6f 6b 65 6e 22 2c 22 43 72 65 61 74 65 20 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 22 3a 22 43 72 65 61 74 65 20 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 22 2c 22 43 72 65 61 74 65 64 22 3a 22 43 72 65 61 74 65 64 22 2c 22 43 75 72 72 65 6e 74 20 50 61 73 73 77 6f 72 64 22 3a 22 43 75 72 72 65 6e 74 20 50 61 73 73 77 6f 72 64 22 2c 22 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 72 65 71 75 65 73 74 20 61 6e 6f 74 68 65 72 22 3a 22 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 72 65 71 75 65 73 74 20 61 6e 6f 74 68 65 72 22 2c 22 44 61 69 6c 79 20 56 6f 6c 75 6d 65 22 3a 22 44 61 69 6c 79 20 56 6f 6c 75 6d 65 22 2c 22 44 61 74 65 22 3a 22 44 61 74 65 22 2c 22 44 61 79 20 54 72 69 61 6c 22 3a 22 44 61 79 20 54 72 Data Ascii: Token":"Create API Token","Create Announcement":"Create Announcement","Created":"Created","Current Password":"Current Password","click here to request another":"click here to request another","Daily Volume":"Daily Volume","Date":"Date","Day Trial":"Day Tr
2024-12-10 13:21:01 UTC	1369	IN	Data Raw: 49 66 20 79 6f 75 20 6c 6f 73 65 20 79 6f 75 72 20 74 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 65 76 69 63 65 2c 20 79 6f 75 20 6d 61 79 20 75 73 65 20 74 68 69 73 20 65 6d 65 72 67 65 6e 63 79 20 72 65 73 65 74 20 74 6f 6b 65 6e 20 74 6f 20 64 69 73 61 62 6c 65 20 74 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 3a 22 49 66 20 79 6f 75 20 6c 6f 73 65 20 79 6f 75 72 20 74 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 65 76 69 63 65 2c 20 79 6f 75 20 6d 61 79 20 75 73 65 20 74 68 69 73 20 65 6d 65 72 67 65 6e 63 79 20 72 65 73 65 74 20 74 6f 6b 65 6e 20 74 6f 20 64 69 73 61 62 6c 65 20 74 77 6f 2d 66 61 63 74 Data Ascii: If you lose your two-factor authentication device, you may use this emergency reset token to disable two-factor authentication on your account.":"If you lose your two-factor authentication device, you may use this emergency reset token to disable two-fact

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49749	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:03 UTC	1296	OUT	GET /css/app.css?id=6e55a0bd9e1689eaf679 HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:03 UTC	704	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-4a78f" expires: Tue, 09 Dec 2025 17:54:47 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69941 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd892c393bc42c-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:03 UTC	665	IN	Data Raw: 37 63 65 32 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 35 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d Data Ascii: 7ce2/! Font Awesome Free 6.5.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2023 Fonticons, Inc. */.fa{font-family:var(--fa-style-
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 20 41 77 65 73 6f 6d 65 5c 20 36 20 42 72 61 6e 64 73 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 65 6d 7d 2e 66 61 2d 32 78 73 7b 66 Data Ascii: ont-family:Font Awesome\ 6 Brands}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{f
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 65 61 73 65 2d 69 6e 2d 6f 75 74 29 7d 2e 66 61 2d 62 6f 75 6e 63 65 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 Data Ascii: -duration:var(--fa-animation-duration,1s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-name:fa-beat;animation-timing-function:var(--fa-animation-timing,ease-in-out)}.fa-bounce{animation-delay:var(--fa-animation-delay,0s
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 65 61 73 65 2d 69 6e 2d 6f 75 74 29 7d 2e 66 61 2d 73 68 61 6b 65 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 73 68 61 6b 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 6c 69 6e 65 61 72 29 Data Ascii: :var(--fa-animation-timing,ease-in-out)}.fa-shake{animation-duration:var(--fa-animation-duration,1s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-name:fa-shake;animation-timing-function:var(--fa-animation-timing,linear)
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 61 72 74 2d 73 63 61 6c 65 2d 78 2c 31 2e 31 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 2d 73 63 61 6c 65 2d 79 2c 2e 39 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 33 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6a 75 6d 70 2d 73 63 61 6c 65 2d 78 2c 2e 39 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6a 75 6d 70 2d 73 63 61 6c 65 2d 79 2c 31 2e 31 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 68 65 69 67 68 74 2c 2d 2e 35 65 6d 29 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 6c 61 6e 64 2d 73 63 61 6c 65 2d 78 2c 31 2e 30 35 29 2c 76 61 72 28 Data Ascii: art-scale-x,1.1),var(--fa-bounce-start-scale-y,.9)) translateY(0)}30%{transform:scale(var(--fa-bounce-jump-scale-x,.9),var(--fa-bounce-jump-scale-y,1.1)) translateY(var(--fa-bounce-height,-.5em))}50%{transform:scale(var(--fa-bounce-land-scale-x,1.05),var(
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 6c 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 62 79 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 76 61 72 28 2d 2d 66 61 2d 72 6f 74 61 74 65 2d 61 6e 67 6c 65 2c 6e 6f 6e 65 29 29 7d 2e 66 61 2d 73 74 61 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 32 2e 35 65 6d 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f Data Ascii: l.fa-flip-vertical{transform:scale(-1)}.fa-rotate-by{transform:rotate(var(--fa-rotate-angle,none))}.fa-stack{display:inline-block;height:2em;line-height:2em;position:relative;vertical-align:middle;width:2.5em}.fa-stack-1x,.fa-stack-2x{left:0;position:abso
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 63 22 7d 2e 66 61 2d 77 61 76 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 33 65 22 7d 2e 66 61 2d 72 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 30 62 22 7d 2e 66 61 2d 62 75 69 6c 64 69 6e 67 2d 75 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 64 39 22 7d 2e 66 61 2d 64 69 63 65 2d 74 68 72 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 32 37 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 64 61 79 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 61 6e 63 68 6f 72 2d 63 69 72 63 6c 65 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: c"}.fa-wave-square:before{content:"\f83e"}.fa-ring:before{content:"\f70b"}.fa-building-un:before{content:"\e4d9"}.fa-dice-three:before{content:"\f527"}.fa-calendar-alt:before,.fa-calendar-days:before{content:"\f073"}.fa-anchor-circle-check:before{content:
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 65 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 36 63 22 7d 2e 66 61 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 35 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 61 6e 67 6c 65 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 75 73 65 72 73 2d 72 65 63 74 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 39 34 22 7d 2e 66 61 2d 70 65 6f 70 6c 65 2d 72 6f 6f 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 33 37 22 7d 2e 66 61 2d 70 65 6f 70 6c 65 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 33 Data Ascii: e-exclamation:before{content:"\e56c"}.fa-crop:before{content:"\f125"}.fa-angle-double-down:before,.fa-angles-down:before{content:"\f103"}.fa-users-rectangle:before{content:"\e594"}.fa-people-roof:before{content:"\e537"}.fa-people-line:before{content:"\e53
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 34 62 22 7d 2e 66 61 2d 6c 61 6e 64 6d 61 72 6b 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 31 63 22 7d 2e 66 61 2d 70 65 6e 63 69 6c 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 30 33 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 63 61 72 65 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 61 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 36 22 7d 2e 66 61 2d 66 69 6c 65 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 2c 2e Data Ascii: efore{content:"\4b"}.fa-landmark-flag:before{content:"\e51c"}.fa-pencil-alt:before,.fa-pencil:before{content:"\f303"}.fa-backward:before{content:"\f04a"}.fa-caret-right:before{content:"\f0da"}.fa-comments:before{content:"\f086"}.fa-file-clipboard:before,.
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 6f 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 65 22 7d 2e 66 61 2d 74 61 62 6c 65 74 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 62 6c 65 74 2d 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 61 22 7d 2e 66 61 2d 70 61 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 30 22 7d 2e 66 61 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 32 22 7d 2e 66 61 2d 74 72 6f 77 65 6c 2d 62 72 69 63 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 38 61 22 7d 2e 66 61 2d 66 61 63 65 2d 66 6c 75 73 68 65 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 75 73 68 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: otch:before{content:"\f1ce"}.fa-tablet-alt:before,.fa-tablet-screen-button:before{content:"\f3fa"}.fa-paw:before{content:"\f1b0"}.fa-cloud:before{content:"\f0c2"}.fa-trowel-bricks:before{content:"\e58a"}.fa-face-flushed:before,.fa-flushed:before{content:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49750	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:03 UTC	1310	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:03 UTC	500	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:03 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Thu, 05 Dec 2024 16:16:23 GMT ETag: "6751d1d7-302c" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd892c3b910f5f-EWR X-Frame-Options: DENY Expires: Thu, 12 Dec 2024 13:21:03 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-12-10 13:21:03 UTC	869	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 74 43 6f 6e 74 65 6e 74 3d 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 2e 61 74 74 72 69 62 75 74 65 73 5b 6e 5d 3b 74 72 79 7b 72 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 72 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 72 2e 6e 61 6d 65 2c 72 2e 76 61 6c 75 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2e 6e 61 6d 65 2c 72 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 6f 29 7b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 49 28 65 29 3b 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 7d 66 75 6e Data Ascii: tContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespaceURI,r.name,r.value):e.setAttribute(r.name,r.value)}catch(o){}}return e}function l(t,e){var n=new I(e);t.dispatchEvent(n)}fun
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 2e 63 61 6c 6c 28 6e 2e 61 74 74 72 69 62 75 74 65 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 2f 5e 6f 6e 2f 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 5b 65 2e 6e 61 6d 65 5d 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 65 2e 6e 61 6d 65 2c 65 2e 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 74 2e 5f 5f 63 66 51 52 3d 7b 64 6f 6e 65 3a 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: orEach.call(n.attributes,function(e){/^on/.test(e.name)&&"function"!=typeof n[e.name]&&n.setAttribute(e.name,e.value.substring(t.handlerPrefixLength))})})}function S(){var t=window;"undefined"!=typeof Promise&&(t.__cfQR={done:new Promise(function(t){retur
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 69 70 74 22 29 2e 6e 6f 4d 6f 64 75 6c 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 72 65 74 75 72 6e 20 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 45 76 65 6e 74 43 74 6f 72 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 45 76 65 6e 74 43 74 6f 72 22 2c 7b 76 61 6c 75 65 3a 45 76 65 6e 74 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 45 76 65 6e 74 43 74 6f 72 7d 28 29 2c 4c 3d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 2c 5f 3d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 2c 48 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: ipt").noModule,I=function(){var t=window;return t.__rocketLoaderEventCtor\|\|Object.defineProperty(t,"__rocketLoaderEventCtor",{value:Event}),t.__rocketLoaderEventCtor}(),L=document.write,_=document.writeln,H=Object.setPrototypeOf\|\|{__proto__:[]}instanceof
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 72 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7c 7c 74 2e 74 79 70 65 3d 3d 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 22 6d 6f 64 75 6c 65 22 26 26 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 7d 2c 74 7d 28 29 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 79 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 72 76 65 73 74 53 63 72 69 70 74 73 49 6e 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d Data Ascii: rScript=function(t){return t.hasAttribute("defer")\|\|t.type===this.nonce+"module"&&!t.hasAttribute("async")},t}(),N=function(t){function e(){return null!==t&&t.apply(this,arguments)\|\|this}return y(e,t),e.prototype.harvestScriptsInDocument=function(){var t=
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 30 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 57 72 69 74 74 65 6e 43 6f 6e 74 65 6e 74 41 6e 64 44 69 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 4c 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 5f 2c 74 68 69 73 2e 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 29 3f 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3f 74 68 69 73 2e 69 6e 73 65 72 74 43 6f Data Ascii: guments[n];return e.write(t,!0)}},t.prototype.flushWrittenContentAndDisable=function(){document.write=L,document.writeln=_,this.buffer.length&&(document.contains(this.insertionPointMarker)?this.insertionPointMarker.parentNode===document.head?this.insertCo
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 73 2e 62 79 70 61 73 73 45 76 65 6e 74 73 49 6e 50 72 6f 78 69 65 73 3d 21 31 2c 74 68 69 73 2e 6e 61 74 69 76 65 57 69 6e 64 6f 77 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 64 6f 63 75 6d 65 6e 74 2c 22 72 65 61 64 79 53 74 61 74 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 7d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 74 68 69 73 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 28 29 2c 74 68 69 73 2e 75 70 64 61 74 65 49 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 73 28 29 7d 72 65 74 75 72 Data Ascii: s.bypassEventsInProxies=!1,this.nativeWindowAddEventListener=window.addEventListener;try{Object.defineProperty(document,"readyState",{get:function(){return t.simulatedReadyState}})}catch(e){}this.setupEventListenerProxy(),this.updateInlineHandlers()}retur
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 6f 64 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 72 3d 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 5d 2c 69 3d 32 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 5b 69 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 76 61 72 20 61 3d 6d 28 74 68 69 73 29 2c 63 3d 72 26 26 72 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 50 72 6f 78 69 65 64 48 61 6e 64 6c 65 72 3b 69 66 28 21 63 29 7b 76 61 72 20 73 3d 66 28 72 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 3f 28 Data Ascii: ods=function(t){var e=this,n=t.addEventListener,r=t.removeEventListener;t.addEventListener=function(t,r){for(var o=[],i=2;i<arguments.length;i++)o[i-2]=arguments[i];var a=m(this),c=r&&r.__rocketLoaderProxiedHandler;if(!c){var s=f(r);"function"==typeof s?(
2024-12-10 13:21:03 UTC	1369	IN	Data Raw: 6e 67 73 2e 6e 6f 6e 63 65 29 29 7b 76 61 72 20 6e 3d 69 28 65 29 2c 72 3d 76 28 29 26 26 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 6e 74 65 67 72 69 74 79 22 29 3b 69 66 28 6e 26 26 21 72 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 65 6c 22 2c 22 70 72 65 6c 6f 61 64 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 73 22 2c 22 73 63 72 69 70 74 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 6e 29 2c 65 2e 63 72 6f 73 73 4f 72 69 67 69 6e 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 2c 65 2e 63 72 6f 73 73 4f 72 69 67 69 6e 29 2c 64 6f 63 75 Data Ascii: ngs.nonce)){var n=i(e),r=v()&&e.hasAttribute("integrity");if(n&&!r){var o=document.createElement("link");o.setAttribute("rel","preload"),o.setAttribute("as","script"),o.setAttribute("href",n),e.crossOrigin&&o.setAttribute("crossorigin",e.crossOrigin),docu
2024-12-10 13:21:03 UTC	511	IN	Data Raw: 69 6e 67 26 26 6f 26 26 21 69 3f 64 28 6e 29 3a 70 28 6e 29 3b 72 65 74 75 72 6e 20 63 3f 28 61 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 72 29 2c 63 29 3a 28 65 28 22 46 61 69 6c 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 63 74 69 76 61 74 61 62 6c 65 20 63 6f 70 79 20 6f 66 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 29 7d 2c 74 7d 28 29 2c 52 3d 22 64 61 74 61 2d 63 66 2d 73 65 74 74 69 6e 67 73 22 2c 54 3d 22 7c 22 2c 42 3d 22 64 61 74 61 2d 63 66 2d 6d 6f 64 69 66 69 65 64 2d 22 2c 55 3d 76 6f 69 64 20 30 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 Data Ascii: ing&&o&&!i?d(n):p(n);return c?(a.insertBefore(c,r),c):(e("Failed to create activatable copy of script \n"+n.outerHTML+"\n","Script will not be executed."),null)},t}(),R="data-cf-settings",T="\|",B="data-cf-modified-",U=void 0;!function(){var t=document.cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49751	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:03 UTC	1309	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:04 UTC	498	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:04 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Thu, 05 Dec 2024 16:16:23 GMT ETag: "6751d1d7-4d7" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd8930881742f5-EWR X-Frame-Options: DENY Expires: Thu, 12 Dec 2024 13:21:04 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-12-10 13:21:04 UTC	871	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-12-10 13:21:04 UTC	368	IN	Data Raw: 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 74 65 6d 70 6c 61 74 65 22 29 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 72 79 7b 69 28 72 5b 6e 5d 2e 63 6f 6e 74 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 74 29 2c 6f 28 74 29 2c 61 28 74 29 7d 63 61 74 63 68 28 72 29 7b 65 28 72 29 7d 7d 76 61 72 20 6c 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 22 2c 75 3d 22 2e 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 2c 66 3d 22 64 61 74 61 2d 63 66 65 6d 61 69 6c 22 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f Data Ascii: .querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49756	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:04 UTC	1312	OUT	GET /cf-fonts/s/lobster/5.0.18/latin/400/normal.woff2 HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t.ly sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:05 UTC	384	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:05 GMT Content-Type: font/woff2 Content-Length: 33896 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=31536000, immutable Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd893748714216-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:05 UTC	985	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 84 68 00 11 00 00 00 01 93 08 00 00 84 05 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 2c 1b 89 16 1c 8d 5e 06 60 00 85 14 08 81 46 09 9a 6d 11 08 0a 85 c7 74 84 ff 5e 0b 85 1e 00 01 36 02 24 03 8a 38 04 20 05 84 3c 07 8b 53 0c 81 3c 5b 29 6b 71 80 6d d3 1a e6 dd 0e 40 5c b6 ba 6c 38 d8 b6 f0 41 77 f0 57 f4 05 10 b0 e8 40 ed 76 a0 08 d4 dd 9f 65 ff ff 27 26 13 39 ec 12 fd bb 26 da 1a 60 db bc 4f a9 d2 46 46 c5 cc d6 33 47 f6 a5 b5 d6 5e f3 da 10 66 8b 7d c1 48 84 19 a8 51 e9 d4 63 ac b9 23 51 a3 86 ce 6b cc d3 3b 1b 68 f7 c5 d0 79 f9 b4 a3 9a cb 8d fb 4f 6c 65 4e ac d8 ac 20 3a 6f 39 c4 a2 49 9f 53 d8 68 aa c7 c9 47 e0 6d 43 6e e7 e4 9b 53 3b e8 09 87 70 c9 f0 cb cb 11 f8 91 ad fa ca 59 41 33 cc Data Ascii: wOF2h,^`Fmt^6$8 <S<[)kqm@\l8AwW@ve'&9&`OFF3G^f}HQc#Qk;hyOleN :o9IShGmCnS;pYA3
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: e9 a1 3c 89 ce 54 47 dc 61 2f 04 c6 d5 b3 4a cb 90 b6 93 77 e8 bd fb f5 a4 ff bf be e0 4b 02 5b c2 a1 84 71 00 9c 24 9c 30 76 e9 47 0b e9 23 c0 c6 38 55 ea 94 6d 57 76 f5 e9 a6 a0 4d 55 81 ed 0a 54 9a 90 b3 dd 31 84 d5 b8 77 b5 9c 6d 48 9b 65 6f a7 67 35 8b ed 2c 76 db 39 bd 9c f1 65 3f 31 1f 24 e0 c4 55 cb b5 68 15 30 72 6b fc df b2 9f f6 17 ec 18 cb 6b 29 46 8a 18 31 5a da e3 ad f9 77 73 f0 e7 7a 6a a2 30 95 d1 dd bd af d7 29 a9 52 5a 20 1d 02 12 bd fd bd 93 d4 de ff 89 ae 07 14 bc 0a 49 48 d6 dd ff fe 9a 9f 68 d0 77 b0 be 99 6f a1 3b 24 b9 4a 15 14 64 0d 24 3b a9 33 8b 39 ad e5 01 7d 77 c7 31 84 c1 4e 0a 24 c7 d2 3c 80 00 ec be bf 00 02 04 22 ea 68 11 89 49 0c 44 20 d8 b0 81 51 47 87 84 00 78 b2 6c 40 9e 39 97 a1 85 a0 fb cf 30 1d b8 7c c2 88 72 90 61 Data Ascii: <TGa/JwK[q$0vG#8UmWvMUT1wmHeog5,v9e?1$Uh0rkk)F1Zwszj0)RZ IHhwo;$Jd$;39}w1N$<"hID QGxl@90\|ra
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: ad 50 01 61 fc dd 10 2b f2 fb 26 28 87 0e 55 18 2e c3 ba 51 ea 27 2d 8b 69 a1 e7 4b 51 58 82 28 31 44 74 58 97 68 ad f5 f9 ce 22 f7 8e 5b d6 a8 96 d5 3a ee d5 66 2c d9 08 34 16 64 83 ef 6e c9 8a 37 32 24 7c b4 07 1f 8f 3a 79 59 82 02 c4 bd e9 06 20 1d c6 c5 6b 54 71 01 00 65 22 84 59 01 a6 9c fa ce 89 85 2b 40 f1 20 67 4b 03 c8 1f f9 0b f0 49 7f fd bf 63 04 c0 84 21 09 d6 77 97 21 e1 4c d6 4c 91 34 c1 56 b2 0b 2c bf 75 7e c2 4d 62 c2 65 52 e7 c2 dc 9a 77 f3 61 21 c9 22 b9 a4 f3 71 19 23 67 1c 18 05 e3 c6 04 32 6a 26 81 46 d0 01 5e 29 a4 0a 0b 93 09 34 cf ca f0 a7 b6 e5 6b fd 73 fe ae 40 2e 92 73 77 73 c6 9a b1 fb f6 54 4c f8 9f 31 f6 6f 00 0e 02 00 93 0b 00 d0 79 5b 9d 5a 49 54 81 ce 23 01 c3 7f 60 78 67 78 fe 85 36 7c 32 ec df 58 36 1a 36 12 3e 4f 9f 3b Data Ascii: Pa+&(U.Q'-iKQX(1DtXh"[:f,4dn72$\|:yY kTqe"Y+@ gKIc!w!LL4V,u~MbeRwa!"q#g2j&F^)4ks@.swsTL1oy[ZIT#`xgx6\|2X66>O;
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 71 ce 44 55 ac e1 e5 10 a5 d2 d4 32 08 c6 20 e3 84 1f 84 91 09 d9 ac dd e0 66 c7 23 b9 c1 d9 e3 7d 67 42 6b 47 03 14 53 74 03 77 da 1d 0a b8 45 45 1f de f0 93 cf 08 1c 7c cd e0 11 6a eb db 35 06 49 a2 0f 6d ba f8 89 03 13 41 b0 dc 09 03 92 d1 40 e7 13 53 a4 01 0b 3b f5 d4 90 39 88 06 04 47 2b 62 81 c8 61 d5 4d 10 87 60 1d 92 38 07 6e f6 18 3c 33 ec 04 9c 53 8e 3c 04 29 12 13 2d cc e7 6a e0 7a fa 29 82 86 2a d0 01 cd 90 d6 a0 72 96 b3 82 20 cb f5 a7 2a 5f b1 25 55 ac 24 ef 8a 44 29 24 9c 6d 94 f8 d0 6b f4 4b 04 ac 40 43 4f 17 6a 4a e4 eb 5d b9 8c 19 f3 c2 40 f4 5f 47 e8 16 d7 5f bd ed 57 cd 54 32 58 bf 5e bb d9 b4 33 72 ce 59 aa 5c 99 e6 c2 c9 33 d5 6f df 76 4e ce e4 67 7a a6 d1 4f f2 a3 46 9d 67 d6 fd 49 e3 90 c7 88 2a ff 1a 62 ac 93 ad 03 01 25 e6 1a 9e Data Ascii: qDU2 f#}gBkGStwEE\|j5ImA@S;9G+baM`8n<3S<)-jz)r _%U$D)$mkK@COjJ]@_G_WT2X^3rY\3ovNgzOFgI*b%
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 2f d0 a3 26 cd af f5 23 8d 7a db a3 e3 d3 90 9e 4e 3d bd e4 f0 a3 45 a4 0c 4a 9b cf 8d f0 26 31 87 f3 42 1b 98 20 4d 00 44 48 0a e7 4f 98 eb b3 39 e0 f1 2b 39 de 77 3f 92 b1 0f 11 57 4d ed 76 d2 04 5a 6e 81 1a df 75 9b f9 b2 ad 29 70 68 f3 d8 cc d0 fe cc 6d ee 0c a6 0e b3 0d a7 14 a4 9e b1 8d 9c 67 2c a6 52 95 2c 6f 91 f6 57 7e 36 d5 3a 02 24 35 50 3f 54 92 dd 04 de 53 9d 2a 55 0b ba a6 47 23 2e 38 fe f2 d5 e9 b3 78 17 8f 1c 6a 01 07 56 2a 99 b3 ca 63 18 6c e0 af 83 be 88 e5 55 6d f1 26 31 57 51 6e 48 2f d4 41 4e bf 6f aa 94 cd 44 f9 81 96 ef 6d cd 2c e8 0b b0 b0 8f ea 9e 9b a8 98 20 95 b6 a9 e1 71 fb f0 7d 05 5a fd c2 6f 46 54 16 bd 77 c6 ba e2 ca 2c ae 91 ab 89 7b 67 e0 b4 a7 2c f5 b6 52 83 82 c7 67 8b 4a 95 d4 c7 6c 48 90 bd e4 56 c9 80 50 b3 aa f9 4d Data Ascii: /&#zN=EJ&1B MDHO9+9w?WMvZnu)phmg,R,oW~6:$5P?TSUG#.8xjVclUm&1WQnH/ANoDm, q}ZoFTw,{g,RgJlHVPM
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 6a 9e 26 3e fa 56 22 41 af eb f2 d4 d3 d0 e7 c3 91 7e be ac 38 1a 39 b7 cc 60 c1 72 e0 df 81 ff 2d 75 38 e8 d9 73 a2 a6 1a d6 d4 38 e1 05 dc 42 d0 64 d8 66 9e b1 ca 92 50 c9 70 58 2f ad 6e 36 ca b7 6e 78 eb 77 fb 79 5b 3b d6 b3 c3 77 3a a1 5b 11 83 6c 9a 4f 10 86 ab ee f4 a0 68 46 a9 66 41 c1 ab aa 88 50 3d 73 83 68 19 4a 57 ad e6 a7 0a 55 5c e8 04 54 92 89 01 ad eb 03 5c b8 6d 60 ea 24 39 a7 60 b8 fb 69 0d c6 58 89 d4 e4 24 a3 f5 92 14 f8 7a 3e 17 f5 ae 75 4b 68 8b 14 2d ae b8 d6 e7 f4 23 5f 24 59 67 10 a2 ae d6 e2 6d f6 d1 b6 70 68 d2 55 24 4a 24 58 cc bf 65 57 38 48 52 74 83 47 3e cd e4 e6 db 04 96 08 bb f8 7a 38 54 8a 81 0a 26 33 c5 6f e0 94 f5 51 b8 e0 4a 49 9c bd c3 81 80 61 1f 25 cf 0c 32 de f6 3f ba 6f fe 30 ea da 77 5d ad 07 9a 97 ee 49 e6 77 bb Data Ascii: j&>V"A~89`r-u8s8BdfPpX/n6nxwy[;w:[lOhFfAP=shJWU\T\m`$9`iX$z>uKh-#_$YgmphU$J$XeW8HRtG>z8T&3oQJIa%2?o0w]Iw
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: f9 a5 0d 9b c8 fe 0f c4 60 67 b9 c1 e9 55 51 5d 25 85 b6 2c bf 72 df 51 fb 8b 1e b6 d7 50 d1 52 ef 00 64 f1 87 47 ec eb 35 fb bf 3b 21 2a 45 40 b3 7c d9 5e 01 d9 45 d4 bb ba 38 a3 50 30 3d 1a 07 fd ae d4 24 09 b7 f2 d8 c7 2d d2 b5 bf ea a2 ac 62 c2 06 ae 6f 62 60 d6 16 22 72 c2 a7 09 56 11 84 30 9d 20 ae 84 b2 23 dc bc 71 f3 bb be 89 66 01 57 c3 76 f0 a6 e9 ac 8a 1c 20 e3 99 78 56 a8 c7 b5 27 aa b5 d4 24 1f 69 0e fc 71 30 e2 18 99 ce 37 c5 6b 04 6c 15 55 31 de 1e 07 12 c8 e3 ee 71 75 fc e5 2d d5 17 13 13 ad dc cf 12 b5 52 4a ea 36 1a 0a c1 8f d7 ad 30 7a 04 1e fa 18 e6 a8 b4 49 04 97 2a cd b3 58 a2 b5 b4 2e 28 d2 a9 55 58 0d ab fe ef 74 04 d0 03 b7 bc bb 15 73 5b 4d 1f 4b 08 31 ed 20 e5 2d a0 4d 11 f1 33 3c 17 71 e8 1c 9e a6 e5 21 7f 4b bf 58 d3 3d d9 50 Data Ascii: `gUQ]%,rQPRdG5;!E@\|^E8P0=$-bob`"rV0 #qfWv xV'$iq07klU1qu-RJ60zIX.(UXts[MK1 -M3<q!KX=P
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 30 01 1e 1f b1 17 13 17 8b 02 81 28 50 b0 f9 16 b5 ac 2a a4 a8 61 80 c1 94 88 fe b1 1c 57 a4 11 01 d1 88 c4 56 95 e0 89 38 f6 b3 b6 7a df a8 36 c1 49 9c 32 63 90 ff 5e 45 91 2b db ec 6c 55 19 6b 1c 3c 43 52 3d c9 01 7b f1 e8 c0 ae de 46 d7 77 7d 2b 6d 8d e8 7f a5 ed 01 06 c4 4e 49 fc 6a 1c 22 fa c3 0b b1 3b 25 f3 27 71 8a cc 41 fe bd 62 13 cc 7f 51 91 d2 a1 34 d4 38 69 df 85 c8 5c 12 5d 45 fb 6e 87 9f 08 ec 73 fd d2 37 6a 5b 51 9c 90 5b ec 92 71 97 a4 a6 f4 fc ef 07 8a 44 51 5c a2 51 6b bd fa 24 ee bb 78 8c 0a 36 89 c1 bd 44 e0 66 51 3a 8a 40 68 e3 b2 53 dc 89 65 fc c4 c7 02 d1 12 d9 8e 4a 7a fa ae d2 dc 62 74 ea dc bd f0 80 c5 6a 16 f1 0e d4 2f 5f 40 84 6d fd 19 4e a9 bd 3f 01 22 27 7f b9 50 03 51 5b 7e 5d 78 88 93 76 ba 89 35 f1 37 84 77 37 c6 89 ab d7 Data Ascii: 0(P*aWV8z6I2c^E+lUk<CR={Fw}+mNIj";%'qAbQ48i\]Ens7j[Q[qDQ\Qk$x6DfQ:@hSeJzbtj/_@mN?"'PQ[~]xv57w7
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 4a 05 bb 0d 08 a9 da 61 24 fd 7b c0 82 76 d7 fb cd c0 d3 2e b2 ec e3 62 0b 6c 76 6c a8 a0 a5 2f b2 38 ff d9 14 f3 fa d2 eb b1 f5 7a a7 3d 0f e9 d5 8a fd a0 e9 7d cb 0c 39 78 6b a7 64 7e 6c 5e 3d 92 29 ce 6f 7d 1f 3b a3 74 bc c8 70 ed 94 5e 3c d5 4f 6d 1a ba 5d 19 ff e7 fb 2f cf ae 8a b3 b0 ab f5 b9 f0 f0 a3 20 bc 03 8e 69 44 b2 f4 1a 65 66 e0 10 f6 27 1d db b6 2a e2 08 08 9f 84 44 0f 20 d1 7f ef a6 55 6e fd 9f d3 9d ea 50 bd d3 5c 9f c2 ea 42 44 ec 19 b3 a6 6a 12 38 2c ec e0 79 36 b5 7a 89 4b ce e6 b9 ee 5a 44 c2 ac 02 e0 08 ff 61 9c 02 c6 d4 e6 52 96 8a 44 ef c1 16 b6 78 e7 6a b2 5b 4e cb b0 17 ff cb 73 53 a8 5f 72 19 3c 2a 6f 81 5f 24 f3 cf 6e 29 35 b0 8b 43 be 9c 9b 38 fd f3 69 b3 ce c3 cf 1c 63 45 b9 5b 5e f8 ea f3 f6 8a 3a 45 d1 71 fe ee 97 60 da 3d Data Ascii: Ja${v.blvl/8z=}9xkd~l^=)o};tp^<Om]/ iDef'D UnP\BDj8,y6zKZDaRDxj[NsS_r<o_$n)5C8icE[^:Eq`=
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: b4 5b 53 92 7f 1a 48 5b f8 7f 49 7f 18 9f 8f 7d 80 ab 23 12 9d 04 5c 0e 19 fe 48 cc cd 89 84 5d 2d f1 76 8d 79 f4 00 3d f5 25 91 f4 53 36 dd ac 5c 83 f2 8f 43 c2 fa 62 26 9c 18 84 e6 b7 e5 6c ad 3d 20 fa 30 0d cb 09 f3 60 84 f8 f4 a8 06 3a c2 a3 a8 a9 46 40 56 43 60 b9 d4 6b 44 b5 7c 2b 6e 5d d3 ea ec 24 a3 38 51 a5 e9 8a ac 50 d5 29 84 5c 6f 80 af 65 ac 40 c6 6c 58 de f9 1e 98 c1 71 ca 44 b4 00 f9 ff ac 74 7c 01 45 c2 00 9f 42 65 80 bc 2b 86 37 50 38 1b c6 8b 24 09 49 6a 23 e1 46 c7 21 a4 ed c9 6d c9 5a ce d6 91 a5 a8 09 e9 bc 38 16 1e db 7b ee 0b c7 25 0c cd 6d c9 e1 7b e0 0e 06 43 66 5f 49 c3 f4 ae ec ef 07 98 53 d6 4f a1 1c ff 32 24 e7 81 55 33 4c 66 83 86 48 d6 b9 b5 52 a8 ab 46 d7 36 b4 e8 54 49 48 6b c6 d7 bc 61 6c 31 24 32 cf d3 c4 df a9 82 a6 45 Data Ascii: [SH[I}#\H]-vy=%S6\Cb&l= 0`:F@VC`kD\|+n]$8QP)\oe@lXqDt\|EBe+7P8$Ij#F!mZ8{%m{Cf_ISO2$U3LfHRF6TIHkal1$2E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49757	104.16.79.73	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:05 UTC	596	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t.ly sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:05 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:05 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8efd89381dc21899-EWR
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 72 20 69 3d 6e 28 36 39 39 29 2c 6f 3d 6e 28 37 35 32 29 2c 61 3d 6e 28 31 30 34 29 2c 63 3d 6e 28 35 30 38 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3a 22 22 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 2c 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 29 74 2b 3d 65 3b 65 6c 73 65 20 74 72 79 7b 76 61 Data Ascii: r i=n(699),o=n(752),a=n(104),c=n(508);!function(){function e(e){var t="";if(t=window.location.origin?window.location.origin:"".concat(window.location.protocol,"://").concat(window.location.host),e&&"string"==typeof e)if(0===e.indexOf("/"))t+=e;else try{va
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 29 3d 3d 74 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 29 2c 5f 28 74 29 7d 21 62 26 26 77 26 26 28 62 3d 21 30 2c 42 28 29 29 7d 65 6c 73 65 22 76 69 73 69 62 6c 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 29 3b 76 61 72 20 45 3d 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 26 26 28 28 30 2c 61 2e 6f 6e 4c 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 49 44 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 49 4e 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 54 54 46 42 29 28 78 29 2c Data Ascii: )==t&&(null==w?void 0:w.triggered)\|\|P(),_(t)}!b&&w&&(b=!0,B())}else"visible"===document.visibilityState&&(new Date).getTime()}));var E={};"function"==typeof PerformanceObserver&&((0,a.onLCP)(x),(0,a.onFID)(x),(0,a.onFCP)(x),(0,a.onINP)(x),(0,a.onTTFB)(x),
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 2c 70 26 26 28 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 43 29 2c 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 26 26 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 29 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 2c 6e 3d 22 22 3b 74 72 79 7b 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ,p&&((0,o.sendObjectBeacon)("",a,(function(){}),!1,C),void 0!==p.forward&&void 0!==p.forward.url&&(0,o.sendObjectBeacon)("",a,(function(){}),!1,p.forward.url)))},B=function(){var t=function(){var t=s.getEntriesByType("navigation")[0],n="";try{n="function"
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 28 6f 2c 61 2c 63 29 7b 6e 3d 65 28 63 29 3b 76 61 72 20 75 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 6e 3d 3d 75 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 75 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 75 29 2c 5f 28 75 29 29 2c 69 28 29 29 2c 72 2e 61 70 70 6c 79 28 74 2c 5b 6f 2c 61 2c 63 5d 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 6e 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 Data Ascii: (o,a,c){n=e(c);var u=e(),s=!0;return n==u&&(s=!1),s&&(A()&&((null==w?void 0:w.url)==u&&(null==w?void 0:w.triggered)\|\|P(u),_(u)),i()),r.apply(t,[o,a,c])},window.addEventListener("popstate",(function(t){A()&&((null==w?void 0:w.url)==n&&(null==w?void 0:w.tri
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 45 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 45 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 20 73 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 69 66 28 70 26 26 70 2e 73 65 72 76 65 72 54 69 6d 69 6e 67 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 2c 6e 3d 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 72 65 73 6f 75 72 63 65 22 5d 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 72 3d 6e 5b 74 5d 2c 69 3d 30 2c 6f 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 72 29 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 6f 5b 69 5d 2c 63 3d 61 Data Ascii: E.inp.element=c.eventTarget,E.inp.name=c.eventType))}}function F(){return s.timeOrigin}function I(){if(p&&p.serverTiming){for(var e=[],t=0,n=["navigation","resource"];t<n.length;t++)for(var r=n[t],i=0,o=s.getEntriesByType(r);i<o.length;i++){var a=o[i],c=a
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 29 7d 28 29 7d 2c 37 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 69 7c 7c 28 74 2e 73 69 74 65 54 6f 6b 65 6e 26 26 74 2e 76 65 72 73 69 6f 6e 73 2e 66 6c 3f 22 2f 63 64 6e 2d 63 67 69 2f 72 75 6d 3f 22 2e 63 6f 6e 63 61 74 28 65 29 3a 22 2f 63 64 6e 2d 63 67 69 2f 62 65 61 63 6f 6e 2f 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 2e 63 6f 6e Data Ascii: )}()},752:function(e,t){"use strict";t.__esModule=!0,t.sendObjectBeacon=void 0,t.sendObjectBeacon=function(e,t,n,r,i){void 0===r&&(r=!1),void 0===i&&(i=null);var o=i\|\|(t.siteToken&&t.versions.fl?"/cdn-cgi/rum?".concat(e):"/cdn-cgi/beacon/performance?".con
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 76 61 72 20 74 3d 61 28 29 3b 69 66 28 74 29 7b 69 66 28 65 3c 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 29 72 65 74 75 72 6e 22 64 6f 6d 2d 69 6e 74 65 72 61 63 74 69 76 65 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 72 65 74 75 72 6e 22 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 61 64 65 64 22 7d 72 Data Ascii: ing"===document.readyState)return"loading";var t=a();if(t){if(e<t.domInteractive)return"loading";if(0===t.domContentLoadedEventStart\|\|e<t.domContentLoadedEventStart)return"dom-interactive";if(0===t.domComplete\|\|e<t.domComplete)return"dom-content-loaded"}r
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 72 29 26 26 28 28 6f 3d 74 2e 76 61 6c 75 65 2d 28 69 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 69 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 Data Ascii: e){Promise.resolve().then((function(){t(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},n\|\|{})),r}}catch(e){}},g=function(e,t,n,r){var i,o;return function(a){t.value>=0&&(a\|\|r)&&((o=t.value-(i\|\|0))\|\|void 0===i)&&(i=t.value,t.delt
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 7b 7d 2c 50 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 43 28 29 2c 69 3d 70 28 22 46 43 50 22 29 2c 6f 3d 6d 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 76 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 29 7d 29 29 3b 6f 26 26 28 6e 3d 67 28 65 2c 69 2c 42 2c 74 2e Data Ascii: {},P((function(){var n,r=C(),i=p("FCP"),o=m("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-v(),0),i.entries.push(e),n(!0)))}))}));o&&(n=g(e,i,B,t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49758	104.17.25.14	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:05 UTC	575	OUT	GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:05 UTC	944	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:05 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-7918" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 981438 Expires: Sun, 30 Nov 2025 13:21:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mOR86L8zIIiWiNF3iXqxjoXUfa%2BPuT37DDBLrlRX9lQI7HJPOHBls9x9BN9%2BRjlUxyYjULRBHTMtcGhjEpdcm%2BkeZfnk7tbD1Jprwl2FLR7QR1A016xVbFxFJnPxuggXwFlvG2xP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8efd89381d767c69-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:05 UTC	425	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 Data Ascii: s/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 Data Ascii: t-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 Data Ascii: .fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-e
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: ent:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{conten
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: tent:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: -slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{co
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: efore{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: }.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{con
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49759	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:05 UTC	1110	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:05 UTC	500	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:05 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Thu, 05 Dec 2024 16:16:23 GMT ETag: "6751d1d7-302c" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd89382af943c1-EWR X-Frame-Options: DENY Expires: Thu, 12 Dec 2024 13:21:05 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-12-10 13:21:05 UTC	869	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 74 43 6f 6e 74 65 6e 74 3d 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 2e 61 74 74 72 69 62 75 74 65 73 5b 6e 5d 3b 74 72 79 7b 72 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 72 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 72 2e 6e 61 6d 65 2c 72 2e 76 61 6c 75 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2e 6e 61 6d 65 2c 72 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 6f 29 7b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 49 28 65 29 3b 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 7d 66 75 6e Data Ascii: tContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespaceURI,r.name,r.value):e.setAttribute(r.name,r.value)}catch(o){}}return e}function l(t,e){var n=new I(e);t.dispatchEvent(n)}fun
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 2e 63 61 6c 6c 28 6e 2e 61 74 74 72 69 62 75 74 65 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 2f 5e 6f 6e 2f 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 5b 65 2e 6e 61 6d 65 5d 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 65 2e 6e 61 6d 65 2c 65 2e 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 74 2e 5f 5f 63 66 51 52 3d 7b 64 6f 6e 65 3a 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: orEach.call(n.attributes,function(e){/^on/.test(e.name)&&"function"!=typeof n[e.name]&&n.setAttribute(e.name,e.value.substring(t.handlerPrefixLength))})})}function S(){var t=window;"undefined"!=typeof Promise&&(t.__cfQR={done:new Promise(function(t){retur
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 69 70 74 22 29 2e 6e 6f 4d 6f 64 75 6c 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 3b 72 65 74 75 72 6e 20 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 45 76 65 6e 74 43 74 6f 72 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 45 76 65 6e 74 43 74 6f 72 22 2c 7b 76 61 6c 75 65 3a 45 76 65 6e 74 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 45 76 65 6e 74 43 74 6f 72 7d 28 29 2c 4c 3d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 2c 5f 3d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 2c 48 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: ipt").noModule,I=function(){var t=window;return t.__rocketLoaderEventCtor\|\|Object.defineProperty(t,"__rocketLoaderEventCtor",{value:Event}),t.__rocketLoaderEventCtor}(),L=document.write,_=document.writeln,H=Object.setPrototypeOf\|\|{__proto__:[]}instanceof
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 72 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7c 7c 74 2e 74 79 70 65 3d 3d 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 22 6d 6f 64 75 6c 65 22 26 26 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 7d 2c 74 7d 28 29 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 79 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 72 76 65 73 74 53 63 72 69 70 74 73 49 6e 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d Data Ascii: rScript=function(t){return t.hasAttribute("defer")\|\|t.type===this.nonce+"module"&&!t.hasAttribute("async")},t}(),N=function(t){function e(){return null!==t&&t.apply(this,arguments)\|\|this}return y(e,t),e.prototype.harvestScriptsInDocument=function(){var t=
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 30 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 57 72 69 74 74 65 6e 43 6f 6e 74 65 6e 74 41 6e 64 44 69 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 4c 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 5f 2c 74 68 69 73 2e 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 29 3f 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3f 74 68 69 73 2e 69 6e 73 65 72 74 43 6f Data Ascii: guments[n];return e.write(t,!0)}},t.prototype.flushWrittenContentAndDisable=function(){document.write=L,document.writeln=_,this.buffer.length&&(document.contains(this.insertionPointMarker)?this.insertionPointMarker.parentNode===document.head?this.insertCo
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 73 2e 62 79 70 61 73 73 45 76 65 6e 74 73 49 6e 50 72 6f 78 69 65 73 3d 21 31 2c 74 68 69 73 2e 6e 61 74 69 76 65 57 69 6e 64 6f 77 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 64 6f 63 75 6d 65 6e 74 2c 22 72 65 61 64 79 53 74 61 74 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 7d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 74 68 69 73 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 28 29 2c 74 68 69 73 2e 75 70 64 61 74 65 49 6e 6c 69 6e 65 48 61 6e 64 6c 65 72 73 28 29 7d 72 65 74 75 72 Data Ascii: s.bypassEventsInProxies=!1,this.nativeWindowAddEventListener=window.addEventListener;try{Object.defineProperty(document,"readyState",{get:function(){return t.simulatedReadyState}})}catch(e){}this.setupEventListenerProxy(),this.updateInlineHandlers()}retur
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 6f 64 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 72 3d 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 5d 2c 69 3d 32 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 5b 69 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 76 61 72 20 61 3d 6d 28 74 68 69 73 29 2c 63 3d 72 26 26 72 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 50 72 6f 78 69 65 64 48 61 6e 64 6c 65 72 3b 69 66 28 21 63 29 7b 76 61 72 20 73 3d 66 28 72 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 3f 28 Data Ascii: ods=function(t){var e=this,n=t.addEventListener,r=t.removeEventListener;t.addEventListener=function(t,r){for(var o=[],i=2;i<arguments.length;i++)o[i-2]=arguments[i];var a=m(this),c=r&&r.__rocketLoaderProxiedHandler;if(!c){var s=f(r);"function"==typeof s?(
2024-12-10 13:21:05 UTC	1369	IN	Data Raw: 6e 67 73 2e 6e 6f 6e 63 65 29 29 7b 76 61 72 20 6e 3d 69 28 65 29 2c 72 3d 76 28 29 26 26 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 6e 74 65 67 72 69 74 79 22 29 3b 69 66 28 6e 26 26 21 72 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 65 6c 22 2c 22 70 72 65 6c 6f 61 64 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 73 22 2c 22 73 63 72 69 70 74 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 6e 29 2c 65 2e 63 72 6f 73 73 4f 72 69 67 69 6e 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 2c 65 2e 63 72 6f 73 73 4f 72 69 67 69 6e 29 2c 64 6f 63 75 Data Ascii: ngs.nonce)){var n=i(e),r=v()&&e.hasAttribute("integrity");if(n&&!r){var o=document.createElement("link");o.setAttribute("rel","preload"),o.setAttribute("as","script"),o.setAttribute("href",n),e.crossOrigin&&o.setAttribute("crossorigin",e.crossOrigin),docu
2024-12-10 13:21:05 UTC	511	IN	Data Raw: 69 6e 67 26 26 6f 26 26 21 69 3f 64 28 6e 29 3a 70 28 6e 29 3b 72 65 74 75 72 6e 20 63 3f 28 61 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 72 29 2c 63 29 3a 28 65 28 22 46 61 69 6c 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 63 74 69 76 61 74 61 62 6c 65 20 63 6f 70 79 20 6f 66 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 29 7d 2c 74 7d 28 29 2c 52 3d 22 64 61 74 61 2d 63 66 2d 73 65 74 74 69 6e 67 73 22 2c 54 3d 22 7c 22 2c 42 3d 22 64 61 74 61 2d 63 66 2d 6d 6f 64 69 66 69 65 64 2d 22 2c 55 3d 76 6f 69 64 20 30 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 Data Ascii: ing&&o&&!i?d(n):p(n);return c?(a.insertBefore(c,r),c):(e("Failed to create activatable copy of script \n"+n.outerHTML+"\n","Script will not be executed."),null)},t}(),R="data-cf-settings",T="\|",B="data-cf-modified-",U=void 0;!function(){var t=document.cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49761	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:05 UTC	1109	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:05 UTC	498	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:05 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Thu, 05 Dec 2024 16:16:23 GMT ETag: "6751d1d7-4d7" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd893aee1cefa7-EWR X-Frame-Options: DENY Expires: Thu, 12 Dec 2024 13:21:05 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-12-10 13:21:05 UTC	871	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-12-10 13:21:05 UTC	368	IN	Data Raw: 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 74 65 6d 70 6c 61 74 65 22 29 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 72 79 7b 69 28 72 5b 6e 5d 2e 63 6f 6e 74 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 74 29 2c 6f 28 74 29 2c 61 28 74 29 7d 63 61 74 63 68 28 72 29 7b 65 28 72 29 7d 7d 76 61 72 20 6c 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 22 2c 75 3d 22 2e 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 2c 66 3d 22 64 61 74 61 2d 63 66 65 6d 61 69 6c 22 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f Data Ascii: .querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49762	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:05 UTC	1361	OUT	GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-solid-900.woff2?fb8184add5a3101ad0a321db81c70285 HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t.ly sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://t.ly/css/app.css?id=6e55a0bd9e1689eaf679 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:06 UTC	722	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:06 GMT Content-Type: font/woff2 Content-Length: 156496 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-26350" expires: Tue, 09 Dec 2025 17:54:50 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Age: 69844 Vary: Accept-Encoding CF-Cache-Status: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd893dad790f7f-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:06 UTC	647	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 63 50 00 0a 00 00 00 06 1a 05 00 02 63 04 03 05 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 ab 3c 00 81 91 02 ca 96 c2 20 cb ab 40 05 87 6d 07 20 25 02 0d 93 d6 01 d0 1a 56 27 00 00 aa bf 8d 87 11 29 9a 3d 3c 45 e4 ac d7 03 a0 aa aa aa aa aa a6 25 04 1c d7 b6 bd aa 0a 00 08 7e f4 93 9f fd e2 57 bf f9 dd 1f fe e4 cf fe e2 af fe e6 ef fe e1 9f fe e5 df fe e3 bf fe e7 ff fe 53 60 30 ee fe 81 30 2d db 71 b9 3d 5e 9f df f0 2f 3f f6 7a 6e 0a 44 6f 2c 1c 70 46 a4 d0 81 42 f2 19 38 54 72 aa fe f9 1a 35 a1 db 6e fb 18 ff 51 97 3e cb be 00 a0 74 3a bf 9f 94 51 c5 09 98 53 e4 1d 01 d6 74 eb d8 ac 65 56 19 8d fc 9f 8a 29 e5 60 a2 49 67 62 22 ad b6 a8 98 bf dc 22 5a 49 32 7d 01 2c b2 83 aa Data Ascii: wOF2cPc6$ `< @m %V')=<E%~WS`00-q=^/?znDo,pFB8Tr5nQ>t:QSteV)`Igb""ZI2},
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: f4 84 9d 8d dd 3b 3b d3 ab 95 56 1a e5 15 92 60 91 50 02 01 03 48 42 18 0c 0b c6 04 c7 21 9c 43 5c 8c ed c3 f8 38 af 8d 13 77 df 3e 5d f2 19 0c f6 d8 7c fb ec 2c 73 c1 e9 c2 5e b6 2f f8 f0 05 db 97 7a 7f fe 9b ad be ce 15 ad ba 25 a9 aa a4 3a 49 27 a9 68 77 13 ba 92 74 84 36 c2 18 8c a2 8f 07 0c 6f 06 66 05 58 d7 5e 15 e6 09 bb de 6b ce cc 8a cf eb 15 73 be 9e e8 9a 86 ff 9f 66 5a ff ee 03 aa 7a 05 28 a9 04 25 a9 a5 ea 76 93 4a 6a 49 ed c4 89 e5 64 ec 0e b4 1d 07 1c c7 c1 1e c8 ae c7 13 f0 52 60 b0 07 93 0c 7a 88 7b 88 3d c4 9d 2c 51 3e ef 72 3e e7 4c 3e 64 89 64 a8 00 34 e7 ec 21 8c dd 85 fd cd 5d 6e 5d b6 85 4b 15 41 b8 55 41 44 90 6b 7f 70 13 dd e5 1d 44 77 79 12 05 44 f8 10 11 9e d6 15 e2 22 40 01 19 3e 46 21 02 b7 26 40 90 c7 55 ee 1f 07 8a 80 8d b5 Data Ascii: ;;V`PHB!C\8w>]\|,s^/z%:I'hwt6ofX^ksfZz(%vJjIdR`z{=,Q>r>L>dd4!]n]KAUADkpDwyD"@>F!&@U
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 3d 4e a8 a9 f1 73 a1 6a 36 ce a3 19 b8 fd 0b 1c 07 3d 5a c1 2b d6 6d e0 24 be e6 b4 f7 b9 f9 41 f8 f9 ba a4 75 ee cc 62 8e 23 b2 ce f1 6c d7 b5 04 6a ec af ec 9a 33 6b ab 3f ff e2 38 d4 aa 7b 39 f8 3f 95 ab b2 8d 77 f3 f9 d0 0c 45 f7 aa b9 a6 39 37 70 3a 8e 17 ab d2 2b d3 db 78 f5 b0 81 74 49 79 e8 19 96 b5 a0 36 45 e2 f7 30 5f 79 6e 16 93 b6 14 2b 7b 46 ea e0 c5 0a 26 73 29 e8 e2 fd 75 8a ea f9 1e ed 0d cd 8b 76 d1 ef 86 c5 c0 55 e7 8b 72 86 84 39 b3 cf 64 29 5d ec 87 46 7b bc 9f bd 7d 67 ce a8 d6 25 d5 f3 f9 d9 a0 d2 5e e4 1c 32 3b 34 2f b4 6e e8 7e 8c e3 19 68 a4 47 29 f0 c5 c9 83 d8 dc 42 be c5 d1 6c 2c a5 53 8b b9 8e fa ad ac 8e b5 6f c8 79 72 e9 5f 1c 82 e3 03 3a e7 f5 92 5e 25 ae 05 d2 33 4a 9d 36 7e 91 dc 18 af 6a c7 49 ce 1a 7f 4e 59 fe 79 1e 6d Data Ascii: =Nsj6=Z+m$Aub#lj3k?8{9?wE97p:+xtIy6E0_yn+{F&s)uvUr9d)]F{}g%^2;4/n~hG)Bl,Soyr_:^%3J6~jINYym
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: d9 25 c7 e4 9c 5c 92 bb 72 5f 1e ca 47 f9 22 df e5 bf 8d 6c d3 d8 ec b6 b8 9d 6c 97 d9 83 f6 a8 3d 6f af d8 1b f6 95 7d 1f a4 08 76 06 7b 82 6f ae 98 2b ef 2a b9 6e ae af 1b e8 86 ba 59 6e 9e 5b ef b6 bb 5d 6e af bb e6 5e b8 57 ee bd fb e8 3e f9 b0 3e bd cf e9 6b fa 46 be a7 ef e7 27 fa 99 7e 89 5f ee 57 fb 2d 7e a7 df 87 30 08 8b f0 88 80 18 88 8b 78 88 8f 04 48 8c 24 48 8a 64 48 8e 14 28 81 52 28 87 f2 a8 80 1a 68 8a 66 68 8e 16 e8 80 8e e8 84 ce e8 81 11 18 85 09 98 88 49 98 8c 29 98 8a 19 98 8d f9 58 80 85 58 84 15 58 8d 35 d8 81 3d b8 81 db 78 01 83 00 0e 1e af f0 09 5f f1 0d df f1 03 ff 19 91 91 18 95 d1 18 83 b1 19 87 f1 18 9f c9 98 9c 29 98 86 69 99 91 99 98 99 59 98 83 f9 59 84 25 58 81 15 59 83 f5 58 9f 8d d9 82 ed 39 88 63 39 89 33 38 8b 73 39 Data Ascii: %\r_G"ll=o}v{o+*nYn[]n^W>>kF'~_W-~0xH$HdH(R(hfhI)XXX5=x_)iYY%XYX9c938s9
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 89 e9 62 4a ff df 3f fb 6b 7f e4 37 fc 8c 9f f6 03 be d3 b7 f9 26 df e8 1b 7c 85 2f f6 85 3e cb 27 78 4f ef ea cd 92 3f c9 ab e4 42 72 36 39 95 1c 4b 8e 24 9b 93 f5 c9 a8 f0 30 3c 08 ab 42 f7 d0 3e b4 0b a5 43 d1 50 38 14 0c 59 42 46 fb 6d 3f ed 87 7d b3 af f6 c5 3e db 27 fb 08 d8 07 7b 6b 6f ec 95 bd b4 17 f6 dc 9e d9 53 7b 62 8f ed a1 dd b2 6b 76 49 0b 00 cd 07 34 4f 73 01 cd 01 34 1b 00 34 13 d0 0c 4d 03 34 e5 75 c6 24 4d fc f7 ba c7 6b 1c a0 b1 80 c6 68 b4 46 69 c4 12 cb 1a 06 68 a8 86 68 b0 06 bd 46 1b a0 be ea 03 a8 b7 7a a9 b3 3a a9 9d da aa 4d 5a 5d a8 96 6a 91 6a eb 51 53 35 01 d4 18 50 23 35 4c c9 1f 5d b5 01 d5 52 4d 40 35 00 55 07 54 4d 55 55 45 95 54 11 50 05 95 07 54 4e 65 55 46 89 72 2a c7 11 fc 9e 33 29 23 a0 0c 4a af b4 fc c5 9f 00 7f f0 Data Ascii: bJ?k7&\|/>'xO?Br69K$0<B>CP8YBFm?}>'{koS{bkvI4Os44M4u$MkhFihhFz:MZ]jjQS5P#5L]RM@5UTMUUETPTNeUFr*3)#J
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: d9 ba 40 17 ea 22 5d ac 4b 74 a9 2e d3 e5 ba 4e d7 eb 36 dd ae 7b f5 88 9e d4 9b 7a 47 1f ea 0b 7d a5 df f4 a7 fe d7 0c cd d4 2c cd d6 1c cd d5 3c cd d7 02 2d d4 22 6d d6 56 97 bb 67 5e c7 eb 7a 3d af ef cd bd a5 b7 f2 8a 17 de c9 3b 7b 17 ef e6 83 7c 88 0f f5 61 3e c2 47 f9 04 df ce b7 f7 1d 7c 47 df c9 77 f6 5d 7d 2f df c7 f7 f5 c3 fd 58 3f d1 4f f5 d3 fd 0c 3f d3 cf f2 b3 fd 42 bf dc 6f f1 c7 fd 0f ff cf ff f7 19 3e d3 67 f9 6c 9f e3 0b 7d 69 6a 9a f6 4b fb a7 73 d3 4d e9 96 74 4f 7a 28 3d 9c 9e 4b af a6 0f d2 87 e9 93 f4 79 fa 2a 7d 97 7e 4f 33 d2 82 b4 26 6d ce ea 65 d5 59 64 dd b3 3e 59 bf 6c 20 f5 00 7a 25 00 f0 ad 40 19 28 03 06 e4 40 05 10 d0 05 e8 0a 64 40 2f 60 30 50 13 18 06 ec 01 34 06 f6 ff ed 5a 00 07 b8 96 c0 81 ae 15 70 90 6b 0d 1c ec da Data Ascii: @"]Kt.N6{zG},<-"mVg^z=;{\|a>G\|Gw]}/X?O?Bo>gl}ijKsMtOz(=Ky*}~O3&meYd>Yl z%@(@d@/`0P4Zpk
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: dc 8a 2b 68 6e a7 b9 03 d7 d1 dc cd 72 dc 40 73 2f cd 2b fd dc 9f a8 79 8d e6 33 3c 49 53 d1 7c 81 b7 68 be a2 f9 16 1f d2 7c 2f 7c 4a f3 83 ec 7b 13 e7 47 da 0e 3e a3 1d 48 3b 1d 7e a6 ed d2 ce 4e 1a 43 3b 17 ed ea a4 49 68 d7 a4 dd 80 b4 20 ed 46 b4 bb 93 96 a4 dd 93 76 1f d2 fa b4 fb d1 1e 4f da 98 f6 44 da d3 49 bb d2 9e 49 7b 11 69 1f da 4b 68 2f 25 1d 46 7b 05 ed 95 a4 23 68 6f a4 bd 89 74 14 ed ed b4 b7 93 8e a1 bd 87 f6 1e d2 b1 04 22 93 8e 23 3a 44 87 3c 2b d1 8f e8 4f 3a 91 18 40 0c d0 ee 7c 85 18 48 8c 20 9d 4c 8c 22 c6 92 ce 26 c6 bd d0 59 8c 18 0f e9 7c 62 fc 11 f2 09 c4 04 c4 44 a4 0b 88 89 41 67 2d 62 12 74 d6 25 26 45 ba 98 98 0c 79 5f 62 f2 11 d2 25 c4 54 c4 62 a4 4b 89 25 18 a1 b3 1c b1 24 b1 0c e9 61 62 59 90 0f 25 96 1b 31 1f 44 2c 4f Data Ascii: +hnr@s/+y3<IS\|h\|/\|J{G>H;~NC;Ih FvODII{iKh/%F{#hot"#:D<+O:@\|H L"&Y\|bDAg-bt%&Ey_b%TbK%$abY%1D,O
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: ee 44 1c 47 dd 95 ba 3b 71 0a 75 4f 22 e2 74 ea 3e d4 fd 88 33 a8 07 51 d0 2d 44 3d 98 7a c8 bd c5 12 f5 30 ea e1 c4 b9 d4 23 a9 c7 10 e7 53 4f b0 8f 71 31 f5 24 ea c9 c4 25 d4 53 a9 67 12 97 51 cf a6 9e 43 5c 4d bd 18 89 6b a9 97 d9 f1 a5 37 29 71 1d f5 8e c8 b8 9e 7a 2f f5 7e e2 06 ea 43 d4 87 9f 14 f7 a8 8f 52 1f 27 6e a5 3e a9 c4 1d d4 a7 23 e2 4e ea 4b d4 97 89 bb a8 6f d0 c7 b8 87 fa 36 f5 03 e2 5e ea c7 d4 4f 88 87 a9 9f 53 bf 20 1e a5 7e 8d 95 8f f8 bf 68 43 89 c7 69 63 d1 66 20 5e a7 cd 68 84 d1 69 33 d1 66 25 be a3 cd 46 84 31 68 b3 d3 e6 22 7e a2 cd 4d 84 d1 68 f3 d0 16 25 12 6d 31 fe ad f4 b4 c5 69 a7 11 7f d3 ce a0 5d 44 bf 02 ed 12 da e5 f4 6b d3 ae a4 5d 43 bf 3e ed 7a da 6d f4 1b d3 ee a0 dd 49 bf 35 ed 6e da bd f4 db d2 ee a7 3d 44 bf 03 Data Ascii: DG;quO"t>3Q-D=z0#SOq1$%SgQC\Mk7)qz/~CR'n>#NKo6^OS ~hCicf ^hi3f%F1h"~Mh%m1i]Dk]C>zmI5n=D
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: be 26 a6 3f 0a df 11 37 0e 85 1f 89 33 28 44 a2 cb 50 38 44 74 2d 8a 8e b8 d7 51 2c 45 dc cb 28 96 26 ee 6d 14 2b 10 f7 19 8a d5 89 7b 0b c5 86 c4 75 46 71 30 d1 67 28 8e 27 e6 34 14 27 10 73 3a 8a 93 89 fd 04 c5 e9 c4 95 43 71 19 d1 89 28 2e 27 f6 39 14 f7 12 f7 01 8a 87 11 e7 51 3c 9e d8 cb 50 3c 85 d8 f9 28 9e 45 7c 03 14 cf 27 3a 1e c5 0b dc 70 a1 6e b8 48 9f 17 2e 97 98 6e 28 5e 49 cc 13 28 5e 4b f4 30 8a d7 13 3b 0c c5 9b 88 bd 1e c5 db 88 9f 80 e2 1d 04 8b e2 9d f6 3e 66 b2 f8 a0 c4 8c 43 f1 21 62 2a a3 f8 08 31 75 50 7c 94 d8 8f 50 7c cc e3 e1 71 89 7e 42 f1 09 a2 9f 51 7c 8a 98 e3 50 7c 9a 98 55 28 3e e3 86 17 25 76 22 8a 2f 11 1d 42 f1 65 62 ab a2 f8 0a 31 b5 51 7c 95 d8 ff 50 7c 8b e8 7a 14 df 21 f6 6d 14 3f 22 ee 7b 14 3f 26 76 3c 8a 9f 10 fd Data Ascii: &?73(DP8Dt-Q,E(&m+{uFq0g('4's:Cq(.'9Q<P<(E\|':pnH.n(^I(^K0;>fC!b*1uP\|P\|q~BQ\|P\|U(>%v"/Beb1Q\|P\|z!m?"{?&v<
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 38 0c 37 4b 3b 2b 95 ce 34 ed ac 54 3a 53 2d 8f c3 30 0c e3 29 e2 30 0c c3 58 4c 1e a2 e9 49 32 5d 9a 9e 24 d3 f5 1f 8d ca c3 d4 17 6a eb 76 8e e3 04 98 5e 4b b3 ac 16 04 59 23 cb b3 66 de 4c 6b e9 94 23 38 94 d6 aa 49 50 ee eb cb 38 82 e5 a0 5c 1f ac 0f e6 79 c6 11 dc a2 3e 38 3c 23 6f 36 1a 19 fb 35 f3 66 9a 06 79 30 37 e2 e9 38 08 54 39 b8 c3 af 74 44 71 10 78 e1 ec 43 1e 5c 56 8d 8c 99 7d db 96 fc 2a e5 6a b5 7a 70 f5 60 dd e6 57 3a a2 39 cb e2 20 50 cc 93 28 5d fe 6b cc ac 97 b2 2c 0e a6 79 0b ad b8 6d f9 f2 e5 ef bc ea 60 8a ca 54 5b 33 d4 e6 6c 98 3e 94 66 59 ad 5a cd 86 ec e1 06 7d a3 8c 36 4a 2b e2 12 b7 2c 4d 41 dc 5c 59 af b4 36 07 e5 a6 32 ff ab 13 97 64 26 25 6e de 2d 8b d1 c8 f4 f3 be c9 8d 31 45 f9 67 b5 4e eb 15 5a d5 55 de be 5e 51 96 c6 Data Ascii: 87K;+4T:S-0)0XLI2]$jv^KY#fLk#8IP8\y>8<#o65fy078T9tDqxC\V}*jzp`W:9 P(]k,ym`T[3l>fYZ}6J+,MA\Y62d&%n-1EgNZU^Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49764	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:05 UTC	1362	OUT	GET /fonts/vendor/@fortawesome/fontawesome-free/webfa-brands-400.woff2?8d3cabfc66809162fb4d7109aefa44dc HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t.ly sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://t.ly/css/app.css?id=6e55a0bd9e1689eaf679 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:06 UTC	722	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:06 GMT Content-Type: font/woff2 Content-Length: 117372 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-1ca7c" expires: Tue, 09 Dec 2025 17:54:51 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69844 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd893dab3a43ec-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:06 UTC	647	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 ca 7c 00 0a 00 00 00 03 14 3d 00 01 ca 31 03 05 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 90 54 00 a5 7e ca 8b d6 7c cb 90 58 05 88 1d 07 20 25 1e 8a 71 eb 80 d4 e0 3c 00 00 d4 d6 9f 07 65 44 d6 69 7b 00 54 55 55 6f 09 c1 dd ab f6 1f 20 fc f4 cb 6f 7f f8 d3 5f fe f6 8f 7f fd e7 7f 7f 19 18 bb 03 62 d9 8e eb f9 86 ff af fd b2 f3 ee cc 0f 30 bb d8 85 5e 20 76 04 6a 75 2f d8 65 61 22 64 54 2a b2 cb 4f f9 95 80 2e 08 6f 09 37 cb 60 a2 d7 89 02 2f ea bc 9a f3 22 e6 65 d2 17 23 c9 95 32 85 07 a8 3f b1 f7 eb 60 0a 43 2b f0 04 38 55 16 ca 1c 2e 4b 20 e6 22 47 07 00 cf 12 23 44 76 36 2d ff df 3b ad fe de 12 94 4a aa 92 2d 0b ca 10 b0 ad 58 0a 50 59 b1 94 b8 c9 9d 4e 0f 60 86 e8 c4 fb Data Ascii: wOF2\|=16$ `T~\|X %q<eDi{TUUo o_b0^ vju/ea"dT*O.o7`/"e#2?`C+8U.K "G#Dv6-;J-XPYN`
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 8c ab 2c 19 fe 5b 6b 9f 6b ec 73 6e 46 cc b9 99 65 dc cc 6a e3 66 55 1b 37 ab db b8 59 dd c6 ad 6e dc cc 2e 62 b2 0a 4d 46 75 03 7c d1 00 c1 1f 4d 31 13 20 bf 6a e0 81 13 24 ff d7 37 bb 11 f1 b2 80 27 6e 76 23 62 b2 80 11 b7 1a 23 b2 89 11 05 82 46 83 9c 06 c9 2f f0 c8 98 00 9e c6 93 54 5f e0 93 a3 85 f9 63 0c 6f 2c 6f fc 06 f9 0c 90 7c 23 1d 6f 6c 6b 1c 4b 2b db 19 1b 32 49 d0 5f a3 51 21 0b 0e 62 b7 ca 98 e0 3d 73 8a 0f 29 24 69 ab c9 58 d9 6d ef fb ac 0f 2a a2 04 32 99 84 9a 88 33 f7 3f a2 2e 40 4d 13 5b 16 9c ce 33 91 69 75 fb ad 66 69 09 09 c5 d8 b2 ca 68 b0 90 cd fe 9f 7c 93 5e 05 28 45 43 b2 32 3b 1b 1b 62 fb fe 9f 87 ab 35 5e b5 f6 a5 24 c0 30 b0 57 82 41 2e cb f1 e4 eb ad 8f f7 aa f7 ac 50 ae ff 01 60 e5 c7 fb 27 af be be 01 5f f2 19 7d b2 02 50 Data Ascii: ,[kksnFejfU7Yn.bMFu\|M1 j$7'nv#b#F/T_co,o\|#olkK+2I_Q!b=s)$iXm*23?.@M[3iufih\|^(EC2;b5^$0WA.P`'_}P
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 49 e5 2e 3c 96 a7 b2 83 e7 f0 7c 5e c6 eb 78 23 6f e3 dd 7c 92 af f0 75 be cd 77 f9 1e df e7 c7 fc 9c 3f f3 37 4e e6 3f fc 8f ff 33 73 2a 67 49 3f 19 26 e3 64 2e 99 47 e6 93 a5 64 53 d9 4a b6 97 1d e5 1b 99 22 35 99 aa 47 eb 45 f5 52 7a 79 bd a6 be 52 df aa ef d2 f7 eb 27 f5 33 fa 55 fd ae fe 58 7f a6 a3 6e e8 69 6e c5 1d e9 ae e1 ae e5 de e2 7e e8 7e ec fe 6c 94 32 ba 1a 93 8d 39 c6 02 63 89 b1 c2 d8 60 9c 30 4e 19 97 8d bb c6 2b e3 ad e1 34 92 3c d5 3c b5 3c 5b 3d 7b 3d 0f 3d 2f 3d 4e cf 0f af 17 00 72 41 1e 28 0c 25 a1 2a f4 84 5e e0 db bf 29 6d d5 f1 ea bc c7 53 32 65 44 ca e1 94 bb 5a 88 16 af 15 d1 8a 69 55 34 3b 1d 98 f1 db 6e 70 bd 7c 5d 95 2a fd 71 10 0e c6 11 38 0a 47 e3 44 74 e0 6c 5c 40 3f dc 6d c4 ad b8 1d 4f e3 65 7c 88 cf f1 3b fe 45 17 a6 Data Ascii: I.<\|^x#o\|uw?7N?3sgI?&d.GdSJ"5GERzyR'3UXnin~~l29c`0N+4<<<[={==/=NrA(%^)mS2eDZiU4;np\|]*q8GDtl\@?mOe\|;E
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: dc 4b dc 87 33 c4 83 34 85 73 c4 63 c4 53 38 4f bc 48 0b dc 44 bc 79 0a 37 13 6f 25 de 86 5b 88 77 d2 cd dc 6d c4 bb 89 8f e2 76 e2 f3 c4 97 e8 43 ae a3 79 98 e6 51 dc 44 f3 22 cd cb b8 95 e6 75 9a f7 70 07 cd 77 34 3f e0 01 9a 5f 68 7e c5 c3 34 bf d3 b4 78 94 e6 2f 9a bf 30 9e ec 43 f6 c5 d3 e4 20 72 30 9e 25 87 93 23 f0 3c 39 8a 9c 80 17 c9 d9 c9 d9 b1 27 39 07 39 27 de 20 e7 43 bb f4 16 b9 20 b9 28 de 26 57 22 57 c6 07 e4 a6 34 c6 47 e4 e6 e4 16 eb 51 5f 6e 45 ee b4 ce ed 90 bb 90 bb e2 3b 72 f7 6d 0f fc 40 1e 4c 1e 8a 1f c9 c3 c9 23 f1 0b 79 34 79 e2 67 94 67 f2 14 fa 90 67 91 67 a3 23 cf a1 29 f4 23 cf 25 2f c0 9f e4 45 b4 cb 98 48 5e 43 5e 8b 7f c9 1b c8 9b f0 3f 79 33 95 45 90 b7 90 b7 fa c9 e7 0e 79 3b 79 37 d1 8f bc 9f f7 30 06 93 4f 93 cf 12 43 Data Ascii: K34scS8OHDy7o%[wmvCyQD"upw4?_h~4x/0C r0%#<9'99' C (&W"W4GQ_nE;rm@L#y4ygggg#)#%/EH^C^?y3Ey;y70OC
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 2a 65 c3 a4 25 07 4d 8b 0a b7 de 68 ce f9 be 6d 69 b1 cb 18 80 06 30 3b c5 11 be 01 42 68 c3 16 00 e6 3d a5 76 d2 24 6e 53 54 66 18 c8 28 eb 16 48 93 34 a1 26 8d 64 54 e4 05 5e 58 ff 42 c6 6c 21 ec e9 e4 f8 44 1c 9c e2 62 b3 b9 88 4f 9b e1 ca fa 9b 6d 21 6c c6 a6 93 cf f5 38 60 4b 7e a5 e2 2f 3d 9d 31 83 ed 86 01 67 d3 d9 09 be 1a c7 70 8b af a3 42 45 c2 bd 4d 4a 3d 3e e0 d5 88 aa 38 58 93 17 85 4a 95 df 7e ba 94 6a ea 89 cb d8 b3 1c c1 29 d5 34 fe 9c e7 3a 9a 66 5a 5c 38 cf 82 5d eb 99 5c fa 17 7b 0e d7 34 4a 77 83 63 c6 dc d7 5f a1 9a c6 1d c1 ad 83 ab 94 0b ee 68 9a 79 e5 71 cc 37 1f df ff fc b1 f4 ea 8b e7 70 4d a3 57 5e ef 32 06 08 e5 d9 ff e0 07 f0 1a 28 00 cc 22 d9 50 c5 aa 4d 4d 3b 1f ca 54 98 53 76 ee a9 4c 75 8b bc b7 93 26 71 ac 7a 08 f1 60 af Data Ascii: *e%Mhmi0;Bh=v$nSTf(H4&dT^XBl!DbOm!l8`K~/=1gpBEMJ=>8XJ~j)4:fZ\8]\{4Jwc_hyq7pMW^2("PMM;TSvLu&qz`
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: e0 45 6f da eb b7 db 88 ed 76 7f ef a6 e5 63 1b 8d 95 8d b9 a5 ac de 87 d7 9a 96 30 f0 bb 92 3c bf 7b 20 4c 4f 18 91 3c bf fb ee 3c 07 f0 c1 a3 e1 c8 da 54 39 be d5 3a 20 0e 7c 8c b4 18 73 0f e9 ea 5d ee ce 73 32 91 af 18 cf c9 6c 3a bb ae 59 e3 16 2c 2b 9d 05 26 d5 14 55 bd bc 28 54 e6 a3 c0 b7 f8 17 19 a9 d2 fc 38 8b 0b 25 af b3 30 b4 5e b4 6c e8 86 e0 9c 9b 8b 5f 6d 1a 9c 73 61 e8 fa f2 8b 56 af 5d bb 76 d3 4d f8 f3 3e a2 3f 3d 19 72 ce 4d 5d 37 c4 6d b7 09 43 d7 4d ce f9 10 9b d3 27 df fb 5e 3c 8d 17 61 8b 61 8c b6 e3 fb 00 8e 82 fd 1e 28 e3 2c ee 91 e5 10 70 6d f4 00 30 3f ca 3b 4b e8 79 73 f3 ed ab c3 89 01 b3 95 e1 70 38 02 b6 fc 08 c7 58 a9 34 c6 63 a4 fb d6 5e ea e4 f1 fc bc d7 de ce 3b 4b 38 19 41 21 fd 39 3f fb ae b6 b8 e3 18 d6 01 30 89 95 2a Data Ascii: Eovc0<{ LO<<T9: \|s]s2l:Y,+&U(T8%0^l_msaV]vM>?=rM]7mCM'^<aa(,pm0?;Kysp8X4c^;K8A!9?0*
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 8c e1 89 ef 60 e4 93 f1 39 c2 13 ff f0 97 9d e0 ab f1 4d 07 f2 43 be f2 73 32 59 4d 99 34 49 b5 a8 dd b1 01 e7 dc 7c f5 6b 44 fc 9e 8d 59 18 5a 63 43 37 04 fe 9e a1 1b 62 fa 35 dc 13 86 6e 18 9c f3 e9 c8 47 f4 71 c4 39 37 e2 59 5d b2 8f 6f 42 98 e2 79 86 9f ef 96 78 55 53 26 6d 9f b7 3c 14 0e 37 9e 71 9f 25 a5 75 df 33 ec 38 6f c3 d0 af b1 48 d2 bb ee b2 a2 88 5d d3 0d 43 e0 ef eb 86 21 a6 7f 89 4b 11 62 34 fd 6b 4c 84 61 e8 06 77 c4 74 14 92 10 e5 f4 5f 43 12 e2 48 38 dc d0 e6 d9 d9 ec 3b f8 2a 7c 63 dc 7a 20 52 e5 d2 e8 df bd 4d 29 fd 9b 21 fc ea 5f 6c 45 a7 1e 43 b0 c7 1f 67 42 d8 0e a2 f5 c4 13 00 82 72 44 23 56 9e 78 02 9f 8a 22 97 7c d3 9b 1c 44 8b 09 e1 bc fb 3d 70 d1 7e f3 9b ed e7 73 ed f7 bc db 16 da 89 23 b7 94 aa cb 10 a6 c7 a8 63 7d c7 f4 2d Data Ascii: `9MCs2YM4I\|kDYZcC7b5nGq97Y]oByxUS&m<7q%u38oH]C!Kb4kLawt_CH8;*\|cz RM)!_lECgBrD#Vx"\|D=p~s#c}-
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 3e 90 e1 ef 2d 97 83 6c 90 0d b2 dc f0 dd 74 1c 47 53 52 27 1f 7f 6a 35 99 c2 35 e5 a3 2d ba 46 b4 28 d2 21 4e 8a 76 a8 cb 46 75 13 42 98 46 eb d6 09 29 b2 b2 1c 14 48 65 8b 0e a8 7e 1e 89 3d 6d 36 9f 8a 4c 64 83 6c 50 0c 8a 7c 9e cf 67 f3 59 35 ab 16 d3 c5 74 32 9d c4 6c c7 27 71 24 23 f9 ed 1a d0 46 ab 31 57 f5 ed ca 74 6a f5 88 52 8a 5c c4 b5 9a 63 2a c5 38 4c de 0a ce d4 16 fd c7 47 c0 57 d7 56 9e 9e 74 9b 23 02 30 26 b8 e0 94 02 00 50 4a 19 15 fc 5d 10 04 cd e5 95 68 a2 42 cc f1 5b e3 42 ab 70 1a 8d 46 c3 29 5a 0d 80 46 c9 0b f8 5b bf db 71 2c cf ef 74 1d cb 3b 79 d6 7e 65 3a b5 5a 04 95 ba 7b 88 ea fc eb d5 e2 fe cd e6 d6 76 12 d6 e7 ae 18 29 e7 42 30 06 80 c8 39 67 8c 52 0a c8 ee 88 74 0e d4 f4 6e 96 7f 50 b9 cb 6c 15 e9 fa 7a 5a b4 08 92 ee de 4f Data Ascii: >-ltGSR'j55-F(!NvFuBF)He~=m6LdlP\|gY5t2l'q$#F1WtjR\c*8LGWVt#0&PJ]hB[BpF)ZF[q,t;y~e:Z{v)B09gRtnPlzZO
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: ea e5 45 5a 49 72 0e 14 1a 4d ab d5 52 31 2e 00 52 6a 50 b8 14 5c 6c 94 a4 c5 94 4b cb 44 66 e5 20 e6 6a 3a 79 3a 1c f3 d0 a0 c8 4f f1 6f f5 e1 3f 93 24 81 90 02 b0 1a b8 08 c8 ea 00 60 20 22 6b 20 0a a0 94 d5 11 81 51 96 52 e4 8c d1 98 52 0d 8c 51 9f 52 07 19 43 87 52 9f 32 06 1a 00 31 a6 8c 71 a4 29 a3 0c 10 eb 8c 52 10 88 75 8e 88 06 00 d4 19 02 ba 50 63 00 34 84 84 d2 e4 ec bf 21 5e ff 71 48 ff ae 20 02 7c bf 2f 40 fc fa 1b 6f b0 79 c4 8c bd db 66 6a b4 ba 92 2b e0 4c f4 94 7a 1f a5 9b 30 66 86 21 00 29 45 25 8d eb 95 96 e0 38 00 8e 03 7f 82 0b ff 76 26 d8 78 5b af d7 13 88 54 34 e6 06 b3 38 93 0e a0 63 e3 07 00 e0 08 35 34 80 d2 c6 4f f9 9c 49 65 82 6b 99 00 da 30 6c d3 62 ff 75 fd 70 8d 71 c1 9a ab fd 7e 1c 30 33 03 08 a9 94 ea c3 e0 80 0d e0 38 f0 Data Ascii: EZIrMR1.RjP\lKDf j:y:Oo?$` "k QRRQRCR21q)RuPc4!^qH \|/@oyfj+Lz0f!)E%8v&x[T48c54OIek0lbupq~038
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: df bf 7f 7f dd b1 1d a7 f6 c1 c5 c7 fe fd e5 9f 42 67 f9 a7 fd 5a 0a 90 d6 fa d0 f9 f2 22 1c 09 c2 c6 f2 4f 1b 61 10 84 0d e8 34 c2 e0 d1 63 7c db fc c8 7d b6 93 c6 8e fd c1 fb 6c 27 49 1c fb 5e 48 6b fd 03 6d 5f be e3 df 72 10 36 bc 1d 72 c4 20 d6 de 93 f0 15 7b dc 15 9d 27 77 92 07 c8 b3 c9 4b c8 6b c8 db c9 7b c9 cf 11 52 71 58 a3 a2 ec 70 fa a2 fc 1a c7 71 d9 59 16 2b ef c4 b4 4c a6 e9 40 ca 72 5e e6 52 14 39 6f 46 0b 5d ab 90 38 aa 4a a7 84 2b a1 8b 2a 2f 84 4c d2 4a c8 24 5d 54 79 91 ae bd b5 e8 cd 8a bc 90 df cf 8f d2 64 ba 18 ec 16 c6 fb 3f dd 9f a1 48 2d c0 17 5c cd 79 c2 f9 fd 9c 27 14 19 a5 8f 00 bc 07 e9 55 c0 5d 87 22 5e 85 54 03 7f 00 91 e2 03 0c 50 8f 62 c4 38 46 8c 77 17 5e df 91 c3 52 ea dd af af 3b bc 24 8c 5f 4e 6a 76 a9 e9 77 a8 6b 02 Data Ascii: BgZ"Oa4c\|}l'I^Hkm_r6r {'wKk{RqXpqY+L@r^R9oF]8J+*/LJ$]Tyd?H-\y'U]"^TPb8Fw^R;$_Njvwk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49763	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:05 UTC	1291	OUT	GET /js/sweetalert.min.js?id=abedaaba10307a01ba0d HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:06 UTC	732	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-9807" expires: Tue, 09 Dec 2025 17:54:48 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69944 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd893dbd395e82-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:06 UTC	637	IN	Data Raw: 37 63 63 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 74 2e 53 77 65 65 74 61 6c 65 72 74 32 3d 65 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f Data Ascii: 7cc7!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):t.Sweetalert2=e()}(this,(function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeo
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2e 6b 65 79 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 2c 6f 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6f 26 26 6e 28 74 2c 6f 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 28 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 Data Ascii: ble=!0),Object.defineProperty(t,o.key,o)}}function o(t,e,o){return e&&n(t.prototype,e),o&&n(t,o),t}function i(){return(i=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var o in n)Object.prototype.hasOwnProperty.call(
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6f 2c 65 29 3b 72 65 74 75 72 6e 20 69 2e 67 65 74 3f 69 2e 67 65 74 2e 63 61 6c 6c 28 6e 29 3a 69 2e 76 61 6c 75 65 7d 7d 29 28 74 2c 65 2c 6e 7c 7c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 62 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 7d 66 Data Ascii: .getOwnPropertyDescriptor(o,e);return i.get?i.get.call(n):i.value}})(t,e,n\|\|t)}function l(t){return Object.keys(t).map((function(e){return t[e]}))}function d(t){return Array.prototype.slice.call(t)}function p(t){console.error("".concat(b," ").concat(t))}f
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 67 65 22 2c 22 69 6e 70 75 74 22 2c 22 66 69 6c 65 22 2c 22 72 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 2c 22 6c 61 62 65 6c 22 2c 22 74 65 78 74 61 72 65 61 22 2c 22 69 6e 70 75 74 65 72 72 6f 72 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 22 2c 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 73 22 2c 22 61 63 74 69 76 65 2d 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 2c 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 2c 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 2d 6c 69 6e 65 22 2c 22 6c 6f 61 64 69 6e 67 22 2c 22 73 74 79 6c 65 64 22 2c 22 74 6f 70 22 2c 22 74 6f 70 2d 73 74 61 72 74 22 2c 22 74 6f 70 2d 65 6e 64 22 2c 22 74 6f 70 2d 6c 65 66 74 22 2c 22 74 6f 70 2d 72 69 67 68 74 22 2c Data Ascii: ge","input","file","range","select","radio","checkbox","label","textarea","inputerror","validation-message","progress-steps","active-progress-step","progress-step","progress-step-line","loading","styled","top","top-start","top-end","top-left","top-right",
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 68 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 66 6c 65 78 22 3b 74 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 22 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 74 29 7b 74 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 22 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 74 2c 65 2c 6e 29 7b 65 3f 4c 28 74 2c 6e 29 3a 4f 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 29 7b 72 65 74 75 72 6e 21 28 21 74 7c 7c 21 28 74 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 76 61 72 20 65 3d Data Ascii: h&&void 0!==e?e:"flex";t.style.opacity="",t.style.display=n}function O(t){t.style.opacity="",t.style.display="none"}function M(t,e,n){e?L(t,n):O(t)}function V(t){return!(!t\|\|!(t.offsetWidth\|\|t.offsetHeight\|\|t.getClientRects().length))}function j(t){var e=
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 65 3f 2d 31 3a 30 7d 29 29 2c 65 3d 64 28 52 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5c 6e 20 20 61 5b 68 72 65 66 5d 2c 5c 6e 20 20 61 72 65 61 5b 68 72 65 66 5d 2c 5c 6e 20 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 73 65 6c 65 63 74 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 74 65 78 74 61 72 65 61 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 69 66 72 61 6d 65 2c 5c 6e 20 20 6f 62 6a 65 63 74 2c 5c 6e 20 20 65 6d 62 65 64 2c 5c 6e 20 20 5b 74 61 62 69 6e 64 65 78 3d 22 30 22 5d 2c 5c 6e 20 20 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 2c 5c 6e 20 20 61 75 64 69 6f 5b Data Ascii: e?-1:0})),e=d(R().querySelectorAll('\n a[href],\n area[href],\n input:not([disabled]),\n select:not([disabled]),\n textarea:not([disabled]),\n button:not([disabled]),\n iframe,\n object,\n embed,\n [tabindex="0"],\n [contenteditable],\n audio[
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 53 2e 65 72 72 6f 72 2c 27 22 3e 5c 6e 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 2d 6c 69 6e 65 2d 6c 65 66 74 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 2d 6c 69 6e 65 2d 72 69 67 68 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 69 63 6f 6e 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 53 2e 71 75 65 73 74 69 6f 6e 2c 27 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 29 2e Data Ascii: ).concat(S.error,'">\n <span class="swal2-x-mark"><span class="swal2-x-mark-line-left"></span><span class="swal2-x-mark-line-right"></span></span>\n </div>\n <div class="').concat(x.icon," ").concat(S.question,'"></div>\n <div class="').
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 63 68 65 63 6b 62 6f 78 2c 27 22 3e 5c 6e 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 6c 61 62 65 6c 2c 27 22 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 20 3c 2f 6c 61 62 65 6c 3e 5c 6e 20 20 20 20 20 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 74 65 78 74 61 72 65 61 2c 27 22 3e 3c 2f 74 65 78 74 61 72 65 61 3e 5c 6e 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 5b 22 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 22 5d 2c 27 22 20 69 64 3d 22 27 29 2e 63 6f 6e Data Ascii: class="').concat(x.checkbox,'">\n <input type="checkbox" />\n <span class="').concat(x.label,'"></span>\n </label>\n <textarea class="').concat(x.textarea,'"></textarea>\n <div class="').concat(x["validation-message"],'" id="').con
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 64 6f 6d 43 61 63 68 65 3a 6e 65 77 20 57 65 61 6b 4d 61 70 7d 2c 6d 74 3d 5b 22 69 6e 70 75 74 22 2c 22 66 69 6c 65 22 2c 22 72 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 2c 22 74 65 78 74 61 72 65 61 22 5d 2c 67 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 78 5b 74 5d 3f 78 5b 74 5d 3a 78 2e 69 6e 70 75 74 3b 72 65 74 75 72 6e 20 61 74 28 46 28 29 2c 65 29 7d 2c 68 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 74 28 74 2c 65 29 7b 76 61 72 20 6e 3d 46 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 22 2b 78 2e 63 6f 6e 74 65 6e 74 29 3b 65 2e 68 74 6d 6c 3f 28 6e 74 28 65 2e 68 74 6d 6c 2c 6e 29 2c 4c 28 6e 2c 22 62 6c 6f 63 6b 22 29 29 3a 65 2e 74 65 78 74 3f 28 6e 2e 74 65 Data Ascii: domCache:new WeakMap},mt=["input","file","range","select","radio","checkbox","textarea"],gt=function(t){var e=x[t]?x[t]:x.input;return at(F(),e)},ht={};function vt(t,e){var n=F().querySelector("#"+x.content);e.html?(nt(e.html,n),L(n,"block")):e.text?(n.te
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 79 28 22 49 6e 76 61 6c 69 64 20 63 75 72 72 65 6e 74 50 72 6f 67 72 65 73 73 53 74 65 70 20 70 61 72 61 6d 65 74 65 72 2c 20 69 74 20 73 68 6f 75 6c 64 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 6c 65 6e 67 74 68 20 28 63 75 72 72 65 6e 74 50 72 6f 67 72 65 73 73 53 74 65 70 20 6c 69 6b 65 20 4a 53 20 61 72 72 61 79 73 20 73 74 61 72 74 73 20 66 72 6f 6d 20 30 29 22 29 2c 65 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 72 65 74 75 72 6e 20 69 74 28 65 2c 78 5b 22 70 72 6f 67 72 65 73 73 2d Data Ascii: y("Invalid currentProgressStep parameter, it should be less than progressSteps.length (currentProgressStep like JS arrays starts from 0)"),e.progressSteps.forEach((function(t,i){var r=function(t){var e=document.createElement("li");return it(e,x["progress-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49765	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:06 UTC	1280	OUT	GET /js/app.js?id=5d823af68314a2848045 HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:06 UTC	733	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-eca90" expires: Tue, 09 Dec 2025 18:00:57 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Age: 69555 CF-Cache-Status: HIT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd893eac0c7293-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:06 UTC	636	IN	Data Raw: 37 63 63 31 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 3d 7b 36 39 32 37 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 31 30 37 32 33 29 2c 69 3d 5b 5d 2c 6f 3d 5b 5d 2c 61 3d 72 2e 6d 61 6b 65 52 65 71 75 65 73 74 43 61 6c 6c 46 72 6f 6d 54 69 6d 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6f 2e 73 68 69 66 74 28 29 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3b 28 74 3d 69 2e 6c 65 6e 67 74 68 3f 69 2e 70 6f 70 28 29 3a 6e Data Ascii: 7cc1/! For license information please see app.js.LICENSE.txt /(()=>{var e,t,n,r,i={69272:(e,t,n)=>{"use strict";var r=n(10723),i=[],o=[],a=r.makeRequestCallFromTimer((function(){if(o.length)throw o.shift()}));function s(e){var t;(t=i.length?i.pop():n
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 3d 6f 2e 6c 65 6e 67 74 68 2d 61 3b 74 3c 6e 3b 74 2b 2b 29 6f 5b 74 5d 3d 6f 5b 74 2b 61 5d 3b 6f 2e 6c 65 6e 67 74 68 2d 3d 61 2c 61 3d 30 7d 7d 6f 2e 6c 65 6e 67 74 68 3d 30 2c 61 3d 30 2c 21 31 7d 76 61 72 20 75 2c 6c 2c 63 2c 64 3d 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 3f 6e 2e 67 3a 73 65 6c 66 2c 66 3d 64 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 64 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 72 2c 30 29 2c 6e 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 72 2c 35 30 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 63 6c 65 61 Data Ascii: =o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var u,l,c,d=void 0!==n.g?n.g:self,f=d.MutationObserver\|\|d.WebKitMutationObserver;function h(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clea
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 6f 64 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 61 28 4d 2c 65 2e 70 61 72 61 6d 73 2c 65 2e 70 61 72 61 6d 73 53 65 72 69 61 6c 69 7a 65 72 29 2c 21 30 29 2c 67 2e 74 69 6d 65 6f 75 74 3d 65 2e 74 69 6d 65 6f 75 74 2c 22 6f 6e 6c 6f 61 64 65 6e 64 22 69 6e 20 67 3f 67 2e 6f 6e 6c 6f 61 64 65 6e 64 3d 77 3a 67 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 26 26 34 3d 3d 3d 67 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 30 21 3d 3d 67 2e 73 74 61 74 75 73 7c 7c 67 2e 72 65 73 70 6f 6e 73 65 55 52 4c 26 26 30 3d 3d 3d 67 2e 72 65 73 70 6f 6e 73 65 55 52 4c 2e 69 6e 64 65 78 4f 66 28 22 66 69 6c 65 3a 22 29 29 26 26 73 65 74 54 69 6d 65 6f 75 74 28 77 29 7d 2c 67 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 Data Ascii: od.toUpperCase(),a(M,e.params,e.paramsSerializer),!0),g.timeout=e.timeout,"onloadend"in g?g.onloadend=w:g.onreadystatechange=function(){g&&4===g.readyState&&(0!==g.status\|\|g.responseURL&&0===g.responseURL.indexOf("file:"))&&setTimeout(w)},g.onabort=functi
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 3f 68 28 29 3a 65 2e 73 69 67 6e 61 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 68 29 29 29 2c 70 7c 7c 28 70 3d 6e 75 6c 6c 29 2c 67 2e 73 65 6e 64 28 70 29 7d 29 29 7d 7d 2c 35 31 36 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 2c 69 3d 6e 28 39 31 38 34 39 29 2c 6f 3d 6e 28 33 30 33 32 31 29 2c 61 3d 6e 28 34 37 31 38 35 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 6f 28 74 29 2c 73 3d 69 28 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 2c 6e 29 3b 72 65 74 75 72 6e 20 72 2e 65 78 74 65 6e 64 28 73 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2c Data Ascii: .signal.aborted?h():e.signal.addEventListener("abort",h))),p\|\|(p=null),g.send(p)}))}},51609:(e,t,n)=>{"use strict";var r=n(64867),i=n(91849),o=n(30321),a=n(47185);var s=function e(t){var n=new o(t),s=i(o.prototype.request,n);return r.extend(s,o.prototype,
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 72 65 61 73 6f 6e 29 3a 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 65 29 3a 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3d 5b 65 5d 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 69 6e 64 65 78 4f 66 28 65 29 3b 2d 31 21 3d 3d 74 26 26 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 7d 2c 69 2e 73 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 7b 74 6f 6b 65 6e 3a 6e 65 77 20 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 Data Ascii: reason):this._listeners?this._listeners.push(e):this._listeners=[e]},i.prototype.unsubscribe=function(e){if(this._listeners){var t=this._listeners.indexOf(e);-1!==t&&this._listeners.splice(t,1)}},i.source=function(){var e;return{token:new i((function(t){e
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 3b 64 2e 6c 65 6e 67 74 68 3b 29 6f 3d 6f 2e 74 68 65 6e 28 64 2e 73 68 69 66 74 28 29 2c 64 2e 73 68 69 66 74 28 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 6f 72 28 76 61 72 20 66 3d 74 3b 72 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 72 2e 73 68 69 66 74 28 29 2c 70 3d 72 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 66 3d 68 28 66 29 7d 63 61 74 63 68 28 65 29 7b 70 28 65 29 3b 62 72 65 61 6b 7d 7d 74 72 79 7b 6f 3d 61 28 66 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 66 6f 72 28 3b 63 2e 6c 65 6e 67 74 68 3b 29 6f 3d 6f 2e 74 68 65 6e 28 63 2e 73 68 69 66 74 28 29 2c 63 2e 73 68 69 66 74 28 29 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 63 2e 70 72 6f 74 6f 74 79 Data Ascii: se.resolve(t);d.length;)o=o.then(d.shift(),d.shift());return o}for(var f=t;r.length;){var h=r.shift(),p=r.shift();try{f=h(f)}catch(e){p(e);break}}try{o=a(f)}catch(e){return Promise.reject(e)}for(;c.length;)o=o.then(c.shift(),c.shift());return o},c.prototy
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 2c 69 3d 6e 28 31 38 35 32 37 29 2c 6f 3d 6e 28 32 36 35 30 32 29 2c 61 3d 6e 28 34 35 36 35 35 29 2c 73 3d 6e 28 36 35 32 36 33 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 74 68 72 6f 77 49 66 52 65 71 75 65 73 74 65 64 28 29 2c 65 2e 73 69 67 6e 61 6c 26 26 65 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 29 74 68 72 6f 77 20 6e 65 77 20 73 28 22 63 61 6e 63 65 6c 65 64 22 29 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 75 28 65 29 2c 65 2e 68 65 61 64 65 72 73 3d 65 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 2c 65 2e 64 61 Data Ascii: n)=>{"use strict";var r=n(64867),i=n(18527),o=n(26502),a=n(45655),s=n(65263);function u(e){if(e.cancelToken&&e.cancelToken.throwIfRequested(),e.signal&&e.signal.aborted)throw new s("canceled")}e.exports=function(e){return u(e),e.headers=e.headers\|\|{},e.da
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 29 3f 72 2e 6d 65 72 67 65 28 7b 7d 2c 74 29 3a 72 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 73 6c 69 63 65 28 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 6e 5d 29 3f 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 6e 5d 29 3f 76 6f 69 64 20 30 3a 69 28 76 6f 69 64 20 30 2c 65 5b 6e 5d 29 3a 69 28 65 5b 6e 5d 2c 74 5b 6e 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 65 5d 29 29 72 65 74 75 72 6e 20 69 28 76 6f 69 64 20 30 2c 74 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 6e 5d 29 3f 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 6e Data Ascii: )?r.merge({},t):r.isArray(t)?t.slice():t}function o(n){return r.isUndefined(t[n])?r.isUndefined(e[n])?void 0:i(void 0,e[n]):i(e[n],t[n])}function a(e){if(!r.isUndefined(t[e]))return i(void 0,t[e])}function s(n){return r.isUndefined(t[n])?r.isUndefined(e[n
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 6f 64 65 64 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 21 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 29 26 26 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 29 26 26 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 74 29 7d 76 61 72 20 6c 2c 63 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 61 6c 3a 7b 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 66 6f 72 63 65 64 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 63 6c 61 72 69 66 79 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 21 31 7d 2c 61 64 61 70 74 65 72 3a 28 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7c 7c 76 6f 69 64 20 30 21 3d 3d 72 26 26 22 5b 6f 62 6a 65 63 74 20 70 Data Ascii: oded"};function u(e,t){!i.isUndefined(e)&&i.isUndefined(e["Content-Type"])&&(e["Content-Type"]=t)}var l,c={transitional:{silentJSONParsing:!0,forcedJSONParsing:!0,clarifyTimeoutError:!1},adapter:(("undefined"!=typeof XMLHttpRequest\|\|void 0!==r&&"[object p
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 28 5b 22 64 65 6c 65 74 65 22 2c 22 67 65 74 22 2c 22 68 65 61 64 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 68 65 61 64 65 72 73 5b 65 5d 3d 7b 7d 7d 29 29 2c 69 2e 66 6f 72 45 61 63 68 28 5b 22 70 6f 73 74 22 2c 22 70 75 74 22 2c 22 70 61 74 63 68 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 68 65 61 64 65 72 73 5b 65 5d 3d 69 2e 6d 65 72 67 65 28 73 29 7d 29 29 2c 65 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 39 37 32 38 38 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 32 35 2e 30 22 7d 7d 2c 39 31 38 34 39 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 Data Ascii: orEach(["delete","get","head"],(function(e){c.headers[e]={}})),i.forEach(["post","put","patch"],(function(e){c.headers[e]=i.merge(s)})),e.exports=c},97288:e=>{e.exports={version:"0.25.0"}},91849:e=>{"use strict";e.exports=function(e,t){return function(){f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49766	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:06 UTC	1326	OUT	GET /img/tly-logo-sm.png HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:06 UTC	719	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:06 GMT Content-Type: image/png Content-Length: 10096 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-2770" expires: Tue, 09 Dec 2025 17:54:47 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69943 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd893eaf96420b-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:06 UTC	650	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 64 a0 03 00 04 00 00 00 01 00 00 00 64 00 00 00 00 33 dc 5f 85 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 Data Ascii: PNGIHDRddpTgAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZ``dd3_pHYs
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: d1 6b c7 ae 57 e5 7a bd 8a 5e 1b d8 91 e2 05 41 94 a2 02 4a 97 26 45 9a 20 41 4a e8 bd 57 e9 84 5e fe f7 9d dd 6f 5d d6 64 53 08 90 f8 fc df f3 ec 9e b3 e7 cc 99 33 f3 7d 33 5f 9f d9 74 e5 9a 36 bb 84 bf 09 a8 23 99 d2 a7 47 cc a1 43 28 92 39 33 0a 64 cb 86 73 17 2e 20 5d ba 74 69 a6 87 37 a4 99 96 26 d0 50 a1 3c 3d 11 1f b3 6f 3f ba b7 6f 87 76 b5 6a 61 e5 de bd c8 92 31 63 02 4f a6 ae db 7f 1b 82 a4 bf e1 06 1c 3a 75 0a 45 72 e6 c0 c3 f7 df 8f b2 25 23 80 95 31 c8 96 39 13 d2 12 0b f8 5b 10 e4 d2 a5 4b c8 9c 31 03 f6 2e 5a 82 67 6e bf 0d a5 c2 c3 91 37 77 1e 37 f4 d3 21 ed b0 2b 35 f8 6f 41 90 8b 24 88 43 fc 85 33 68 d9 bc b9 23 44 a3 fa f5 80 b2 37 e2 c4 e9 d3 c8 98 3e ed 74 33 ed b4 d4 a1 f9 af 5f 9a 1d d9 32 65 42 f4 ae dd e8 d2 ed 09 54 2c 5f de 15 Data Ascii: kWz^AJ&E AJW^o]dS3}3_t6#GC(93ds. ]ti7&P<=o?ovja1cO:uEr%#19[K1.Zgn7w7!+5oA$C3h#D7>t3_2eBT,_
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 90 7f 6a dd d1 a3 28 59 a4 08 c6 f4 7a 1f ab e8 75 9d 3f 6b 0e 0a 31 e4 2a 3f 93 c0 df 55 be 7b cf 5e 77 2d 28 7b 73 25 12 fe 12 ab d2 ec 38 48 02 74 ef f5 01 32 d5 a8 e5 06 46 f5 f0 12 58 ba 65 ab 73 3e 9a e1 98 70 6d 29 53 e2 fa 12 84 7d c8 2c 3b e0 f8 09 e4 25 01 da b7 6a 85 98 b1 3f a2 4b 97 7b 18 07 1f 87 45 13 27 38 b6 91 3f 47 76 8f 16 14 12 8a d5 eb 3d 5a 90 04 6e 5c da 52 62 d1 a2 67 4d 68 0f 1a 3a cc bd ab 51 c9 70 2c e4 3b df 78 fe 79 4c ed df 17 1b 66 cf 72 03 e6 5a 6a 5b d7 97 20 44 8a 1b e9 67 cf 3a d7 f8 39 0a d2 4a 15 2a e0 cb 4f 3e c1 92 a5 4b d1 eb b3 cf 70 89 da cf 6f 93 26 61 25 c3 b4 15 cb 97 c3 9c e8 68 1c 3a 7c d8 e1 fd 4a 09 a2 4a 66 cf 9d 8b 57 9e 7b 16 6d 3a df 8b e9 53 67 a0 15 8f 51 95 2a 39 77 cc db 1f 7e c8 76 2c 73 61 e2 2b Data Ascii: j(Yzu?k1?U{^w-({s%8Ht2FXes>pm)S},;%j?K{E'8?Gv=Zn\RbgMh:Qp,;xyLfrZj[ Dg:9JO>Kpo&a%h:\|JJfW{m:SgQ*9w~v,sa+
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 49 ec 9c 3f d7 21 62 c0 90 21 68 d7 b2 25 0a 14 c8 cf 24 83 0c 10 3f 17 0b 51 07 53 0a 6c f4 9f a3 46 d4 f9 f1 27 30 3a 26 06 fb e8 7e 29 54 b0 80 4f b0 27 e5 5d aa 4f 1f 11 42 70 8a 0a cb 86 8d 9b b0 6a ed 5a ec d8 b5 0b c7 a8 b6 8b 05 56 a0 0a 7c 53 8d 1a f8 e6 bb ef f0 9f 97 5f 43 9d 36 2d 92 2c e4 53 54 ed 55 a3 15 47 c8 4e 7e 7d 8c 8d 16 88 95 15 a0 65 1e 71 eb ad cc 16 3c 85 47 1f 78 00 a1 0d 1a e2 0e 2e 39 13 d3 d2 34 bf ef ae bb 5c 59 43 a4 fb 71 05 5f 36 fa 85 a4 4a f4 02 8c 1e 3c c8 79 01 44 90 a4 80 3f 21 54 e7 81 3f fe c0 ec 79 f3 30 7a d2 4f 18 39 92 b1 93 63 87 58 1d 07 12 bd 09 d0 1a 15 fe ae c1 74 d4 aa 7c 67 ae 5a 55 1d 0e 92 aa 71 a5 28 41 d4 59 75 c2 f1 4e 6f cf c5 ca 64 e9 9e a0 01 28 f7 43 2d 36 f8 08 09 f3 d9 b0 11 00 23 73 fb e8 59 Data Ascii: I?!b!h%$?QSlF'0:&~)TO']OBpjZV\|S_C6-,STUGN~}eq<Gx.94\YCq_6J<yD?!T?y0zO9cXt\|gZUq(AYuNod(C-6#sY
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 0e eb a0 90 28 10 32 34 bd 95 4d d2 90 71 ea 3a dc f9 ad f3 ed b7 a3 71 eb 0e 28 26 db 84 d1 46 2b e7 4e 82 7c 65 cc 90 11 5d 99 3b 85 df 97 50 af 2d 0c 14 29 84 1a ad 5a 3b ff d9 41 26 df a1 52 65 cc 5d b4 08 1d e9 47 b3 88 65 90 ea e2 bd 65 6d d7 00 00 ed 90 b3 f4 89 59 00 4a bd f2 30 cc 78 1f 4f d2 8d 14 89 87 a8 41 ca b7 92 ec d8 c5 00 55 46 fa 70 2a 96 2b e7 cb 6f 92 30 0d 1c 95 ea a4 3e 12 c0 5a 1f 78 5f a7 8e ce d0 8a f2 6e 20 13 ac 17 aa 4b cf 6a cb 8c 6c 9c 1d 3f 6f dc 8c a6 b5 6b 21 1f 67 a2 ec 1c cd 52 bd b3 14 3d ca e3 16 2e c2 19 22 b2 08 e3 de 8a d5 a4 4b e7 31 e8 92 9a 22 aa 77 4e 64 7e d8 f8 e1 43 11 c2 55 5c 67 25 e3 38 43 cc fe 50 52 87 66 be 70 11 d8 d7 60 7d 09 bc 97 22 ee 77 59 ac ca 2e 91 f3 50 82 7c ed 4c 1a 4d 84 b9 34 a0 ea de 74 Data Ascii: (24Mq:q(&F+N\|e];P-)Z;A&Re]GeemYJ0xOAUFp*+o0>Zx_n Kjl?ok!gR=."K1"wNd~CU\g%8CPRfp`}"wY.P\|LM4t
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: 08 f4 11 b2 df a7 2d b1 79 cb 16 cc a1 0d f3 e2 53 4f b9 cf 98 09 13 b9 5c a0 b9 cb 96 57 5d 72 1e 7e 4b 6d e6 e1 c7 9e 44 95 16 cd 9c 5c 8b 39 f0 07 3a 37 6a e8 cb c7 d5 ec c1 a1 fd 24 32 dd fd 1b b6 f8 66 81 90 6c 04 b6 76 a9 ac de b9 86 ae 97 15 cc d2 5f ce cd 03 f6 91 2d 47 30 c1 ee c9 ae 5d d1 b8 7e 7d df 8c b6 67 02 8f 6e b6 f0 a2 36 36 b8 8d ec 51 f6 97 06 54 2f 06 df e4 84 fc 83 ef 50 94 31 38 03 4e 84 eb 44 ac 20 84 53 6f 1e 75 f0 67 ba ff 0b 0f 75 e9 e2 da 72 f1 12 a7 3e ad de 94 00 43 92 46 a2 7c 4f fa d4 aa 5e dd 05 ab c6 fd f4 13 b4 2f d6 9d e4 e5 0f 53 f5 3c 47 a3 6b 3c b5 ba 01 74 cf 84 33 9d 48 69 47 32 ca 14 16 8e 7a f0 01 a7 8a aa 4d 92 01 82 ec d4 bc 10 52 08 d3 b8 fc a0 14 37 28 33 d6 a3 65 10 5b 18 db 9f 3e 7b 36 9e fd e0 23 60 d3 06 Data Ascii: -ySO\W]r~KmD\9:7j$2flv_-G0]~}gn66QT/P18ND Sougur>CF\|O^/S<Gk<t3HiG2zMR7(3e[>{6#`
2024-12-10 13:21:06 UTC	1369	IN	Data Raw: de a3 ea 2b b6 a9 b7 ea 5f 80 ce d3 5c 08 06 09 12 44 0f ab f1 ea 90 8b c4 f1 58 85 82 33 5b a9 08 8f 1d c2 df f2 d7 c4 52 d8 2a 5a b7 6e fe 22 f4 78 eb 75 5f 62 9a 88 21 f7 f4 0a 2e 8e 94 90 17 6b 53 ea e8 59 5a d0 1a c5 b1 4c 82 de c3 a4 87 3e 3d 7b 62 f2 f4 e9 f1 12 c3 3a 61 b3 47 21 e2 d7 3a dd 85 b7 5f fb 37 76 72 91 8c ec 06 b5 51 60 c4 94 4b 7c cc f4 9f 51 b8 4e 3d 37 22 f7 cf 9f eb 94 0c c5 50 34 62 83 0d 14 ab cb 08 6c ef f7 3f 5a 19 6b 93 ee c9 28 6c 3b 76 1c 76 b1 4f bd b9 48 a9 78 48 31 1a b7 4f 3a 1c cc d8 b2 15 65 68 b9 db 73 fe 75 d9 79 a2 08 62 85 45 18 69 5e 8a 81 28 00 63 e0 ae 1b 0b 38 1b 8b 32 5c 22 6c a0 05 fa 6f 7c f0 21 c6 d1 a5 10 27 d0 dd a1 c0 56 77 5a b4 f6 77 45 71 96 f3 5e 14 82 44 48 19 6d b5 e8 0e 17 c8 c3 5a 89 eb 1a 0d 79 Data Ascii: +_\DX3[R*Zn"xu_b!.kSYZL>={b:aG!:_7vrQ`K\|QN=7"P4bl?Zk(l;vvOHxH1O:ehsuybEi^(c82\"lo\|!'VwZwEq^DHmZy
2024-12-10 13:21:06 UTC	1232	IN	Data Raw: 39 51 4b 69 e3 20 b2 1c 63 e9 ab dd ec 52 39 03 11 4d 4a c3 79 12 c1 f0 29 1b 59 19 96 0a 43 bf d9 b3 17 c3 c4 9e 19 b2 8d 4a c8 40 66 cf 68 81 a7 88 a1 99 21 8d d1 08 69 75 5e 8b e3 55 61 59 89 6d b8 12 db 72 50 45 de 49 8d e6 90 d8 56 ce 7c 74 ca 79 34 12 ff 3a 8c 18 62 51 2f f6 e8 e1 90 a5 4d cf 86 73 bf aa 28 b7 85 d2 39 1f 1b b3 e7 c4 82 14 4d 3c c3 99 62 a0 ce 3a 81 5e 38 84 8e c5 0c 98 46 b7 8b b6 fc 08 6f 71 0b de e9 d3 8f 6b e8 db 3a a1 6c 2c d1 9e bb 96 c7 eb 36 43 d4 49 8d 5c 11 45 41 1b 17 6a 3d 7e 88 7c f9 f2 31 62 c4 90 bf eb 6d fe 63 e7 f0 7e fd f0 34 7d 46 42 f8 8e 39 bf 20 9c fe 33 c1 05 b2 27 07 5e 96 22 b7 48 36 5a e3 da c4 80 95 7a 6f 79 6c 91 a8 a8 48 bc 4a 8b 1d 2b 96 f3 2f 75 0a 20 b2 46 35 12 2f 02 c7 68 63 08 8c 25 ba 1f d7 f8 eb Data Ascii: 9QKi cR9MJy)YCJ@fh!iu^UaYmrPEIV\|ty4:bQ/Ms(9M<b:^8Foqk:l,6CI\EAj=~\|1bmc~4}FB9 3'^"H6ZzoylHJ+/u F5/hc%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49771	216.137.52.40	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:06 UTC	502	OUT	GET /rw.js HTTP/1.1 Host: r.wdfl.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:07 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 18631 Connection: close Last-Modified: Tue, 10 Dec 2024 07:34:43 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Dec 2024 12:44:18 GMT Cache-Control: max-age=3600 ETag: "c9c777f9757507517be23d77545abcbd" X-Cache: Hit from cloudfront Via: 1.1 73dfb2192db76ab224b20f9d76621a72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: 4MaLKW7YUjyH93-kRsQEPKipdEqVM72bLL6T7mZHmXOaz3MBYB-J7Q== Age: 2209
2024-12-10 13:21:07 UTC	15853	IN	Data Raw: 2f 2a 21 20 42 75 69 6c 64 20 30 32 35 61 37 37 62 36 66 37 33 38 37 61 65 63 65 61 32 62 37 33 64 38 37 34 63 33 35 62 37 64 34 33 62 33 31 32 66 30 3a 31 37 33 33 38 31 35 38 37 39 31 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 Data Ascii: /! Build 025a77b6f7387aecea2b73d874c35b7d43b312f0:1733815879152 /!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n)
2024-12-10 13:21:07 UTC	2778	IN	Data Raw: 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 7d 28 29 2c 42 3d 49 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 5f 72 65 77 61 72 64 66 75 6c 5f 6c 6f 61 64 65 64 29 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 65 77 61 72 64 66 75 6c 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 2e 22 29 3b 65 6c 73 65 7b 77 69 6e 64 6f 77 2e 5f 72 65 77 61 72 64 66 75 6c 5f 6c 6f 61 64 65 64 3d 21 30 3b 74 72 79 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 64 61 74 61 2d 72 65 77 61 72 64 66 75 6c 5d 22 29 3b 69 66 28 65 29 7b 77 69 6e 64 6f 77 2e 52 65 77 61 72 64 66 75 6c 3d 4c 2c 4c 2e 73 65 74 75 Data Ascii: (t,"prototype",{writable:!1}),e}(),B=I;!function(){if(window&&window._rewardful_loaded)console.warn("Rewardful is already loaded.");else{window._rewardful_loaded=!0;try{var e=document.querySelector("script[data-rewardful]");if(e){window.Rewardful=L,L.setu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49778	104.16.80.73	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:07 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:07 UTC	373	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:07 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8efd89453b8ac335-EWR
2024-12-10 13:21:07 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-12-10 13:21:07 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49781	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:07 UTC	1066	OUT	GET /img/tly-logo-sm.png HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:08 UTC	719	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:08 GMT Content-Type: image/png Content-Length: 10096 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-2770" expires: Tue, 09 Dec 2025 17:54:47 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69945 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd89494b9542ce-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:08 UTC	650	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 64 a0 03 00 04 00 00 00 01 00 00 00 64 00 00 00 00 33 dc 5f 85 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 Data Ascii: PNGIHDRddpTgAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZ``dd3_pHYs
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: d1 6b c7 ae 57 e5 7a bd 8a 5e 1b d8 91 e2 05 41 94 a2 02 4a 97 26 45 9a 20 41 4a e8 bd 57 e9 84 5e fe f7 9d dd 6f 5d d6 64 53 08 90 f8 fc df f3 ec 9e b3 e7 cc 99 33 f3 7d 33 5f 9f d9 74 e5 9a 36 bb 84 bf 09 a8 23 99 d2 a7 47 cc a1 43 28 92 39 33 0a 64 cb 86 73 17 2e 20 5d ba 74 69 a6 87 37 a4 99 96 26 d0 50 a1 3c 3d 11 1f b3 6f 3f ba b7 6f 87 76 b5 6a 61 e5 de bd c8 92 31 63 02 4f a6 ae db 7f 1b 82 a4 bf e1 06 1c 3a 75 0a 45 72 e6 c0 c3 f7 df 8f b2 25 23 80 95 31 c8 96 39 13 d2 12 0b f8 5b 10 e4 d2 a5 4b c8 9c 31 03 f6 2e 5a 82 67 6e bf 0d a5 c2 c3 91 37 77 1e 37 f4 d3 21 ed b0 2b 35 f8 6f 41 90 8b 24 88 43 fc 85 33 68 d9 bc b9 23 44 a3 fa f5 80 b2 37 e2 c4 e9 d3 c8 98 3e ed 74 33 ed b4 d4 a1 f9 af 5f 9a 1d d9 32 65 42 f4 ae dd e8 d2 ed 09 54 2c 5f de 15 Data Ascii: kWz^AJ&E AJW^o]dS3}3_t6#GC(93ds. ]ti7&P<=o?ovja1cO:uEr%#19[K1.Zgn7w7!+5oA$C3h#D7>t3_2eBT,_
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 90 7f 6a dd d1 a3 28 59 a4 08 c6 f4 7a 1f ab e8 75 9d 3f 6b 0e 0a 31 e4 2a 3f 93 c0 df 55 be 7b cf 5e 77 2d 28 7b 73 25 12 fe 12 ab d2 ec 38 48 02 74 ef f5 01 32 d5 a8 e5 06 46 f5 f0 12 58 ba 65 ab 73 3e 9a e1 98 70 6d 29 53 e2 fa 12 84 7d c8 2c 3b e0 f8 09 e4 25 01 da b7 6a 85 98 b1 3f a2 4b 97 7b 18 07 1f 87 45 13 27 38 b6 91 3f 47 76 8f 16 14 12 8a d5 eb 3d 5a 90 04 6e 5c da 52 62 d1 a2 67 4d 68 0f 1a 3a cc bd ab 51 c9 70 2c e4 3b df 78 fe 79 4c ed df 17 1b 66 cf 72 03 e6 5a 6a 5b d7 97 20 44 8a 1b e9 67 cf 3a d7 f8 39 0a d2 4a 15 2a e0 cb 4f 3e c1 92 a5 4b d1 eb b3 cf 70 89 da cf 6f 93 26 61 25 c3 b4 15 cb 97 c3 9c e8 68 1c 3a 7c d8 e1 fd 4a 09 a2 4a 66 cf 9d 8b 57 9e 7b 16 6d 3a df 8b e9 53 67 a0 15 8f 51 95 2a 39 77 cc db 1f 7e c8 76 2c 73 61 e2 2b Data Ascii: j(Yzu?k1?U{^w-({s%8Ht2FXes>pm)S},;%j?K{E'8?Gv=Zn\RbgMh:Qp,;xyLfrZj[ Dg:9JO>Kpo&a%h:\|JJfW{m:SgQ*9w~v,sa+
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 49 ec 9c 3f d7 21 62 c0 90 21 68 d7 b2 25 0a 14 c8 cf 24 83 0c 10 3f 17 0b 51 07 53 0a 6c f4 9f a3 46 d4 f9 f1 27 30 3a 26 06 fb e8 7e 29 54 b0 80 4f b0 27 e5 5d aa 4f 1f 11 42 70 8a 0a cb 86 8d 9b b0 6a ed 5a ec d8 b5 0b c7 a8 b6 8b 05 56 a0 0a 7c 53 8d 1a f8 e6 bb ef f0 9f 97 5f 43 9d 36 2d 92 2c e4 53 54 ed 55 a3 15 47 c8 4e 7e 7d 8c 8d 16 88 95 15 a0 65 1e 71 eb ad cc 16 3c 85 47 1f 78 00 a1 0d 1a e2 0e 2e 39 13 d3 d2 34 bf ef ae bb 5c 59 43 a4 fb 71 05 5f 36 fa 85 a4 4a f4 02 8c 1e 3c c8 79 01 44 90 a4 80 3f 21 54 e7 81 3f fe c0 ec 79 f3 30 7a d2 4f 18 39 92 b1 93 63 87 58 1d 07 12 bd 09 d0 1a 15 fe ae c1 74 d4 aa 7c 67 ae 5a 55 1d 0e 92 aa 71 a5 28 41 d4 59 75 c2 f1 4e 6f cf c5 ca 64 e9 9e a0 01 28 f7 43 2d 36 f8 08 09 f3 d9 b0 11 00 23 73 fb e8 59 Data Ascii: I?!b!h%$?QSlF'0:&~)TO']OBpjZV\|S_C6-,STUGN~}eq<Gx.94\YCq_6J<yD?!T?y0zO9cXt\|gZUq(AYuNod(C-6#sY
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 0e eb a0 90 28 10 32 34 bd 95 4d d2 90 71 ea 3a dc f9 ad f3 ed b7 a3 71 eb 0e 28 26 db 84 d1 46 2b e7 4e 82 7c 65 cc 90 11 5d 99 3b 85 df 97 50 af 2d 0c 14 29 84 1a ad 5a 3b ff d9 41 26 df a1 52 65 cc 5d b4 08 1d e9 47 b3 88 65 90 ea e2 bd 65 6d d7 00 00 ed 90 b3 f4 89 59 00 4a bd f2 30 cc 78 1f 4f d2 8d 14 89 87 a8 41 ca b7 92 ec d8 c5 00 55 46 fa 70 2a 96 2b e7 cb 6f 92 30 0d 1c 95 ea a4 3e 12 c0 5a 1f 78 5f a7 8e ce d0 8a f2 6e 20 13 ac 17 aa 4b cf 6a cb 8c 6c 9c 1d 3f 6f dc 8c a6 b5 6b 21 1f 67 a2 ec 1c cd 52 bd b3 14 3d ca e3 16 2e c2 19 22 b2 08 e3 de 8a d5 a4 4b e7 31 e8 92 9a 22 aa 77 4e 64 7e d8 f8 e1 43 11 c2 55 5c 67 25 e3 38 43 cc fe 50 52 87 66 be 70 11 d8 d7 60 7d 09 bc 97 22 ee 77 59 ac ca 2e 91 f3 50 82 7c ed 4c 1a 4d 84 b9 34 a0 ea de 74 Data Ascii: (24Mq:q(&F+N\|e];P-)Z;A&Re]GeemYJ0xOAUFp*+o0>Zx_n Kjl?ok!gR=."K1"wNd~CU\g%8CPRfp`}"wY.P\|LM4t
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 08 f4 11 b2 df a7 2d b1 79 cb 16 cc a1 0d f3 e2 53 4f b9 cf 98 09 13 b9 5c a0 b9 cb 96 57 5d 72 1e 7e 4b 6d e6 e1 c7 9e 44 95 16 cd 9c 5c 8b 39 f0 07 3a 37 6a e8 cb c7 d5 ec c1 a1 fd 24 32 dd fd 1b b6 f8 66 81 90 6c 04 b6 76 a9 ac de b9 86 ae 97 15 cc d2 5f ce cd 03 f6 91 2d 47 30 c1 ee c9 ae 5d d1 b8 7e 7d df 8c b6 67 02 8f 6e b6 f0 a2 36 36 b8 8d ec 51 f6 97 06 54 2f 06 df e4 84 fc 83 ef 50 94 31 38 03 4e 84 eb 44 ac 20 84 53 6f 1e 75 f0 67 ba ff 0b 0f 75 e9 e2 da 72 f1 12 a7 3e ad de 94 00 43 92 46 a2 7c 4f fa d4 aa 5e dd 05 ab c6 fd f4 13 b4 2f d6 9d e4 e5 0f 53 f5 3c 47 a3 6b 3c b5 ba 01 74 cf 84 33 9d 48 69 47 32 ca 14 16 8e 7a f0 01 a7 8a aa 4d 92 01 82 ec d4 bc 10 52 08 d3 b8 fc a0 14 37 28 33 d6 a3 65 10 5b 18 db 9f 3e 7b 36 9e fd e0 23 60 d3 06 Data Ascii: -ySO\W]r~KmD\9:7j$2flv_-G0]~}gn66QT/P18ND Sougur>CF\|O^/S<Gk<t3HiG2zMR7(3e[>{6#`
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: de a3 ea 2b b6 a9 b7 ea 5f 80 ce d3 5c 08 06 09 12 44 0f ab f1 ea 90 8b c4 f1 58 85 82 33 5b a9 08 8f 1d c2 df f2 d7 c4 52 d8 2a 5a b7 6e fe 22 f4 78 eb 75 5f 62 9a 88 21 f7 f4 0a 2e 8e 94 90 17 6b 53 ea e8 59 5a d0 1a c5 b1 4c 82 de c3 a4 87 3e 3d 7b 62 f2 f4 e9 f1 12 c3 3a 61 b3 47 21 e2 d7 3a dd 85 b7 5f fb 37 76 72 91 8c ec 06 b5 51 60 c4 94 4b 7c cc f4 9f 51 b8 4e 3d 37 22 f7 cf 9f eb 94 0c c5 50 34 62 83 0d 14 ab cb 08 6c ef f7 3f 5a 19 6b 93 ee c9 28 6c 3b 76 1c 76 b1 4f bd b9 48 a9 78 48 31 1a b7 4f 3a 1c cc d8 b2 15 65 68 b9 db 73 fe 75 d9 79 a2 08 62 85 45 18 69 5e 8a 81 28 00 63 e0 ae 1b 0b 38 1b 8b 32 5c 22 6c a0 05 fa 6f 7c f0 21 c6 d1 a5 10 27 d0 dd a1 c0 56 77 5a b4 f6 77 45 71 96 f3 5e 14 82 44 48 19 6d b5 e8 0e 17 c8 c3 5a 89 eb 1a 0d 79 Data Ascii: +_\DX3[R*Zn"xu_b!.kSYZL>={b:aG!:_7vrQ`K\|QN=7"P4bl?Zk(l;vvOHxH1O:ehsuybEi^(c82\"lo\|!'VwZwEq^DHmZy
2024-12-10 13:21:08 UTC	1232	IN	Data Raw: 39 51 4b 69 e3 20 b2 1c 63 e9 ab dd ec 52 39 03 11 4d 4a c3 79 12 c1 f0 29 1b 59 19 96 0a 43 bf d9 b3 17 c3 c4 9e 19 b2 8d 4a c8 40 66 cf 68 81 a7 88 a1 99 21 8d d1 08 69 75 5e 8b e3 55 61 59 89 6d b8 12 db 72 50 45 de 49 8d e6 90 d8 56 ce 7c 74 ca 79 34 12 ff 3a 8c 18 62 51 2f f6 e8 e1 90 a5 4d cf 86 73 bf aa 28 b7 85 d2 39 1f 1b b3 e7 c4 82 14 4d 3c c3 99 62 a0 ce 3a 81 5e 38 84 8e c5 0c 98 46 b7 8b b6 fc 08 6f 71 0b de e9 d3 8f 6b e8 db 3a a1 6c 2c d1 9e bb 96 c7 eb 36 43 d4 49 8d 5c 11 45 41 1b 17 6a 3d 7e 88 7c f9 f2 31 62 c4 90 bf eb 6d fe 63 e7 f0 7e fd f0 34 7d 46 42 f8 8e 39 bf 20 9c fe 33 c1 05 b2 27 07 5e 96 22 b7 48 36 5a e3 da c4 80 95 7a 6f 79 6c 91 a8 a8 48 bc 4a 8b 1d 2b 96 f3 2f 75 0a 20 b2 46 35 12 2f 02 c7 68 63 08 8c 25 ba 1f d7 f8 eb Data Ascii: 9QKi cR9MJy)YCJ@fh!iu^UaYmrPEIV\|ty4:bQ/Ms(9M<b:^8Foqk:l,6CI\EAj=~\|1bmc~4}FB9 3'^"H6ZzoylHJ+/u F5/hc%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49782	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:07 UTC	1091	OUT	GET /js/sweetalert.min.js?id=abedaaba10307a01ba0d HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:08 UTC	732	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-9807" expires: Tue, 09 Dec 2025 17:54:48 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69946 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8949d88b42c8-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:08 UTC	637	IN	Data Raw: 37 63 63 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 74 2e 53 77 65 65 74 61 6c 65 72 74 32 3d 65 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f Data Ascii: 7cc7!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):t.Sweetalert2=e()}(this,(function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeo
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2e 6b 65 79 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 2c 6f 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6f 26 26 6e 28 74 2c 6f 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 28 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 Data Ascii: ble=!0),Object.defineProperty(t,o.key,o)}}function o(t,e,o){return e&&n(t.prototype,e),o&&n(t,o),t}function i(){return(i=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var o in n)Object.prototype.hasOwnProperty.call(
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6f 2c 65 29 3b 72 65 74 75 72 6e 20 69 2e 67 65 74 3f 69 2e 67 65 74 2e 63 61 6c 6c 28 6e 29 3a 69 2e 76 61 6c 75 65 7d 7d 29 28 74 2c 65 2c 6e 7c 7c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 62 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 7d 66 Data Ascii: .getOwnPropertyDescriptor(o,e);return i.get?i.get.call(n):i.value}})(t,e,n\|\|t)}function l(t){return Object.keys(t).map((function(e){return t[e]}))}function d(t){return Array.prototype.slice.call(t)}function p(t){console.error("".concat(b," ").concat(t))}f
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 67 65 22 2c 22 69 6e 70 75 74 22 2c 22 66 69 6c 65 22 2c 22 72 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 2c 22 6c 61 62 65 6c 22 2c 22 74 65 78 74 61 72 65 61 22 2c 22 69 6e 70 75 74 65 72 72 6f 72 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 22 2c 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 73 22 2c 22 61 63 74 69 76 65 2d 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 2c 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 2c 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 2d 6c 69 6e 65 22 2c 22 6c 6f 61 64 69 6e 67 22 2c 22 73 74 79 6c 65 64 22 2c 22 74 6f 70 22 2c 22 74 6f 70 2d 73 74 61 72 74 22 2c 22 74 6f 70 2d 65 6e 64 22 2c 22 74 6f 70 2d 6c 65 66 74 22 2c 22 74 6f 70 2d 72 69 67 68 74 22 2c Data Ascii: ge","input","file","range","select","radio","checkbox","label","textarea","inputerror","validation-message","progress-steps","active-progress-step","progress-step","progress-step-line","loading","styled","top","top-start","top-end","top-left","top-right",
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 68 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 66 6c 65 78 22 3b 74 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 22 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 74 29 7b 74 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 22 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 74 2c 65 2c 6e 29 7b 65 3f 4c 28 74 2c 6e 29 3a 4f 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 29 7b 72 65 74 75 72 6e 21 28 21 74 7c 7c 21 28 74 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 76 61 72 20 65 3d Data Ascii: h&&void 0!==e?e:"flex";t.style.opacity="",t.style.display=n}function O(t){t.style.opacity="",t.style.display="none"}function M(t,e,n){e?L(t,n):O(t)}function V(t){return!(!t\|\|!(t.offsetWidth\|\|t.offsetHeight\|\|t.getClientRects().length))}function j(t){var e=
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 65 3f 2d 31 3a 30 7d 29 29 2c 65 3d 64 28 52 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5c 6e 20 20 61 5b 68 72 65 66 5d 2c 5c 6e 20 20 61 72 65 61 5b 68 72 65 66 5d 2c 5c 6e 20 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 73 65 6c 65 63 74 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 74 65 78 74 61 72 65 61 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 5c 6e 20 20 69 66 72 61 6d 65 2c 5c 6e 20 20 6f 62 6a 65 63 74 2c 5c 6e 20 20 65 6d 62 65 64 2c 5c 6e 20 20 5b 74 61 62 69 6e 64 65 78 3d 22 30 22 5d 2c 5c 6e 20 20 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 2c 5c 6e 20 20 61 75 64 69 6f 5b Data Ascii: e?-1:0})),e=d(R().querySelectorAll('\n a[href],\n area[href],\n input:not([disabled]),\n select:not([disabled]),\n textarea:not([disabled]),\n button:not([disabled]),\n iframe,\n object,\n embed,\n [tabindex="0"],\n [contenteditable],\n audio[
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 53 2e 65 72 72 6f 72 2c 27 22 3e 5c 6e 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 2d 6c 69 6e 65 2d 6c 65 66 74 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 77 61 6c 32 2d 78 2d 6d 61 72 6b 2d 6c 69 6e 65 2d 72 69 67 68 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 69 63 6f 6e 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 53 2e 71 75 65 73 74 69 6f 6e 2c 27 22 3e 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 29 2e Data Ascii: ).concat(S.error,'">\n <span class="swal2-x-mark"><span class="swal2-x-mark-line-left"></span><span class="swal2-x-mark-line-right"></span></span>\n </div>\n <div class="').concat(x.icon," ").concat(S.question,'"></div>\n <div class="').
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 63 68 65 63 6b 62 6f 78 2c 27 22 3e 5c 6e 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 6c 61 62 65 6c 2c 27 22 3e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 20 20 3c 2f 6c 61 62 65 6c 3e 5c 6e 20 20 20 20 20 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 2e 74 65 78 74 61 72 65 61 2c 27 22 3e 3c 2f 74 65 78 74 61 72 65 61 3e 5c 6e 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 29 2e 63 6f 6e 63 61 74 28 78 5b 22 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 22 5d 2c 27 22 20 69 64 3d 22 27 29 2e 63 6f 6e Data Ascii: class="').concat(x.checkbox,'">\n <input type="checkbox" />\n <span class="').concat(x.label,'"></span>\n </label>\n <textarea class="').concat(x.textarea,'"></textarea>\n <div class="').concat(x["validation-message"],'" id="').con
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 64 6f 6d 43 61 63 68 65 3a 6e 65 77 20 57 65 61 6b 4d 61 70 7d 2c 6d 74 3d 5b 22 69 6e 70 75 74 22 2c 22 66 69 6c 65 22 2c 22 72 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 2c 22 74 65 78 74 61 72 65 61 22 5d 2c 67 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 78 5b 74 5d 3f 78 5b 74 5d 3a 78 2e 69 6e 70 75 74 3b 72 65 74 75 72 6e 20 61 74 28 46 28 29 2c 65 29 7d 2c 68 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 74 28 74 2c 65 29 7b 76 61 72 20 6e 3d 46 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 22 2b 78 2e 63 6f 6e 74 65 6e 74 29 3b 65 2e 68 74 6d 6c 3f 28 6e 74 28 65 2e 68 74 6d 6c 2c 6e 29 2c 4c 28 6e 2c 22 62 6c 6f 63 6b 22 29 29 3a 65 2e 74 65 78 74 3f 28 6e 2e 74 65 Data Ascii: domCache:new WeakMap},mt=["input","file","range","select","radio","checkbox","textarea"],gt=function(t){var e=x[t]?x[t]:x.input;return at(F(),e)},ht={};function vt(t,e){var n=F().querySelector("#"+x.content);e.html?(nt(e.html,n),L(n,"block")):e.text?(n.te
2024-12-10 13:21:08 UTC	1369	IN	Data Raw: 79 28 22 49 6e 76 61 6c 69 64 20 63 75 72 72 65 6e 74 50 72 6f 67 72 65 73 73 53 74 65 70 20 70 61 72 61 6d 65 74 65 72 2c 20 69 74 20 73 68 6f 75 6c 64 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 6c 65 6e 67 74 68 20 28 63 75 72 72 65 6e 74 50 72 6f 67 72 65 73 73 53 74 65 70 20 6c 69 6b 65 20 4a 53 20 61 72 72 61 79 73 20 73 74 61 72 74 73 20 66 72 6f 6d 20 30 29 22 29 2c 65 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 72 65 74 75 72 6e 20 69 74 28 65 2c 78 5b 22 70 72 6f 67 72 65 73 73 2d Data Ascii: y("Invalid currentProgressStep parameter, it should be less than progressSteps.length (currentProgressStep like JS arrays starts from 0)"),e.progressSteps.forEach((function(t,i){var r=function(t){var e=document.createElement("li");return it(e,x["progress-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49783	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:08 UTC	1324	OUT	GET /favicon-32x32.png HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D
2024-12-10 13:21:08 UTC	717	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:08 GMT Content-Type: image/png Content-Length: 1452 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-5ac" expires: Tue, 09 Dec 2025 17:54:50 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69945 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd894c8f2bc457-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:08 UTC	652	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 05 73 49 44 41 54 58 47 c5 57 6b 50 94 65 14 7e c0 5d 28 14 58 37 19 c5 b4 99 46 ab 45 50 51 2e 1a 97 44 51 2e 6b 2d 86 a6 e1 4c 0e db e8 0c 34 4a 25 ac 1a 8b ac e9 62 21 cb 72 15 cc bb 59 22 62 12 22 30 5c 4c 04 4d 14 95 24 12 0d 0d 10 45 51 40 07 e4 b6 0b 4b f3 be c9 27 3b bb cb b2 98 75 fe ed 7e ef 77 ce 73 ce 73 ce 73 de cf 88 b7 c0 b3 1f 2f 60 46 46 46 98 64 6d 8d 86 c6 c6 11 79 31 7a 51 00 2e 8e 0e 58 e4 e6 86 af e3 13 fe 1f 00 5b d7 7f 89 65 7c 3e 36 c7 ca f1 53 5e 9e c1 20 46 5c 01 d6 a8 51 e8 ed eb 43 fa ce 64 cc e0 f1 d0 a3 50 60 71 a0 10 f7 9a 9a c0 b1 b0 c0 93 b6 b6 61 81 19 31 00 5f 0f 0f b0 d9 2c 04 08 04 b0 9f 36 8d 06 4b 3c 70 10 47 b2 Data Ascii: PNGIHDR szzsIDATXGWkPe~](X7FEPQ.DQ.k-L4J%b!rY"b"0\LM$EQ@K';u~wsss/`FFFdmy1zQ.X[e\|>6S^ F\QCdP`qa1_,6K<pG
2024-12-10 13:21:08 UTC	800	IN	Data Raw: 42 a1 40 57 4f 37 5c 1d 1c b1 6b 7b 94 9a a3 ce ae 2e 88 63 64 58 e9 27 80 d3 cc 99 1a 41 72 cf 9c 41 84 2c 16 84 26 6d a6 13 00 e9 f6 1f 13 e2 f1 c6 c4 89 b4 e3 f3 8a cf 52 27 cb df 5f cc f8 f9 36 25 95 6a 3f e9 6e 99 38 1c 8b dc dd 41 7a 66 b0 2d 0d 0a c6 f5 9a 1a 9d 34 68 05 c0 66 b1 e0 e9 ea 4a c5 c4 cb dd 5d e7 cb bb d3 d2 10 b7 77 1f ac 5e e3 e2 51 4b 2b c8 7e f8 d0 db 9b 39 7f e1 6a 05 a2 53 53 69 12 8f db da a8 7e a8 54 aa a1 9b 90 6b 69 89 3d d1 d1 98 f6 96 ba cc 92 8e ee ea e9 81 c5 98 31 8c 03 b2 fd 0e 64 64 60 4d c0 c7 c8 2a 28 44 de f7 87 60 fc 6c 0c 09 35 75 77 ef 31 7e ca af 55 62 5b 62 22 88 52 0e 36 b5 0a b0 d9 6c 1c 94 c9 30 db ce 56 23 6b 22 2c d9 a7 7f 41 eb e3 c7 f0 f7 f5 a1 3b 5f 18 26 a2 0b 89 64 78 f7 c1 7d c4 47 46 a2 a3 b3 13 65 Data Ascii: B@WO7\k{.cdX'ArA,&mR'_6%j?n8Azf-4hfJ]w^QK+~9jSSi~Tki=1dd`M*(D`l5uw1~Ub[b"R6l0V#k",A;_&dx}GFe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49785	216.137.52.40	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:08 UTC	338	OUT	GET /rw.js HTTP/1.1 Host: r.wdfl.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:09 UTC	531	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 18631 Connection: close Last-Modified: Tue, 10 Dec 2024 07:34:43 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Dec 2024 12:44:18 GMT Cache-Control: max-age=3600 ETag: "c9c777f9757507517be23d77545abcbd" X-Cache: Hit from cloudfront Via: 1.1 0d8fb9ea76ca48d1884fa97507d30086.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P2 X-Amz-Cf-Id: NjdBNMIJOdeL3kVbv7-NBpySSt7KxyDUVZPql4mBhYsMFEjeT3fTAw== Age: 2212
2024-12-10 13:21:09 UTC	15853	IN	Data Raw: 2f 2a 21 20 42 75 69 6c 64 20 30 32 35 61 37 37 62 36 66 37 33 38 37 61 65 63 65 61 32 62 37 33 64 38 37 34 63 33 35 62 37 64 34 33 62 33 31 32 66 30 3a 31 37 33 33 38 31 35 38 37 39 31 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 Data Ascii: /! Build 025a77b6f7387aecea2b73d874c35b7d43b312f0:1733815879152 /!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n)
2024-12-10 13:21:09 UTC	2778	IN	Data Raw: 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 7d 28 29 2c 42 3d 49 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 5f 72 65 77 61 72 64 66 75 6c 5f 6c 6f 61 64 65 64 29 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 65 77 61 72 64 66 75 6c 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 2e 22 29 3b 65 6c 73 65 7b 77 69 6e 64 6f 77 2e 5f 72 65 77 61 72 64 66 75 6c 5f 6c 6f 61 64 65 64 3d 21 30 3b 74 72 79 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 64 61 74 61 2d 72 65 77 61 72 64 66 75 6c 5d 22 29 3b 69 66 28 65 29 7b 77 69 6e 64 6f 77 2e 52 65 77 61 72 64 66 75 6c 3d 4c 2c 4c 2e 73 65 74 75 Data Ascii: (t,"prototype",{writable:!1}),e}(),B=I;!function(){if(window&&window._rewardful_loaded)console.warn("Rewardful is already loaded.");else{window._rewardful_loaded=!0;try{var e=document.querySelector("script[data-rewardful]");if(e){window.Rewardful=L,L.setu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49791	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:09 UTC	540	OUT	GET /manifest.json HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:09 UTC	620	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-270" x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 Cache-Control: private x-do-orig-status: 200 CF-Cache-Status: BYPASS Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8953df72424b-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:09 UTC	631	IN	Data Raw: 32 37 30 0d 0a 7b 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 54 2e 4c 59 22 2c 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 54 2e 4c 59 20 55 52 4c 20 53 68 6f 72 74 65 6e 65 72 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 36 34 78 36 34 20 33 32 78 33 32 20 32 34 78 32 34 20 31 36 78 31 36 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 61 6e 64 72 6f Data Ascii: 270{ "short_name": "T.LY", "name": "T.LY URL Shortener", "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon" }, { "src": "andro
2024-12-10 13:21:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49799	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:09 UTC	1115	OUT	GET /js/app.js?id=5d823af68314a2848045 HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867
2024-12-10 13:21:10 UTC	733	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-eca90" expires: Tue, 09 Dec 2025 18:00:57 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Age: 69558 CF-Cache-Status: HIT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8954b84f42e2-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:10 UTC	636	IN	Data Raw: 37 63 63 31 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 3d 7b 36 39 32 37 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 31 30 37 32 33 29 2c 69 3d 5b 5d 2c 6f 3d 5b 5d 2c 61 3d 72 2e 6d 61 6b 65 52 65 71 75 65 73 74 43 61 6c 6c 46 72 6f 6d 54 69 6d 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6f 2e 73 68 69 66 74 28 29 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3b 28 74 3d 69 2e 6c 65 6e 67 74 68 3f 69 2e 70 6f 70 28 29 3a 6e Data Ascii: 7cc1/! For license information please see app.js.LICENSE.txt /(()=>{var e,t,n,r,i={69272:(e,t,n)=>{"use strict";var r=n(10723),i=[],o=[],a=r.makeRequestCallFromTimer((function(){if(o.length)throw o.shift()}));function s(e){var t;(t=i.length?i.pop():n
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 3d 6f 2e 6c 65 6e 67 74 68 2d 61 3b 74 3c 6e 3b 74 2b 2b 29 6f 5b 74 5d 3d 6f 5b 74 2b 61 5d 3b 6f 2e 6c 65 6e 67 74 68 2d 3d 61 2c 61 3d 30 7d 7d 6f 2e 6c 65 6e 67 74 68 3d 30 2c 61 3d 30 2c 21 31 7d 76 61 72 20 75 2c 6c 2c 63 2c 64 3d 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 3f 6e 2e 67 3a 73 65 6c 66 2c 66 3d 64 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 64 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 72 2c 30 29 2c 6e 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 72 2c 35 30 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 63 6c 65 61 Data Ascii: =o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var u,l,c,d=void 0!==n.g?n.g:self,f=d.MutationObserver\|\|d.WebKitMutationObserver;function h(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clea
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 6f 64 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 61 28 4d 2c 65 2e 70 61 72 61 6d 73 2c 65 2e 70 61 72 61 6d 73 53 65 72 69 61 6c 69 7a 65 72 29 2c 21 30 29 2c 67 2e 74 69 6d 65 6f 75 74 3d 65 2e 74 69 6d 65 6f 75 74 2c 22 6f 6e 6c 6f 61 64 65 6e 64 22 69 6e 20 67 3f 67 2e 6f 6e 6c 6f 61 64 65 6e 64 3d 77 3a 67 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 26 26 34 3d 3d 3d 67 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 30 21 3d 3d 67 2e 73 74 61 74 75 73 7c 7c 67 2e 72 65 73 70 6f 6e 73 65 55 52 4c 26 26 30 3d 3d 3d 67 2e 72 65 73 70 6f 6e 73 65 55 52 4c 2e 69 6e 64 65 78 4f 66 28 22 66 69 6c 65 3a 22 29 29 26 26 73 65 74 54 69 6d 65 6f 75 74 28 77 29 7d 2c 67 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 Data Ascii: od.toUpperCase(),a(M,e.params,e.paramsSerializer),!0),g.timeout=e.timeout,"onloadend"in g?g.onloadend=w:g.onreadystatechange=function(){g&&4===g.readyState&&(0!==g.status\|\|g.responseURL&&0===g.responseURL.indexOf("file:"))&&setTimeout(w)},g.onabort=functi
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 3f 68 28 29 3a 65 2e 73 69 67 6e 61 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 68 29 29 29 2c 70 7c 7c 28 70 3d 6e 75 6c 6c 29 2c 67 2e 73 65 6e 64 28 70 29 7d 29 29 7d 7d 2c 35 31 36 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 2c 69 3d 6e 28 39 31 38 34 39 29 2c 6f 3d 6e 28 33 30 33 32 31 29 2c 61 3d 6e 28 34 37 31 38 35 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 6f 28 74 29 2c 73 3d 69 28 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 2c 6e 29 3b 72 65 74 75 72 6e 20 72 2e 65 78 74 65 6e 64 28 73 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2c Data Ascii: .signal.aborted?h():e.signal.addEventListener("abort",h))),p\|\|(p=null),g.send(p)}))}},51609:(e,t,n)=>{"use strict";var r=n(64867),i=n(91849),o=n(30321),a=n(47185);var s=function e(t){var n=new o(t),s=i(o.prototype.request,n);return r.extend(s,o.prototype,
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 72 65 61 73 6f 6e 29 3a 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3f 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 65 29 3a 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3d 5b 65 5d 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 69 6e 64 65 78 4f 66 28 65 29 3b 2d 31 21 3d 3d 74 26 26 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 7d 2c 69 2e 73 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 7b 74 6f 6b 65 6e 3a 6e 65 77 20 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 Data Ascii: reason):this._listeners?this._listeners.push(e):this._listeners=[e]},i.prototype.unsubscribe=function(e){if(this._listeners){var t=this._listeners.indexOf(e);-1!==t&&this._listeners.splice(t,1)}},i.source=function(){var e;return{token:new i((function(t){e
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 3b 64 2e 6c 65 6e 67 74 68 3b 29 6f 3d 6f 2e 74 68 65 6e 28 64 2e 73 68 69 66 74 28 29 2c 64 2e 73 68 69 66 74 28 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 6f 72 28 76 61 72 20 66 3d 74 3b 72 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 72 2e 73 68 69 66 74 28 29 2c 70 3d 72 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 66 3d 68 28 66 29 7d 63 61 74 63 68 28 65 29 7b 70 28 65 29 3b 62 72 65 61 6b 7d 7d 74 72 79 7b 6f 3d 61 28 66 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 66 6f 72 28 3b 63 2e 6c 65 6e 67 74 68 3b 29 6f 3d 6f 2e 74 68 65 6e 28 63 2e 73 68 69 66 74 28 29 2c 63 2e 73 68 69 66 74 28 29 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 63 2e 70 72 6f 74 6f 74 79 Data Ascii: se.resolve(t);d.length;)o=o.then(d.shift(),d.shift());return o}for(var f=t;r.length;){var h=r.shift(),p=r.shift();try{f=h(f)}catch(e){p(e);break}}try{o=a(f)}catch(e){return Promise.reject(e)}for(;c.length;)o=o.then(c.shift(),c.shift());return o},c.prototy
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 2c 69 3d 6e 28 31 38 35 32 37 29 2c 6f 3d 6e 28 32 36 35 30 32 29 2c 61 3d 6e 28 34 35 36 35 35 29 2c 73 3d 6e 28 36 35 32 36 33 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 74 68 72 6f 77 49 66 52 65 71 75 65 73 74 65 64 28 29 2c 65 2e 73 69 67 6e 61 6c 26 26 65 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 29 74 68 72 6f 77 20 6e 65 77 20 73 28 22 63 61 6e 63 65 6c 65 64 22 29 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 75 28 65 29 2c 65 2e 68 65 61 64 65 72 73 3d 65 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 2c 65 2e 64 61 Data Ascii: n)=>{"use strict";var r=n(64867),i=n(18527),o=n(26502),a=n(45655),s=n(65263);function u(e){if(e.cancelToken&&e.cancelToken.throwIfRequested(),e.signal&&e.signal.aborted)throw new s("canceled")}e.exports=function(e){return u(e),e.headers=e.headers\|\|{},e.da
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 29 3f 72 2e 6d 65 72 67 65 28 7b 7d 2c 74 29 3a 72 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 73 6c 69 63 65 28 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 6e 5d 29 3f 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 6e 5d 29 3f 76 6f 69 64 20 30 3a 69 28 76 6f 69 64 20 30 2c 65 5b 6e 5d 29 3a 69 28 65 5b 6e 5d 2c 74 5b 6e 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 65 5d 29 29 72 65 74 75 72 6e 20 69 28 76 6f 69 64 20 30 2c 74 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 6e 5d 29 3f 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 6e Data Ascii: )?r.merge({},t):r.isArray(t)?t.slice():t}function o(n){return r.isUndefined(t[n])?r.isUndefined(e[n])?void 0:i(void 0,e[n]):i(e[n],t[n])}function a(e){if(!r.isUndefined(t[e]))return i(void 0,t[e])}function s(n){return r.isUndefined(t[n])?r.isUndefined(e[n
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 6f 64 65 64 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 21 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 29 26 26 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 29 26 26 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 74 29 7d 76 61 72 20 6c 2c 63 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 61 6c 3a 7b 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 66 6f 72 63 65 64 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 63 6c 61 72 69 66 79 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 21 31 7d 2c 61 64 61 70 74 65 72 3a 28 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7c 7c 76 6f 69 64 20 30 21 3d 3d 72 26 26 22 5b 6f 62 6a 65 63 74 20 70 Data Ascii: oded"};function u(e,t){!i.isUndefined(e)&&i.isUndefined(e["Content-Type"])&&(e["Content-Type"]=t)}var l,c={transitional:{silentJSONParsing:!0,forcedJSONParsing:!0,clarifyTimeoutError:!1},adapter:(("undefined"!=typeof XMLHttpRequest\|\|void 0!==r&&"[object p
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 28 5b 22 64 65 6c 65 74 65 22 2c 22 67 65 74 22 2c 22 68 65 61 64 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 68 65 61 64 65 72 73 5b 65 5d 3d 7b 7d 7d 29 29 2c 69 2e 66 6f 72 45 61 63 68 28 5b 22 70 6f 73 74 22 2c 22 70 75 74 22 2c 22 70 61 74 63 68 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 68 65 61 64 65 72 73 5b 65 5d 3d 69 2e 6d 65 72 67 65 28 73 29 7d 29 29 2c 65 2e 65 78 70 6f 72 74 73 3d 63 7d 2c 39 37 32 38 38 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 32 35 2e 30 22 7d 7d 2c 39 31 38 34 39 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 Data Ascii: orEach(["delete","get","head"],(function(e){c.headers[e]={}})),i.forEach(["post","put","patch"],(function(e){c.headers[e]=i.merge(s)})),e.exports=c},97288:e=>{e.exports={version:"0.25.0"}},91849:e=>{"use strict";e.exports=function(e,t){return function(){f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49802	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:10 UTC	1398	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: t.ly Connection: keep-alive Content-Length: 1614 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://t.ly Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:10 UTC	1614	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 33 32 34 37 34 37 32 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 35 31 32 37 31 30 30 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 35 36 33 36 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 35 36 33 36 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 33 33 38 33 36 38 35 37 38 34 36 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 Data Ascii: {"memory":{"totalJSHeapSize":23247472,"usedJSHeapSize":15127100,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":5636.1999999999825,"firstContentfulPaint":5636.1999999999825,"startTime":1733836857846,"versions":{"fl":"
2024-12-10 13:21:10 UTC	361	IN	HTTP/1.1 204 No Content Date: Tue, 10 Dec 2024 13:21:10 GMT Connection: close access-control-allow-origin: https://t.ly access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 8efd89575aa2c34e-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49803	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:10 UTC	1392	OUT	GET /img/tly-logo-sm.png HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:10 UTC	719	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:10 GMT Content-Type: image/png Content-Length: 10096 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-2770" expires: Tue, 09 Dec 2025 17:54:47 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69947 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd89584a4b5e70-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:10 UTC	650	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 64 a0 03 00 04 00 00 00 01 00 00 00 64 00 00 00 00 33 dc 5f 85 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 Data Ascii: PNGIHDRddpTgAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZ``dd3_pHYs
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: d1 6b c7 ae 57 e5 7a bd 8a 5e 1b d8 91 e2 05 41 94 a2 02 4a 97 26 45 9a 20 41 4a e8 bd 57 e9 84 5e fe f7 9d dd 6f 5d d6 64 53 08 90 f8 fc df f3 ec 9e b3 e7 cc 99 33 f3 7d 33 5f 9f d9 74 e5 9a 36 bb 84 bf 09 a8 23 99 d2 a7 47 cc a1 43 28 92 39 33 0a 64 cb 86 73 17 2e 20 5d ba 74 69 a6 87 37 a4 99 96 26 d0 50 a1 3c 3d 11 1f b3 6f 3f ba b7 6f 87 76 b5 6a 61 e5 de bd c8 92 31 63 02 4f a6 ae db 7f 1b 82 a4 bf e1 06 1c 3a 75 0a 45 72 e6 c0 c3 f7 df 8f b2 25 23 80 95 31 c8 96 39 13 d2 12 0b f8 5b 10 e4 d2 a5 4b c8 9c 31 03 f6 2e 5a 82 67 6e bf 0d a5 c2 c3 91 37 77 1e 37 f4 d3 21 ed b0 2b 35 f8 6f 41 90 8b 24 88 43 fc 85 33 68 d9 bc b9 23 44 a3 fa f5 80 b2 37 e2 c4 e9 d3 c8 98 3e ed 74 33 ed b4 d4 a1 f9 af 5f 9a 1d d9 32 65 42 f4 ae dd e8 d2 ed 09 54 2c 5f de 15 Data Ascii: kWz^AJ&E AJW^o]dS3}3_t6#GC(93ds. ]ti7&P<=o?ovja1cO:uEr%#19[K1.Zgn7w7!+5oA$C3h#D7>t3_2eBT,_
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 90 7f 6a dd d1 a3 28 59 a4 08 c6 f4 7a 1f ab e8 75 9d 3f 6b 0e 0a 31 e4 2a 3f 93 c0 df 55 be 7b cf 5e 77 2d 28 7b 73 25 12 fe 12 ab d2 ec 38 48 02 74 ef f5 01 32 d5 a8 e5 06 46 f5 f0 12 58 ba 65 ab 73 3e 9a e1 98 70 6d 29 53 e2 fa 12 84 7d c8 2c 3b e0 f8 09 e4 25 01 da b7 6a 85 98 b1 3f a2 4b 97 7b 18 07 1f 87 45 13 27 38 b6 91 3f 47 76 8f 16 14 12 8a d5 eb 3d 5a 90 04 6e 5c da 52 62 d1 a2 67 4d 68 0f 1a 3a cc bd ab 51 c9 70 2c e4 3b df 78 fe 79 4c ed df 17 1b 66 cf 72 03 e6 5a 6a 5b d7 97 20 44 8a 1b e9 67 cf 3a d7 f8 39 0a d2 4a 15 2a e0 cb 4f 3e c1 92 a5 4b d1 eb b3 cf 70 89 da cf 6f 93 26 61 25 c3 b4 15 cb 97 c3 9c e8 68 1c 3a 7c d8 e1 fd 4a 09 a2 4a 66 cf 9d 8b 57 9e 7b 16 6d 3a df 8b e9 53 67 a0 15 8f 51 95 2a 39 77 cc db 1f 7e c8 76 2c 73 61 e2 2b Data Ascii: j(Yzu?k1?U{^w-({s%8Ht2FXes>pm)S},;%j?K{E'8?Gv=Zn\RbgMh:Qp,;xyLfrZj[ Dg:9JO>Kpo&a%h:\|JJfW{m:SgQ*9w~v,sa+
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 49 ec 9c 3f d7 21 62 c0 90 21 68 d7 b2 25 0a 14 c8 cf 24 83 0c 10 3f 17 0b 51 07 53 0a 6c f4 9f a3 46 d4 f9 f1 27 30 3a 26 06 fb e8 7e 29 54 b0 80 4f b0 27 e5 5d aa 4f 1f 11 42 70 8a 0a cb 86 8d 9b b0 6a ed 5a ec d8 b5 0b c7 a8 b6 8b 05 56 a0 0a 7c 53 8d 1a f8 e6 bb ef f0 9f 97 5f 43 9d 36 2d 92 2c e4 53 54 ed 55 a3 15 47 c8 4e 7e 7d 8c 8d 16 88 95 15 a0 65 1e 71 eb ad cc 16 3c 85 47 1f 78 00 a1 0d 1a e2 0e 2e 39 13 d3 d2 34 bf ef ae bb 5c 59 43 a4 fb 71 05 5f 36 fa 85 a4 4a f4 02 8c 1e 3c c8 79 01 44 90 a4 80 3f 21 54 e7 81 3f fe c0 ec 79 f3 30 7a d2 4f 18 39 92 b1 93 63 87 58 1d 07 12 bd 09 d0 1a 15 fe ae c1 74 d4 aa 7c 67 ae 5a 55 1d 0e 92 aa 71 a5 28 41 d4 59 75 c2 f1 4e 6f cf c5 ca 64 e9 9e a0 01 28 f7 43 2d 36 f8 08 09 f3 d9 b0 11 00 23 73 fb e8 59 Data Ascii: I?!b!h%$?QSlF'0:&~)TO']OBpjZV\|S_C6-,STUGN~}eq<Gx.94\YCq_6J<yD?!T?y0zO9cXt\|gZUq(AYuNod(C-6#sY
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 0e eb a0 90 28 10 32 34 bd 95 4d d2 90 71 ea 3a dc f9 ad f3 ed b7 a3 71 eb 0e 28 26 db 84 d1 46 2b e7 4e 82 7c 65 cc 90 11 5d 99 3b 85 df 97 50 af 2d 0c 14 29 84 1a ad 5a 3b ff d9 41 26 df a1 52 65 cc 5d b4 08 1d e9 47 b3 88 65 90 ea e2 bd 65 6d d7 00 00 ed 90 b3 f4 89 59 00 4a bd f2 30 cc 78 1f 4f d2 8d 14 89 87 a8 41 ca b7 92 ec d8 c5 00 55 46 fa 70 2a 96 2b e7 cb 6f 92 30 0d 1c 95 ea a4 3e 12 c0 5a 1f 78 5f a7 8e ce d0 8a f2 6e 20 13 ac 17 aa 4b cf 6a cb 8c 6c 9c 1d 3f 6f dc 8c a6 b5 6b 21 1f 67 a2 ec 1c cd 52 bd b3 14 3d ca e3 16 2e c2 19 22 b2 08 e3 de 8a d5 a4 4b e7 31 e8 92 9a 22 aa 77 4e 64 7e d8 f8 e1 43 11 c2 55 5c 67 25 e3 38 43 cc fe 50 52 87 66 be 70 11 d8 d7 60 7d 09 bc 97 22 ee 77 59 ac ca 2e 91 f3 50 82 7c ed 4c 1a 4d 84 b9 34 a0 ea de 74 Data Ascii: (24Mq:q(&F+N\|e];P-)Z;A&Re]GeemYJ0xOAUFp*+o0>Zx_n Kjl?ok!gR=."K1"wNd~CU\g%8CPRfp`}"wY.P\|LM4t
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 08 f4 11 b2 df a7 2d b1 79 cb 16 cc a1 0d f3 e2 53 4f b9 cf 98 09 13 b9 5c a0 b9 cb 96 57 5d 72 1e 7e 4b 6d e6 e1 c7 9e 44 95 16 cd 9c 5c 8b 39 f0 07 3a 37 6a e8 cb c7 d5 ec c1 a1 fd 24 32 dd fd 1b b6 f8 66 81 90 6c 04 b6 76 a9 ac de b9 86 ae 97 15 cc d2 5f ce cd 03 f6 91 2d 47 30 c1 ee c9 ae 5d d1 b8 7e 7d df 8c b6 67 02 8f 6e b6 f0 a2 36 36 b8 8d ec 51 f6 97 06 54 2f 06 df e4 84 fc 83 ef 50 94 31 38 03 4e 84 eb 44 ac 20 84 53 6f 1e 75 f0 67 ba ff 0b 0f 75 e9 e2 da 72 f1 12 a7 3e ad de 94 00 43 92 46 a2 7c 4f fa d4 aa 5e dd 05 ab c6 fd f4 13 b4 2f d6 9d e4 e5 0f 53 f5 3c 47 a3 6b 3c b5 ba 01 74 cf 84 33 9d 48 69 47 32 ca 14 16 8e 7a f0 01 a7 8a aa 4d 92 01 82 ec d4 bc 10 52 08 d3 b8 fc a0 14 37 28 33 d6 a3 65 10 5b 18 db 9f 3e 7b 36 9e fd e0 23 60 d3 06 Data Ascii: -ySO\W]r~KmD\9:7j$2flv_-G0]~}gn66QT/P18ND Sougur>CF\|O^/S<Gk<t3HiG2zMR7(3e[>{6#`
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: de a3 ea 2b b6 a9 b7 ea 5f 80 ce d3 5c 08 06 09 12 44 0f ab f1 ea 90 8b c4 f1 58 85 82 33 5b a9 08 8f 1d c2 df f2 d7 c4 52 d8 2a 5a b7 6e fe 22 f4 78 eb 75 5f 62 9a 88 21 f7 f4 0a 2e 8e 94 90 17 6b 53 ea e8 59 5a d0 1a c5 b1 4c 82 de c3 a4 87 3e 3d 7b 62 f2 f4 e9 f1 12 c3 3a 61 b3 47 21 e2 d7 3a dd 85 b7 5f fb 37 76 72 91 8c ec 06 b5 51 60 c4 94 4b 7c cc f4 9f 51 b8 4e 3d 37 22 f7 cf 9f eb 94 0c c5 50 34 62 83 0d 14 ab cb 08 6c ef f7 3f 5a 19 6b 93 ee c9 28 6c 3b 76 1c 76 b1 4f bd b9 48 a9 78 48 31 1a b7 4f 3a 1c cc d8 b2 15 65 68 b9 db 73 fe 75 d9 79 a2 08 62 85 45 18 69 5e 8a 81 28 00 63 e0 ae 1b 0b 38 1b 8b 32 5c 22 6c a0 05 fa 6f 7c f0 21 c6 d1 a5 10 27 d0 dd a1 c0 56 77 5a b4 f6 77 45 71 96 f3 5e 14 82 44 48 19 6d b5 e8 0e 17 c8 c3 5a 89 eb 1a 0d 79 Data Ascii: +_\DX3[R*Zn"xu_b!.kSYZL>={b:aG!:_7vrQ`K\|QN=7"P4bl?Zk(l;vvOHxH1O:ehsuybEi^(c82\"lo\|!'VwZwEq^DHmZy
2024-12-10 13:21:10 UTC	1232	IN	Data Raw: 39 51 4b 69 e3 20 b2 1c 63 e9 ab dd ec 52 39 03 11 4d 4a c3 79 12 c1 f0 29 1b 59 19 96 0a 43 bf d9 b3 17 c3 c4 9e 19 b2 8d 4a c8 40 66 cf 68 81 a7 88 a1 99 21 8d d1 08 69 75 5e 8b e3 55 61 59 89 6d b8 12 db 72 50 45 de 49 8d e6 90 d8 56 ce 7c 74 ca 79 34 12 ff 3a 8c 18 62 51 2f f6 e8 e1 90 a5 4d cf 86 73 bf aa 28 b7 85 d2 39 1f 1b b3 e7 c4 82 14 4d 3c c3 99 62 a0 ce 3a 81 5e 38 84 8e c5 0c 98 46 b7 8b b6 fc 08 6f 71 0b de e9 d3 8f 6b e8 db 3a a1 6c 2c d1 9e bb 96 c7 eb 36 43 d4 49 8d 5c 11 45 41 1b 17 6a 3d 7e 88 7c f9 f2 31 62 c4 90 bf eb 6d fe 63 e7 f0 7e fd f0 34 7d 46 42 f8 8e 39 bf 20 9c fe 33 c1 05 b2 27 07 5e 96 22 b7 48 36 5a e3 da c4 80 95 7a 6f 79 6c 91 a8 a8 48 bc 4a 8b 1d 2b 96 f3 2f 75 0a 20 b2 46 35 12 2f 02 c7 68 63 08 8c 25 ba 1f d7 f8 eb Data Ascii: 9QKi cR9MJy)YCJ@fh!iu^UaYmrPEIV\|ty4:bQ/Ms(9M<b:^8Foqk:l,6CI\EAj=~\|1bmc~4}FB9 3'^"H6ZzoylHJ+/u F5/hc%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.10	49804	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:10 UTC	1384	OUT	GET /favicon.ico HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:10 UTC	707	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:10 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-3c2e" expires: Tue, 09 Dec 2025 17:54:50 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69947 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd895858288c84-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:10 UTC	662	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 5d 5c 46 ff d4 d4 ce ff 5e 5d 47 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 4f 4e 36 ff 45 44 2a ff f3 f3 f1 ff 44 43 29 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 53 53 3b ff b4 b3 a9 Data Ascii: 3c2e h6 (00 h&( CB(CB(CB(CB(CB(CB(CB(]\F^]GCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(ON6ED*DC)CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(SS;
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 7f ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 5b 5a 44 ff f4 f3 f2 ff ff ff ff ff ff ff ff ff fd fd fd ff c3 c3 ba ff ff ff ff ff d3 d3 cd ff 6d 6c 58 ff 54 53 3c ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 67 66 51 ff e7 e7 e4 ff f9 f9 f8 ff ff ff ff ff fc fc fc ff fd fd fd ff ed ed eb ff f4 f4 f3 ff ea ea e7 ff d9 d9 d4 ff 65 65 50 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 7c 7c 6a ff 9e 9e 90 ff d6 d6 d1 ff ff ff ff ff ff ff ff ff 95 95 86 ff 80 7f 6d ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff ec ec e9 ff ff ff ff ff ff ff ff ff df df da ff 43 42 28 ff 43 Data Ascii: CB(CB(CB(CB(CB(CB(CB([ZDmlXTS<CB(CB(CB(CB(CB(gfQeePCB(CB(CB(CB(CB(CB(CB(\|\|jmCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(C
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: ff 43 42 28 ff 4d 4c 33 ff 87 86 76 ff ff ff ff ff fd fd fc ff de de da ff 53 52 3a ff e9 e9 e6 ff b1 b1 a6 ff 43 42 28 ff 43 42 28 ff b2 b2 a7 ff 68 67 52 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 6f 6e 5a ff ea ea e8 ff fe fe fd ff ff ff ff ff ff ff ff ff 74 74 60 ff f3 f3 f1 ff b5 b4 aa ff 43 42 28 ff 43 42 28 ff c8 c7 bf ff f3 f3 f2 ff 55 54 3c ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 51 50 38 ff 87 86 75 ff 43 42 Data Ascii: CB(ML3vSR:CB(CB(hgRCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(onZtt`CB(CB(UT<CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(QP8uCB
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 73 72 5e ff 80 7f 6e ff 62 61 4b ff f5 f5 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec ec ea ff 97 96 88 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa f9 f9 ff bd bc b3 ff 77 77 64 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 50 4f 37 ff f6 f5 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 83 83 72 ff ff ff ff ff ff ff ff ff ff ff ff ff e8 e8 e4 ff 6c 6b 57 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 Data Ascii: CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(sr^nbaKwwdCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(PO7rlkWCB(CB(CB(CB(CB(CB(CB(
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: bd b4 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 46 45 2c ff 43 42 28 ff d7 d7 d1 ff ff ff ff ff f9 f9 f8 ff 5a 59 43 ff 43 42 28 ff 51 50 38 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff b4 b4 aa ff fe fe fe ff 8c 8b 7b ff 43 42 28 ff 43 42 28 ff Data Ascii: CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(FE,CB(ZYCCB(QP8CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB({CB(CB(
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 53 52 3a ff ff ff ff ff ff ff ff ff fa fa f9 ff 4b 4a 31 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 Data Ascii: (CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(SR:KJ1CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(C
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 4e 4d 34 ff 9a 9a 8c ff ae ae a2 ff fe fe fe ff ff ff ff ff ff ff ff ff fd fd fd ff c4 c4 bc ff 4f 4e 36 ff e1 e1 dc ff ff ff ff ff 7e 7d 6b ff 43 42 28 ff 43 42 28 ff 43 42 28 ff bb bb b1 ff f1 f1 ef ff 9e 9e 91 ff 44 43 29 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 Data Ascii: CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(NM4ON6~}kCB(CB(CB(DC)CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 53 52 3a ff c7 c7 bf ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff d7 d6 d0 ff 6e 6d 59 ff 49 48 2f ff 55 54 3c ff 56 55 3d ff 65 64 4f ff ef ef ec ff 60 5f 49 ff 56 55 3e ff 7c 7b 69 ff 8d 8c 7d ff 74 73 60 ff 9d 9c 8e ff e3 e3 df ff fc fc fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cd cd c7 ff 50 4f 36 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 50 4f 37 ff dd dc d8 ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: CB(CB(CB(CB(CB(CB(SR:nmYIH/UT<VU=edO`_IVU>\|{i}ts`PO6CB(CB(CB(CB(CB(CB(CB(CB(CB(PO7
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 45 44 2a ff 5c 5b 45 ff 60 5f 48 ff 4b 4a 31 ff 45 44 2a ff 43 42 28 ff b2 b1 a6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fa f9 ff b3 b3 a9 ff 52 51 39 ff c1 c1 b8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c3 c2 ba ff 57 56 3f ff 44 43 29 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 70 6f 5c ff 61 61 4b ff 43 42 28 ff 64 63 4e ff f2 f2 f0 ff ff ff ff ff Data Ascii: B(CB(CB(CB(CB(CB(CB(ED\[E`_HKJ1EDCB(RQ9WV?DC)CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(po\aaKCB(dcN
2024-12-10 13:21:10 UTC	1369	IN	Data Raw: 44 ff b3 b3 a9 ff fa fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f7 f5 ff ff ff ff ff ea ea e7 ff f8 f8 f7 ff ff ff ff ff ff ff ff ff fd fd fc ff fa fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff e6 e6 e2 ff 92 91 82 ff 49 48 2f ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 4c 4b 32 ff 7b 7b 69 ff ce ce c7 ff f7 f7 f6 ff fb fb fa ff e3 e3 df ff ea ea e7 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ff ef ef ed ff fc fc fb ff ff ff ff ff ff ff ff ff ff Data Ascii: DIH/CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(LK2{{i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49800	142.250.181.2	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:10 UTC	1371	OUT	GET /td/rul/10875945736?random=1733836867034&cv=11&fst=1733836867034&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:11 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 10-Dec-2024 13:36:10 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:11 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-12-10 13:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.10	49806	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:10 UTC	1130	OUT	GET /favicon-32x32.png HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:10 UTC	717	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:10 GMT Content-Type: image/png Content-Length: 1452 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-5ac" expires: Tue, 09 Dec 2025 17:54:50 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69947 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8959c946c34a-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:10 UTC	652	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 05 73 49 44 41 54 58 47 c5 57 6b 50 94 65 14 7e c0 5d 28 14 58 37 19 c5 b4 99 46 ab 45 50 51 2e 1a 97 44 51 2e 6b 2d 86 a6 e1 4c 0e db e8 0c 34 4a 25 ac 1a 8b ac e9 62 21 cb 72 15 cc bb 59 22 62 12 22 30 5c 4c 04 4d 14 95 24 12 0d 0d 10 45 51 40 07 e4 b6 0b 4b f3 be c9 27 3b bb cb b2 98 75 fe ed 7e ef 77 ce 73 ce 73 ce 73 de cf 88 b7 c0 b3 1f 2f 60 46 46 46 98 64 6d 8d 86 c6 c6 11 79 31 7a 51 00 2e 8e 0e 58 e4 e6 86 af e3 13 fe 1f 00 5b d7 7f 89 65 7c 3e 36 c7 ca f1 53 5e 9e c1 20 46 5c 01 d6 a8 51 e8 ed eb 43 fa ce 64 cc e0 f1 d0 a3 50 60 71 a0 10 f7 9a 9a c0 b1 b0 c0 93 b6 b6 61 81 19 31 00 5f 0f 0f b0 d9 2c 04 08 04 b0 9f 36 8d 06 4b 3c 70 10 47 b2 Data Ascii: PNGIHDR szzsIDATXGWkPe~](X7FEPQ.DQ.k-L4J%b!rY"b"0\LM$EQ@K';u~wsss/`FFFdmy1zQ.X[e\|>6S^ F\QCdP`qa1_,6K<pG
2024-12-10 13:21:10 UTC	800	IN	Data Raw: 42 a1 40 57 4f 37 5c 1d 1c b1 6b 7b 94 9a a3 ce ae 2e 88 63 64 58 e9 27 80 d3 cc 99 1a 41 72 cf 9c 41 84 2c 16 84 26 6d a6 13 00 e9 f6 1f 13 e2 f1 c6 c4 89 b4 e3 f3 8a cf 52 27 cb df 5f cc f8 f9 36 25 95 6a 3f e9 6e 99 38 1c 8b dc dd 41 7a 66 b0 2d 0d 0a c6 f5 9a 1a 9d 34 68 05 c0 66 b1 e0 e9 ea 4a c5 c4 cb dd 5d e7 cb bb d3 d2 10 b7 77 1f ac 5e e3 e2 51 4b 2b c8 7e f8 d0 db 9b 39 7f e1 6a 05 a2 53 53 69 12 8f db da a8 7e a8 54 aa a1 9b 90 6b 69 89 3d d1 d1 98 f6 96 ba cc 92 8e ee ea e9 81 c5 98 31 8c 03 b2 fd 0e 64 64 60 4d c0 c7 c8 2a 28 44 de f7 87 60 fc 6c 0c 09 35 75 77 ef 31 7e ca af 55 62 5b 62 22 88 52 0e 36 b5 0a b0 d9 6c 1c 94 c9 30 db ce 56 23 6b 22 2c d9 a7 7f 41 eb e3 c7 f0 f7 f5 a1 3b 5f 18 26 a2 0b 89 64 78 f7 c1 7d c4 47 46 a2 a3 b3 13 65 Data Ascii: B@WO7\k{.cdX'ArA,&mR'_6%j?n8Azf-4hfJ]w^QK+~9jSSi~Tki=1dd`M*(D`l5uw1~Ub[b"R6l0V#k",A;_&dx}GFe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.10	49813	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:11 UTC	1399	OUT	GET /android-chrome-192x192.png HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:11 UTC	719	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:11 GMT Content-Type: image/png Content-Length: 13496 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-34b8" expires: Tue, 09 Dec 2025 17:54:47 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69751 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd895e9861c454-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:11 UTC	650	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 20 00 49 44 41 54 78 5e ed 5d 05 74 54 57 13 1e 34 b8 4b 8b 43 a1 68 81 16 2b ee 5e e0 47 53 3c 04 4b 82 24 81 10 57 22 84 90 84 10 21 48 91 62 85 50 3c 40 70 87 e2 ee 56 dc 23 68 29 94 fe e7 1b d8 74 93 ac bc dd 7d 9b dd cd be 39 87 53 ca be 77 df 7d f7 de b9 6f ee cc 37 df 64 ab d1 ae fd bf 24 89 34 02 66 3a 02 d9 24 05 30 d3 99 97 5e 9b 47 40 52 00 23 5d 08 b9 73 e5 a2 8a 65 cb d2 dd 87 0f e9 fd df 7f 1b 69 2f 4d bf 5b 92 02 18 e9 1c d6 ab 55 93 86 f5 e9 4b 41 d1 d1 f4 22 39 d9 48 7b 69 fa dd 92 14 c0 08 e7 30 57 ce 9c 14 e0 e4 44 15 cb 95 a5 09 de 3e f4 2c 31 d1 08 7b 99 35 ba 24 29 80 11 ce e3 f7 b5 6b d3 bc e0 69 94 94 92 42 23 9d 5d e8 de c3 87 Data Ascii: PNGIHDRRl IDATx^]tTW4KCh+^GS<K$W"!HbP<@pV#h)t}9Sw}o7d$4f:$0^G@R#]sei/M[UKA"9H{i0WD>,1{5$)kiB#]
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: 30 7f d6 26 6c a3 19 73 e7 4a ee 51 1d e6 50 52 00 1d 06 4f ac 5b 3b b7 6e 45 01 93 27 53 81 fc f9 35 6a f2 af f7 ef 69 d6 a2 45 b4 74 ed 3a fa e7 9f 7f 34 ba 57 ba f8 f3 08 48 0a 60 e0 95 00 87 a7 55 ff 7e 34 69 d4 28 42 24 58 53 81 7b 74 82 8f 2f 5d bc 76 4d d3 5b a5 eb 25 05 30 fc 1a 00 e4 61 d2 a8 91 34 bc 6f 5f 85 fe 7f 21 3d 3c 70 fc 38 39 4e f5 67 f0 9c 24 9a 8d 80 f4 05 d0 6c bc 44 bf 3a 7f be 7c e4 e3 60 4f 3f b5 6b a7 b5 02 fc f3 e9 13 05 44 46 d1 aa f8 78 ad 5c a3 08 bc e1 8f 39 02 ee 24 05 10 7d 49 6b d6 60 91 42 85 68 ba 9b 2b 21 0e a0 8b dc bc 73 87 c6 ba 7b 68 e5 1a 2d 56 b8 30 55 2a 5f de 2c 63 0b 92 02 e8 b2 ea 04 dc 9b 23 7b 76 2a 51 ac 28 21 8a ab 48 8a 15 29 42 11 3e de d4 a8 6e 5d 01 ad 29 bf 04 07 e2 d0 79 f3 69 e5 a6 4d 1a 1f 88 db Data Ascii: 0&lsJQPRO[;nE'S5jiEt:4WH`U~4i(B$XS{t/]vM[%0a4o_!=<p89Ng$lD:\|`O?kDFx\9$}Ik`Bh+!s{h-V0U_,c#{vQ(!H)B>n])yiM
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: e7 e5 4d 97 ae 5f 17 ad 4d 53 69 48 52 00 91 67 ea f3 17 c0 9f ea 54 ff 56 e4 96 f5 d7 dc c6 1d 3b c8 2b 7c 26 fd 6d 86 05 b9 25 05 10 79 5d 7d ce f1 f5 a3 ef 6b eb 9e e4 2e 72 d7 14 36 07 16 88 fe 76 76 66 5b 83 4c 52 00 91 57 59 b1 22 85 29 dc cb 2b 43 9d 2f 91 1f 23 4a 73 48 83 04 12 d5 2f 62 96 59 25 c1 c8 0f 9e a4 00 a2 2c a5 ff 1a 29 58 a0 00 05 3a 39 51 c7 96 2d 44 6e 59 fc e6 ee 3e 7c c8 b6 3f 5c a0 e6 2a 92 02 c8 cd 3c 22 b7 d8 15 75 a9 bc 82 04 18 57 5b 5b ea d7 bd 1b 65 57 50 eb cb 58 16 1a 4c 1f 10 61 21 51 ff a3 99 91 61 49 5f 00 05 ab 10 8b b5 7d 8b e6 74 e7 fe 03 85 fc 3d 42 17 2e 4a 1c 21 0f 78 cc c0 81 5a b1 3d 0b 7d 8e ae d7 5d b8 7a 8d c6 7b 7b 13 72 07 cc 59 a4 2f c0 97 d9 97 ed dc a5 4b 96 a0 a0 98 d9 74 57 4b 82 28 90 61 f5 ea d4 89 Data Ascii: M_MSiHRgTV;+\|&m%y]}k.r6vvf[LRWY")+C/#JsH/bY%,)X:9Q-DnY>\|?\*<"uW[[eWPXLa!QaI_}t=B.J!xZ=}]z{{rY/KtWK(a
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: dc bf 4f b7 ef df e7 f1 d4 05 59 2b e6 78 28 6b cb e4 15 00 8b e9 bb 1a d5 69 fc f0 e1 6c d3 2a 2a fc 90 19 03 a9 ee 19 f8 ea 40 b9 50 9c 22 33 dc a2 38 f4 8e 76 75 63 18 c3 04 ab e1 34 a8 57 2f 8d 9f 7b e4 d4 69 72 0b 99 4e b5 ab 7d 4b 03 7b f6 e0 28 39 be 8a 79 2d 2c 14 9e 1d 40 a9 f8 fe fd 7b 8e 1a a3 2e f2 d6 bd 7b 59 79 9e 27 25 19 ad 22 98 b4 02 80 fb b2 77 e7 4e 5c 62 08 7c 3c a6 20 30 17 32 83 31 0e 0b 7f a4 b3 0b 7d 5b a5 32 4d 73 76 d6 98 7a fd 2f b8 4f 17 2e a2 c6 f5 ea 51 eb 1f 9b b0 b9 a3 8d a4 bc 7e 4d eb 12 12 08 9e 24 98 98 c6 c6 3b 6a 92 0a 80 05 84 a4 f3 91 96 96 d4 b1 45 8b 4c 31 29 b4 99 7c 43 de 03 05 98 12 34 8d 3c 27 4e a0 da 0a ca 34 a9 eb 1b cc 36 d4 2c 80 f9 a4 ab c0 0c fa f3 fe 7d 5a b7 6d 1b ad 4d d8 a6 14 88 a7 eb 73 b4 b9 df Data Ascii: OY+x(kil**@P"38vuc4W/{irN}K{(9y-,@{.{Yy'%"wN\b\|< 021}[2Msvz/O.Q~M$;jEL1)\|C4<'N46,}ZmMs
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: d0 93 17 2f 08 89 f2 86 84 2f 8b 31 86 f2 6d 98 8d 02 80 ad 39 d4 c3 dd e4 3c 3f f2 93 05 4f 8b 9d a7 17 ed 3b 7a 94 ff 19 dc 3e 9f 2b 52 d6 13 75 5d 60 81 63 c7 47 06 17 fc f3 f8 7f e4 08 bf 48 4e 66 33 28 7e d7 2e ba 7c e3 66 06 42 60 51 3b 91 49 8d 99 85 02 00 6f 02 d8 80 83 b5 75 2a 33 02 50 88 d7 6e df a6 6d fb f6 b1 5b 11 9c 36 a0 fb 68 50 a7 0e d3 aa 80 5b 28 33 d8 1b 34 99 67 ec c4 43 1c 1c 53 49 aa 70 96 f9 65 7a 70 1a 3a 73 4d da d3 f6 5a f4 03 fe 7f 30 df 5d bc 7e 9d bd 41 f2 e4 62 da b6 6b 88 fb cc 42 01 e0 f1 99 34 7a 14 0d ed d3 87 73 08 10 c0 59 bd 65 0b 2d 58 b9 8a dd 7a f2 9f 74 5c 8b 08 2b f2 8e 7b 76 e8 40 55 2b 55 32 c4 bc 28 7c 26 68 55 7a 8e 1a cd 7c 3b 90 5a d5 aa d1 b2 88 99 06 81 73 c8 22 c0 67 2e 5e e2 2f d2 d1 b3 67 e9 cf 7b f7 Data Ascii: //1m9<?O;z>+Ru]`cGHNf3(~.\|fB`Q;Iou*3Pnm[6hP[(34gCSIpezp:sMZ0]~AbkB4zsYe-Xzt\+{v@U+U2(\|&hUz\|;Zs"g.^/g{
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: d4 b6 e0 2e 84 b2 81 e2 50 17 01 2e a9 f5 8f 3f 52 af 8e 1d 39 c3 ad 44 f1 62 7a 19 17 21 7d 3c 7f f5 2a 8d 72 71 4d ad 23 2c e4 1e 63 ba c6 e8 15 00 83 85 5d af 5a a5 8a 34 61 b8 15 57 2c 94 11 aa 8a 39 90 a0 4b dc 7b f4 28 7b 32 90 07 a0 2f d9 75 e8 10 7f 05 74 15 6c 04 c0 28 95 2d 5d 9a 89 80 ab 57 a9 4c 15 cb 95 a3 92 c5 8a 53 de 3c 16 54 b4 70 11 ca 97 57 ff b4 8f 41 31 31 b4 6c dd 7a 93 34 7f 30 07 26 a1 00 b2 c5 82 03 aa cd e0 c1 5c 27 0c 95 cf c5 76 53 62 87 06 f0 4c 9f c8 4f d8 ff 9d 86 0e 13 04 c6 d3 54 49 e0 30 c8 9b 37 2f bb 86 a7 4e 72 e4 22 82 fa 14 14 c5 ee 35 7a 34 43 cc 4d 55 4c 4a 01 30 c8 48 6e e9 d2 ba 15 0d eb db 97 3d 42 42 dc a0 c6 34 39 58 2c 3f 59 8f 24 14 b2 d6 87 80 2d 2e c8 79 0a e7 09 e8 73 6c 80 f5 f7 8f 8a 66 92 2c 53 16 93 Data Ascii: .P.?R9Dbz!}<*rqM#,c]Z4aW,9K{({2/utl(-]WLS<TpWA11lz40&\'vSbLOTI07/Nr"5z4CMULJ0Hn=BB49X,?Y$-.yslf,S
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: 75 f1 22 2b f4 a5 1b 37 e9 fa ed db 4c c5 8e 6c 39 43 7c 09 32 45 01 b0 70 c6 0d 1f c6 f5 b9 10 15 34 06 81 02 cc 5e ba 8c 56 6e dc a8 32 08 03 65 45 90 09 3b 32 dc 8c ad 1a 37 e1 1c 64 4d bf 60 c8 35 80 1f 7f 65 7c 3c fb bf 15 09 3c 61 a0 70 b4 b6 1c 90 4a c6 7b fb de 3d ea 67 63 cb 29 9c e9 05 81 c2 25 e1 61 84 24 19 53 13 c0 29 3e 7e f8 c0 07 7b 38 04 4e 9e 3f cf 79 12 08 8a e1 2b 91 59 a2 77 05 80 97 02 0b 7f 82 d5 70 02 a5 87 31 09 12 54 c0 c0 70 e9 da 35 9e 04 24 a5 3f 7a fa 84 9e 3c 7b ae 90 dd 00 0b 14 08 cb fe 3f 75 27 cb ee dd 29 8f c0 2a f3 50 36 54 75 99 1e 3b 47 a1 27 47 36 26 00 b2 81 8d a2 59 83 ff fc f9 a7 2f 5d a2 c1 13 26 12 16 4c 7a a9 52 b1 02 ad 8e 89 31 7a 7e 50 21 73 8e 45 8f 43 f1 fe a3 47 69 e1 aa b8 4c 3b 14 eb 55 01 38 98 53 af Data Ascii: u"+7Ll9C\|2Ep4^Vn2eE;27dM`5e\|<<apJ{=gc)%a$S)>~{8N?y+Ywp1Tp5$?z<{?u')*P6Tu;G'G6&Y/]&LzR1z~P!sECGiL;U8S
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: 8c 81 21 0d ef 8d 38 02 5c 77 b0 55 a1 10 f2 02 26 eb 99 5e 9e a9 94 86 f0 70 24 26 25 d1 6f 1b 37 d1 b2 75 eb a8 5e ad 5a 34 27 28 30 43 39 56 40 a1 87 3a 38 52 a9 12 25 68 cc c0 9f a9 4b eb d6 ec 99 91 29 fd 85 ab 57 c9 6f 56 24 17 cf 96 f7 e8 40 39 00 a8 43 ae 00 ce 05 a6 62 ea a8 5b 3f c8 8d 00 bd 24 22 e4 62 88 28 0a 90 2f 4f 1e 72 b6 b5 a1 6e 6d db ea cd f6 c7 a2 87 5f 1e a6 43 fc ae dd 74 f3 ce 1d 9e 60 b0 45 1b 93 e0 c0 b6 7c dd 7a 8a 5e b2 24 b5 a0 35 fa 07 17 e3 f0 7e 7d 99 b5 41 7e 27 c6 a2 45 82 3c 5c ac 38 3b a5 5f a8 78 4f 97 e0 60 72 1a 33 86 93 50 e4 99 f1 fe bc ff 80 dc 43 42 98 fe 5d 5e ca 7e f5 15 79 8e 1f 4f ad 9a e8 97 1a c5 10 e3 8e af 65 c4 c2 85 9c 9f 20 86 88 a2 00 e8 08 90 89 3d 3a 74 60 28 6f 7a 4f 86 ae 1d 05 20 ec e0 89 13 b4 Data Ascii: !8\wU&^p$&%o7u^Z4'(0C9V@:8R%hK)WoV$@9Cb[?$"b(/Ornm_Ct`E\|z^$5~}A~'E<\8;_xO`r3PCB]^~yOe =:t`(ozO
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: 07 bb 75 21 a0 5d 99 ed ef 4f 25 8b 0b 2b c7 0a 08 c0 68 17 57 2e fc ad 4c e0 6c b0 1f 61 c5 98 23 7d bc 83 ba c5 a4 cb ef f8 5a 47 ff ba 84 7e 59 b5 4a 21 4b 07 36 a5 70 2f 2f fa be 76 2d 36 59 fb da da 31 d4 5b 57 31 09 05 70 1b 67 c7 c1 1d 99 60 07 b8 f1 e7 9f 1c 0c 42 96 93 3c aa 52 db 01 41 b6 13 ca 8f ea 8b 5d 19 3e 7b f8 ee 0f 9f 3c c5 5d c4 73 50 90 5b 28 b9 ec b1 33 67 c9 d1 df 5f 6d 41 0a 78 4d 40 95 02 f7 b3 2e 82 31 d6 c6 4b a5 ee 99 98 2b b0 c0 c1 e4 44 3e 72 f9 32 5f 33 b3 74 ae 1c 39 b8 80 20 e2 03 30 5b 15 49 db a6 4d 29 c4 dd 8d bd 46 b6 1e 9e a2 c0 a2 8d 5e 01 80 a1 09 70 9a 4c bd 3a 75 4a 1d 13 30 38 78 87 87 d3 f9 2b 57 44 e1 94 c7 6e 19 ea e9 41 5d 5b b7 56 37 7f 5a ff 8e 89 0f 8a 99 4d ab 37 6f e6 36 f0 cc f9 c1 d3 d2 30 40 28 6b 1c Data Ascii: u!]O%+hW.Lla#}ZG~YJ!K6p//v-6Y1[W1pg`B<RA]>{<]sP[(3g_mAxM@.1K+D>r2_3t9 0[IM)F^pL:uJ08x+WDnA][V7ZM7o60@(k
2024-12-10 13:21:11 UTC	1369	IN	Data Raw: 05 40 e1 07 40 88 e1 2f 47 92 45 ec d2 65 9c 6e d8 b7 4b 67 72 1f 3f 5e 34 2e 7c 98 17 38 c8 9e bb 7c 25 cd bc 77 6e dd 8a c2 3d 3d 55 9e 31 90 53 1c 3c 5b 35 41 ae b2 c5 84 68 70 e0 94 29 d4 b1 45 0b 85 97 20 e8 05 44 2d 70 46 b2 f8 84 31 2c cc cc ea 83 d9 2b 00 50 99 3e f6 f6 1c 60 03 10 0b 49 e7 cc bb 3f 76 0c 0d ec d1 43 ab c3 2f be 24 f8 23 7f ae 40 31 0a 1b 0f 0f b6 b3 e5 a5 55 e3 46 14 1b 18 a8 f2 39 4b d6 ae e5 dc 59 6d 04 91 60 d0 c8 00 ef 24 2f b2 02 1e 28 82 bd 62 c3 46 2e 52 67 8e 62 f6 0a 00 5f 7c 91 c2 85 79 f7 93 51 0b 22 ca 19 e6 e9 c1 e5 5c b5 11 70 7f 22 ea 2a 9f 58 b3 75 cf 1e 72 9e 16 9c 01 13 03 1f fd c2 d0 19 2a 13 d9 c1 ff 13 10 15 a5 4d 57 18 cb 83 18 80 7c 86 1b 82 57 08 76 01 60 07 6a 45 f9 43 b9 56 0f 31 e1 9b cc 5e 01 14 cd 1d Data Ascii: @@/GEenKgr?^4.\|8\|%wn==U1S<[5Ahp)E D-pF1,+P>`I?vC/$#@1UF9KYm`$/(bF.Rgb_\|yQ"\p"XurMW\|Wv`jECV1^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49816	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:11 UTC	1132	OUT	GET /img/tly-logo-sm.png HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:12 UTC	719	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:12 GMT Content-Type: image/png Content-Length: 10096 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-2770" expires: Tue, 09 Dec 2025 17:54:47 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69949 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8962e8cf7c7e-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:12 UTC	650	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 64 a0 03 00 04 00 00 00 01 00 00 00 64 00 00 00 00 33 dc 5f 85 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 Data Ascii: PNGIHDRddpTgAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZ``dd3_pHYs
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: d1 6b c7 ae 57 e5 7a bd 8a 5e 1b d8 91 e2 05 41 94 a2 02 4a 97 26 45 9a 20 41 4a e8 bd 57 e9 84 5e fe f7 9d dd 6f 5d d6 64 53 08 90 f8 fc df f3 ec 9e b3 e7 cc 99 33 f3 7d 33 5f 9f d9 74 e5 9a 36 bb 84 bf 09 a8 23 99 d2 a7 47 cc a1 43 28 92 39 33 0a 64 cb 86 73 17 2e 20 5d ba 74 69 a6 87 37 a4 99 96 26 d0 50 a1 3c 3d 11 1f b3 6f 3f ba b7 6f 87 76 b5 6a 61 e5 de bd c8 92 31 63 02 4f a6 ae db 7f 1b 82 a4 bf e1 06 1c 3a 75 0a 45 72 e6 c0 c3 f7 df 8f b2 25 23 80 95 31 c8 96 39 13 d2 12 0b f8 5b 10 e4 d2 a5 4b c8 9c 31 03 f6 2e 5a 82 67 6e bf 0d a5 c2 c3 91 37 77 1e 37 f4 d3 21 ed b0 2b 35 f8 6f 41 90 8b 24 88 43 fc 85 33 68 d9 bc b9 23 44 a3 fa f5 80 b2 37 e2 c4 e9 d3 c8 98 3e ed 74 33 ed b4 d4 a1 f9 af 5f 9a 1d d9 32 65 42 f4 ae dd e8 d2 ed 09 54 2c 5f de 15 Data Ascii: kWz^AJ&E AJW^o]dS3}3_t6#GC(93ds. ]ti7&P<=o?ovja1cO:uEr%#19[K1.Zgn7w7!+5oA$C3h#D7>t3_2eBT,_
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 90 7f 6a dd d1 a3 28 59 a4 08 c6 f4 7a 1f ab e8 75 9d 3f 6b 0e 0a 31 e4 2a 3f 93 c0 df 55 be 7b cf 5e 77 2d 28 7b 73 25 12 fe 12 ab d2 ec 38 48 02 74 ef f5 01 32 d5 a8 e5 06 46 f5 f0 12 58 ba 65 ab 73 3e 9a e1 98 70 6d 29 53 e2 fa 12 84 7d c8 2c 3b e0 f8 09 e4 25 01 da b7 6a 85 98 b1 3f a2 4b 97 7b 18 07 1f 87 45 13 27 38 b6 91 3f 47 76 8f 16 14 12 8a d5 eb 3d 5a 90 04 6e 5c da 52 62 d1 a2 67 4d 68 0f 1a 3a cc bd ab 51 c9 70 2c e4 3b df 78 fe 79 4c ed df 17 1b 66 cf 72 03 e6 5a 6a 5b d7 97 20 44 8a 1b e9 67 cf 3a d7 f8 39 0a d2 4a 15 2a e0 cb 4f 3e c1 92 a5 4b d1 eb b3 cf 70 89 da cf 6f 93 26 61 25 c3 b4 15 cb 97 c3 9c e8 68 1c 3a 7c d8 e1 fd 4a 09 a2 4a 66 cf 9d 8b 57 9e 7b 16 6d 3a df 8b e9 53 67 a0 15 8f 51 95 2a 39 77 cc db 1f 7e c8 76 2c 73 61 e2 2b Data Ascii: j(Yzu?k1?U{^w-({s%8Ht2FXes>pm)S},;%j?K{E'8?Gv=Zn\RbgMh:Qp,;xyLfrZj[ Dg:9JO>Kpo&a%h:\|JJfW{m:SgQ*9w~v,sa+
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 49 ec 9c 3f d7 21 62 c0 90 21 68 d7 b2 25 0a 14 c8 cf 24 83 0c 10 3f 17 0b 51 07 53 0a 6c f4 9f a3 46 d4 f9 f1 27 30 3a 26 06 fb e8 7e 29 54 b0 80 4f b0 27 e5 5d aa 4f 1f 11 42 70 8a 0a cb 86 8d 9b b0 6a ed 5a ec d8 b5 0b c7 a8 b6 8b 05 56 a0 0a 7c 53 8d 1a f8 e6 bb ef f0 9f 97 5f 43 9d 36 2d 92 2c e4 53 54 ed 55 a3 15 47 c8 4e 7e 7d 8c 8d 16 88 95 15 a0 65 1e 71 eb ad cc 16 3c 85 47 1f 78 00 a1 0d 1a e2 0e 2e 39 13 d3 d2 34 bf ef ae bb 5c 59 43 a4 fb 71 05 5f 36 fa 85 a4 4a f4 02 8c 1e 3c c8 79 01 44 90 a4 80 3f 21 54 e7 81 3f fe c0 ec 79 f3 30 7a d2 4f 18 39 92 b1 93 63 87 58 1d 07 12 bd 09 d0 1a 15 fe ae c1 74 d4 aa 7c 67 ae 5a 55 1d 0e 92 aa 71 a5 28 41 d4 59 75 c2 f1 4e 6f cf c5 ca 64 e9 9e a0 01 28 f7 43 2d 36 f8 08 09 f3 d9 b0 11 00 23 73 fb e8 59 Data Ascii: I?!b!h%$?QSlF'0:&~)TO']OBpjZV\|S_C6-,STUGN~}eq<Gx.94\YCq_6J<yD?!T?y0zO9cXt\|gZUq(AYuNod(C-6#sY
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 0e eb a0 90 28 10 32 34 bd 95 4d d2 90 71 ea 3a dc f9 ad f3 ed b7 a3 71 eb 0e 28 26 db 84 d1 46 2b e7 4e 82 7c 65 cc 90 11 5d 99 3b 85 df 97 50 af 2d 0c 14 29 84 1a ad 5a 3b ff d9 41 26 df a1 52 65 cc 5d b4 08 1d e9 47 b3 88 65 90 ea e2 bd 65 6d d7 00 00 ed 90 b3 f4 89 59 00 4a bd f2 30 cc 78 1f 4f d2 8d 14 89 87 a8 41 ca b7 92 ec d8 c5 00 55 46 fa 70 2a 96 2b e7 cb 6f 92 30 0d 1c 95 ea a4 3e 12 c0 5a 1f 78 5f a7 8e ce d0 8a f2 6e 20 13 ac 17 aa 4b cf 6a cb 8c 6c 9c 1d 3f 6f dc 8c a6 b5 6b 21 1f 67 a2 ec 1c cd 52 bd b3 14 3d ca e3 16 2e c2 19 22 b2 08 e3 de 8a d5 a4 4b e7 31 e8 92 9a 22 aa 77 4e 64 7e d8 f8 e1 43 11 c2 55 5c 67 25 e3 38 43 cc fe 50 52 87 66 be 70 11 d8 d7 60 7d 09 bc 97 22 ee 77 59 ac ca 2e 91 f3 50 82 7c ed 4c 1a 4d 84 b9 34 a0 ea de 74 Data Ascii: (24Mq:q(&F+N\|e];P-)Z;A&Re]GeemYJ0xOAUFp*+o0>Zx_n Kjl?ok!gR=."K1"wNd~CU\g%8CPRfp`}"wY.P\|LM4t
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 08 f4 11 b2 df a7 2d b1 79 cb 16 cc a1 0d f3 e2 53 4f b9 cf 98 09 13 b9 5c a0 b9 cb 96 57 5d 72 1e 7e 4b 6d e6 e1 c7 9e 44 95 16 cd 9c 5c 8b 39 f0 07 3a 37 6a e8 cb c7 d5 ec c1 a1 fd 24 32 dd fd 1b b6 f8 66 81 90 6c 04 b6 76 a9 ac de b9 86 ae 97 15 cc d2 5f ce cd 03 f6 91 2d 47 30 c1 ee c9 ae 5d d1 b8 7e 7d df 8c b6 67 02 8f 6e b6 f0 a2 36 36 b8 8d ec 51 f6 97 06 54 2f 06 df e4 84 fc 83 ef 50 94 31 38 03 4e 84 eb 44 ac 20 84 53 6f 1e 75 f0 67 ba ff 0b 0f 75 e9 e2 da 72 f1 12 a7 3e ad de 94 00 43 92 46 a2 7c 4f fa d4 aa 5e dd 05 ab c6 fd f4 13 b4 2f d6 9d e4 e5 0f 53 f5 3c 47 a3 6b 3c b5 ba 01 74 cf 84 33 9d 48 69 47 32 ca 14 16 8e 7a f0 01 a7 8a aa 4d 92 01 82 ec d4 bc 10 52 08 d3 b8 fc a0 14 37 28 33 d6 a3 65 10 5b 18 db 9f 3e 7b 36 9e fd e0 23 60 d3 06 Data Ascii: -ySO\W]r~KmD\9:7j$2flv_-G0]~}gn66QT/P18ND Sougur>CF\|O^/S<Gk<t3HiG2zMR7(3e[>{6#`
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: de a3 ea 2b b6 a9 b7 ea 5f 80 ce d3 5c 08 06 09 12 44 0f ab f1 ea 90 8b c4 f1 58 85 82 33 5b a9 08 8f 1d c2 df f2 d7 c4 52 d8 2a 5a b7 6e fe 22 f4 78 eb 75 5f 62 9a 88 21 f7 f4 0a 2e 8e 94 90 17 6b 53 ea e8 59 5a d0 1a c5 b1 4c 82 de c3 a4 87 3e 3d 7b 62 f2 f4 e9 f1 12 c3 3a 61 b3 47 21 e2 d7 3a dd 85 b7 5f fb 37 76 72 91 8c ec 06 b5 51 60 c4 94 4b 7c cc f4 9f 51 b8 4e 3d 37 22 f7 cf 9f eb 94 0c c5 50 34 62 83 0d 14 ab cb 08 6c ef f7 3f 5a 19 6b 93 ee c9 28 6c 3b 76 1c 76 b1 4f bd b9 48 a9 78 48 31 1a b7 4f 3a 1c cc d8 b2 15 65 68 b9 db 73 fe 75 d9 79 a2 08 62 85 45 18 69 5e 8a 81 28 00 63 e0 ae 1b 0b 38 1b 8b 32 5c 22 6c a0 05 fa 6f 7c f0 21 c6 d1 a5 10 27 d0 dd a1 c0 56 77 5a b4 f6 77 45 71 96 f3 5e 14 82 44 48 19 6d b5 e8 0e 17 c8 c3 5a 89 eb 1a 0d 79 Data Ascii: +_\DX3[R*Zn"xu_b!.kSYZL>={b:aG!:_7vrQ`K\|QN=7"P4bl?Zk(l;vvOHxH1O:ehsuybEi^(c82\"lo\|!'VwZwEq^DHmZy
2024-12-10 13:21:12 UTC	1232	IN	Data Raw: 39 51 4b 69 e3 20 b2 1c 63 e9 ab dd ec 52 39 03 11 4d 4a c3 79 12 c1 f0 29 1b 59 19 96 0a 43 bf d9 b3 17 c3 c4 9e 19 b2 8d 4a c8 40 66 cf 68 81 a7 88 a1 99 21 8d d1 08 69 75 5e 8b e3 55 61 59 89 6d b8 12 db 72 50 45 de 49 8d e6 90 d8 56 ce 7c 74 ca 79 34 12 ff 3a 8c 18 62 51 2f f6 e8 e1 90 a5 4d cf 86 73 bf aa 28 b7 85 d2 39 1f 1b b3 e7 c4 82 14 4d 3c c3 99 62 a0 ce 3a 81 5e 38 84 8e c5 0c 98 46 b7 8b b6 fc 08 6f 71 0b de e9 d3 8f 6b e8 db 3a a1 6c 2c d1 9e bb 96 c7 eb 36 43 d4 49 8d 5c 11 45 41 1b 17 6a 3d 7e 88 7c f9 f2 31 62 c4 90 bf eb 6d fe 63 e7 f0 7e fd f0 34 7d 46 42 f8 8e 39 bf 20 9c fe 33 c1 05 b2 27 07 5e 96 22 b7 48 36 5a e3 da c4 80 95 7a 6f 79 6c 91 a8 a8 48 bc 4a 8b 1d 2b 96 f3 2f 75 0a 20 b2 46 35 12 2f 02 c7 68 63 08 8c 25 ba 1f d7 f8 eb Data Ascii: 9QKi cR9MJy)YCJ@fh!iu^UaYmrPEIV\|ty4:bQ/Ms(9M<b:^8Foqk:l,6CI\EAj=~\|1bmc~4}FB9 3'^"H6ZzoylHJ+/u F5/hc%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49818	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:11 UTC	1124	OUT	GET /favicon.ico HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:12 UTC	707	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:12 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-3c2e" expires: Tue, 09 Dec 2025 17:54:50 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69949 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8963cd390c7c-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:12 UTC	662	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 5d 5c 46 ff d4 d4 ce ff 5e 5d 47 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 4f 4e 36 ff 45 44 2a ff f3 f3 f1 ff 44 43 29 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 53 53 3b ff b4 b3 a9 Data Ascii: 3c2e h6 (00 h&( CB(CB(CB(CB(CB(CB(CB(]\F^]GCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(ON6ED*DC)CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(SS;
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 7f ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 5b 5a 44 ff f4 f3 f2 ff ff ff ff ff ff ff ff ff fd fd fd ff c3 c3 ba ff ff ff ff ff d3 d3 cd ff 6d 6c 58 ff 54 53 3c ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 67 66 51 ff e7 e7 e4 ff f9 f9 f8 ff ff ff ff ff fc fc fc ff fd fd fd ff ed ed eb ff f4 f4 f3 ff ea ea e7 ff d9 d9 d4 ff 65 65 50 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 7c 7c 6a ff 9e 9e 90 ff d6 d6 d1 ff ff ff ff ff ff ff ff ff 95 95 86 ff 80 7f 6d ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff ec ec e9 ff ff ff ff ff ff ff ff ff df df da ff 43 42 28 ff 43 Data Ascii: CB(CB(CB(CB(CB(CB(CB([ZDmlXTS<CB(CB(CB(CB(CB(gfQeePCB(CB(CB(CB(CB(CB(CB(\|\|jmCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(C
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: ff 43 42 28 ff 4d 4c 33 ff 87 86 76 ff ff ff ff ff fd fd fc ff de de da ff 53 52 3a ff e9 e9 e6 ff b1 b1 a6 ff 43 42 28 ff 43 42 28 ff b2 b2 a7 ff 68 67 52 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 6f 6e 5a ff ea ea e8 ff fe fe fd ff ff ff ff ff ff ff ff ff 74 74 60 ff f3 f3 f1 ff b5 b4 aa ff 43 42 28 ff 43 42 28 ff c8 c7 bf ff f3 f3 f2 ff 55 54 3c ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 51 50 38 ff 87 86 75 ff 43 42 Data Ascii: CB(ML3vSR:CB(CB(hgRCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(onZtt`CB(CB(UT<CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(QP8uCB
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 73 72 5e ff 80 7f 6e ff 62 61 4b ff f5 f5 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec ec ea ff 97 96 88 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa f9 f9 ff bd bc b3 ff 77 77 64 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 50 4f 37 ff f6 f5 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 83 83 72 ff ff ff ff ff ff ff ff ff ff ff ff ff e8 e8 e4 ff 6c 6b 57 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 Data Ascii: CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(sr^nbaKwwdCB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(PO7rlkWCB(CB(CB(CB(CB(CB(CB(
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: bd b4 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 46 45 2c ff 43 42 28 ff d7 d7 d1 ff ff ff ff ff f9 f9 f8 ff 5a 59 43 ff 43 42 28 ff 51 50 38 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff b4 b4 aa ff fe fe fe ff 8c 8b 7b ff 43 42 28 ff 43 42 28 ff Data Ascii: CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(FE,CB(ZYCCB(QP8CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB({CB(CB(
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 53 52 3a ff ff ff ff ff ff ff ff ff fa fa f9 ff 4b 4a 31 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 Data Ascii: (CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(SR:KJ1CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(C
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 4e 4d 34 ff 9a 9a 8c ff ae ae a2 ff fe fe fe ff ff ff ff ff ff ff ff ff fd fd fd ff c4 c4 bc ff 4f 4e 36 ff e1 e1 dc ff ff ff ff ff 7e 7d 6b ff 43 42 28 ff 43 42 28 ff 43 42 28 ff bb bb b1 ff f1 f1 ef ff 9e 9e 91 ff 44 43 29 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 Data Ascii: CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(NM4ON6~}kCB(CB(CB(DC)CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 53 52 3a ff c7 c7 bf ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff d7 d6 d0 ff 6e 6d 59 ff 49 48 2f ff 55 54 3c ff 56 55 3d ff 65 64 4f ff ef ef ec ff 60 5f 49 ff 56 55 3e ff 7c 7b 69 ff 8d 8c 7d ff 74 73 60 ff 9d 9c 8e ff e3 e3 df ff fc fc fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cd cd c7 ff 50 4f 36 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 50 4f 37 ff dd dc d8 ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: CB(CB(CB(CB(CB(CB(SR:nmYIH/UT<VU=edO`_IVU>\|{i}ts`PO6CB(CB(CB(CB(CB(CB(CB(CB(CB(PO7
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 45 44 2a ff 5c 5b 45 ff 60 5f 48 ff 4b 4a 31 ff 45 44 2a ff 43 42 28 ff b2 b1 a6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fa f9 ff b3 b3 a9 ff 52 51 39 ff c1 c1 b8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c3 c2 ba ff 57 56 3f ff 44 43 29 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 70 6f 5c ff 61 61 4b ff 43 42 28 ff 64 63 4e ff f2 f2 f0 ff ff ff ff ff Data Ascii: B(CB(CB(CB(CB(CB(CB(ED\[E`_HKJ1EDCB(RQ9WV?DC)CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(po\aaKCB(dcN
2024-12-10 13:21:12 UTC	1369	IN	Data Raw: 44 ff b3 b3 a9 ff fa fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f7 f5 ff ff ff ff ff ea ea e7 ff f8 f8 f7 ff ff ff ff ff ff ff ff ff fd fd fc ff fa fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff e6 e6 e2 ff 92 91 82 ff 49 48 2f ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 43 42 28 ff 4c 4b 32 ff 7b 7b 69 ff ce ce c7 ff f7 f7 f6 ff fb fb fa ff e3 e3 df ff ea ea e7 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ff ef ef ed ff fc fc fb ff ff ff ff ff ff ff ff ff ff Data Ascii: DIH/CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(CB(LK2{{i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.10	49822	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:12 UTC	1347	OUT	GET /js/9950.js?id=3fd808fe8e73d7122f13 HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York
2024-12-10 13:21:13 UTC	731	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-2e4" expires: Tue, 09 Dec 2025 17:54:49 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Age: 69950 CF-Cache-Status: HIT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd89685f8d0c9e-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:13 UTC	638	IN	Data Raw: 32 65 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 35 30 5d 2c 7b 31 39 39 35 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 63 6f 6e 73 74 20 6f 3d 7b 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 22 6c 69 6e 6b 2d 69 6e 70 75 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 65 28 38 35 36 37 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 31 38 35 36 37 29 29 7d 2c 22 73 68 6f 72 74 65 6e 65 64 2d 6c 69 6e 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 65 28 31 31 36 36 29 2e 74 68 65 6e Data Ascii: 2e4"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[9950],{19950:(t,e,n)=>{n.r(e),n.d(e,{default:()=>i});const o={components:{"link-input":function(){return n.e(8567).then(n.bind(n,18567))},"shortened-links":function(){return n.e(1166).then
2024-12-10 13:21:13 UTC	109	IN	Data Raw: 61 69 6c 61 62 6c 65 2e 22 7d 29 7d 2c 6d 65 74 68 6f 64 73 3a 7b 7d 7d 3b 63 6f 6e 73 74 20 69 3d 28 30 2c 6e 28 35 31 39 30 30 29 2e 5a 29 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 2c 21 31 2c 6e 75 6c 6c 2c 22 66 37 37 39 31 66 34 63 22 2c 6e 75 6c 6c 29 2e 65 78 70 6f 72 74 73 7d 7d 5d 29 3b 0d 0a Data Ascii: ailable."})},methods:{}};const i=(0,n(51900).Z)(o,undefined,undefined,!1,null,"f7791f4c",null).exports}}]);
2024-12-10 13:21:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49819	172.217.17.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:13 UTC	1287	OUT	GET /pagead/viewthroughconversion/10875945736/?random=1733836867034&cv=11&fst=1733836867034&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-10 13:21:13 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; expires=Thu, 10-Dec-2026 13:21:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:13 UTC	379	IN	Data Raw: 31 32 33 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1233(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-12-10 13:21:13 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==voi
2024-12-10 13:21:13 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 61 2c 62 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 7d 7d 42 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 20 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 Data Ascii: fetch(a,b);if(c)return c.then(function(){}).catch(function(){}),!0}catch(d){}}B(a);return!0} function C(a){var b=new Image(1,1);b.onload=function(){b.onload=null};b.onerror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0
2024-12-10 13:21:13 UTC	1390	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 28 72 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 67 6f 6f 67 5f 63 6f 6e 76 5f 69 66 72 61 6d 65 22 29 29 7c 7c 72 2e 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 Data Ascii: c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!(r=a.document.getElementById("goog_conv_iframe"))\|\|r.src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}v
2024-12-10 13:21:13 UTC	118	IN	Data Raw: 4c 37 64 4f 35 65 66 6f 4e 2d 56 38 78 69 52 71 39 45 65 34 55 6c 69 6b 4c 6d 37 39 78 33 63 35 41 54 6c 44 65 33 37 50 61 53 53 46 35 63 59 77 37 6f 58 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 37 35 32 35 30 36 38 31 37 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: L7dO5efoN-V8xiRq9Ee4UlikLm79x3c5ATlDe37PaSSF5cYw7oX\x26random\x3d2752506817\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-12-10 13:21:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49826	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:13 UTC	1287	OUT	GET /android-chrome-192x192.png HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:13 UTC	719	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:13 GMT Content-Type: image/png Content-Length: 13496 Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT etag: "12cea601-34b8" expires: Tue, 09 Dec 2025 17:54:47 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Vary: Accept-Encoding CF-Cache-Status: HIT Age: 69753 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd896a2d0b434b-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:13 UTC	650	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 20 00 49 44 41 54 78 5e ed 5d 05 74 54 57 13 1e 34 b8 4b 8b 43 a1 68 81 16 2b ee 5e e0 47 53 3c 04 4b 82 24 81 10 57 22 84 90 84 10 21 48 91 62 85 50 3c 40 70 87 e2 ee 56 dc 23 68 29 94 fe e7 1b d8 74 93 ac bc dd 7d 9b dd cd be 39 87 53 ca be 77 df 7d f7 de b9 6f ee cc 37 df 64 ab d1 ae fd bf 24 89 34 02 66 3a 02 d9 24 05 30 d3 99 97 5e 9b 47 40 52 00 23 5d 08 b9 73 e5 a2 8a 65 cb d2 dd 87 0f e9 fd df 7f 1b 69 2f 4d bf 5b 92 02 18 e9 1c d6 ab 55 93 86 f5 e9 4b 41 d1 d1 f4 22 39 d9 48 7b 69 fa dd 92 14 c0 08 e7 30 57 ce 9c 14 e0 e4 44 15 cb 95 a5 09 de 3e f4 2c 31 d1 08 7b 99 35 ba 24 29 80 11 ce e3 f7 b5 6b d3 bc e0 69 94 94 92 42 23 9d 5d e8 de c3 87 Data Ascii: PNGIHDRRl IDATx^]tTW4KCh+^GS<K$W"!HbP<@pV#h)t}9Sw}o7d$4f:$0^G@R#]sei/M[UKA"9H{i0WD>,1{5$)kiB#]
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: 30 7f d6 26 6c a3 19 73 e7 4a ee 51 1d e6 50 52 00 1d 06 4f ac 5b 3b b7 6e 45 01 93 27 53 81 fc f9 35 6a f2 af f7 ef 69 d6 a2 45 b4 74 ed 3a fa e7 9f 7f 34 ba 57 ba f8 f3 08 48 0a 60 e0 95 00 87 a7 55 ff 7e 34 69 d4 28 42 24 58 53 81 7b 74 82 8f 2f 5d bc 76 4d d3 5b a5 eb 25 05 30 fc 1a 00 e4 61 d2 a8 91 34 bc 6f 5f 85 fe 7f 21 3d 3c 70 fc 38 39 4e f5 67 f0 9c 24 9a 8d 80 f4 05 d0 6c bc 44 bf 3a 7f be 7c e4 e3 60 4f 3f b5 6b a7 b5 02 fc f3 e9 13 05 44 46 d1 aa f8 78 ad 5c a3 08 bc e1 8f 39 02 ee 24 05 10 7d 49 6b d6 60 91 42 85 68 ba 9b 2b 21 0e a0 8b dc bc 73 87 c6 ba 7b 68 e5 1a 2d 56 b8 30 55 2a 5f de 2c 63 0b 92 02 e8 b2 ea 04 dc 9b 23 7b 76 2a 51 ac 28 21 8a ab 48 8a 15 29 42 11 3e de d4 a8 6e 5d 01 ad 29 bf 04 07 e2 d0 79 f3 69 e5 a6 4d 1a 1f 88 db Data Ascii: 0&lsJQPRO[;nE'S5jiEt:4WH`U~4i(B$XS{t/]vM[%0a4o_!=<p89Ng$lD:\|`O?kDFx\9$}Ik`Bh+!s{h-V0U_,c#{vQ(!H)B>n])yiM
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: e7 e5 4d 97 ae 5f 17 ad 4d 53 69 48 52 00 91 67 ea f3 17 c0 9f ea 54 ff 56 e4 96 f5 d7 dc c6 1d 3b c8 2b 7c 26 fd 6d 86 05 b9 25 05 10 79 5d 7d ce f1 f5 a3 ef 6b eb 9e e4 2e 72 d7 14 36 07 16 88 fe 76 76 66 5b 83 4c 52 00 91 57 59 b1 22 85 29 dc cb 2b 43 9d 2f 91 1f 23 4a 73 48 83 04 12 d5 2f 62 96 59 25 c1 c8 0f 9e a4 00 a2 2c a5 ff 1a 29 58 a0 00 05 3a 39 51 c7 96 2d 44 6e 59 fc e6 ee 3e 7c c8 b6 3f 5c a0 e6 2a 92 02 c8 cd 3c 22 b7 d8 15 75 a9 bc 82 04 18 57 5b 5b ea d7 bd 1b 65 57 50 eb cb 58 16 1a 4c 1f 10 61 21 51 ff a3 99 91 61 49 5f 00 05 ab 10 8b b5 7d 8b e6 74 e7 fe 03 85 fc 3d 42 17 2e 4a 1c 21 0f 78 cc c0 81 5a b1 3d 0b 7d 8e ae d7 5d b8 7a 8d c6 7b 7b 13 72 07 cc 59 a4 2f c0 97 d9 97 ed dc a5 4b 96 a0 a0 98 d9 74 57 4b 82 28 90 61 f5 ea d4 89 Data Ascii: M_MSiHRgTV;+\|&m%y]}k.r6vvf[LRWY")+C/#JsH/bY%,)X:9Q-DnY>\|?\*<"uW[[eWPXLa!QaI_}t=B.J!xZ=}]z{{rY/KtWK(a
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: dc bf 4f b7 ef df e7 f1 d4 05 59 2b e6 78 28 6b cb e4 15 00 8b e9 bb 1a d5 69 fc f0 e1 6c d3 2a 2a fc 90 19 03 a9 ee 19 f8 ea 40 b9 50 9c 22 33 dc a2 38 f4 8e 76 75 63 18 c3 04 ab e1 34 a8 57 2f 8d 9f 7b e4 d4 69 72 0b 99 4e b5 ab 7d 4b 03 7b f6 e0 28 39 be 8a 79 2d 2c 14 9e 1d 40 a9 f8 fe fd 7b 8e 1a a3 2e f2 d6 bd 7b 59 79 9e 27 25 19 ad 22 98 b4 02 80 fb b2 77 e7 4e 5c 62 08 7c 3c a6 20 30 17 32 83 31 0e 0b 7f a4 b3 0b 7d 5b a5 32 4d 73 76 d6 98 7a fd 2f b8 4f 17 2e a2 c6 f5 ea 51 eb 1f 9b b0 b9 a3 8d a4 bc 7e 4d eb 12 12 08 9e 24 98 98 c6 c6 3b 6a 92 0a 80 05 84 a4 f3 91 96 96 d4 b1 45 8b 4c 31 29 b4 99 7c 43 de 03 05 98 12 34 8d 3c 27 4e a0 da 0a ca 34 a9 eb 1b cc 36 d4 2c 80 f9 a4 ab c0 0c fa f3 fe 7d 5a b7 6d 1b ad 4d d8 a6 14 88 a7 eb 73 b4 b9 df Data Ascii: OY+x(kil**@P"38vuc4W/{irN}K{(9y-,@{.{Yy'%"wN\b\|< 021}[2Msvz/O.Q~M$;jEL1)\|C4<'N46,}ZmMs
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: d0 93 17 2f 08 89 f2 86 84 2f 8b 31 86 f2 6d 98 8d 02 80 ad 39 d4 c3 dd e4 3c 3f f2 93 05 4f 8b 9d a7 17 ed 3b 7a 94 ff 19 dc 3e 9f 2b 52 d6 13 75 5d 60 81 63 c7 47 06 17 fc f3 f8 7f e4 08 bf 48 4e 66 33 28 7e d7 2e ba 7c e3 66 06 42 60 51 3b 91 49 8d 99 85 02 00 6f 02 d8 80 83 b5 75 2a 33 02 50 88 d7 6e df a6 6d fb f6 b1 5b 11 9c 36 a0 fb 68 50 a7 0e d3 aa 80 5b 28 33 d8 1b 34 99 67 ec c4 43 1c 1c 53 49 aa 70 96 f9 65 7a 70 1a 3a 73 4d da d3 f6 5a f4 03 fe 7f 30 df 5d bc 7e 9d bd 41 f2 e4 62 da b6 6b 88 fb cc 42 01 e0 f1 99 34 7a 14 0d ed d3 87 73 08 10 c0 59 bd 65 0b 2d 58 b9 8a dd 7a f2 9f 74 5c 8b 08 2b f2 8e 7b 76 e8 40 55 2b 55 32 c4 bc 28 7c 26 68 55 7a 8e 1a cd 7c 3b 90 5a d5 aa d1 b2 88 99 06 81 73 c8 22 c0 67 2e 5e e2 2f d2 d1 b3 67 e9 cf 7b f7 Data Ascii: //1m9<?O;z>+Ru]`cGHNf3(~.\|fB`Q;Iou*3Pnm[6hP[(34gCSIpezp:sMZ0]~AbkB4zsYe-Xzt\+{v@U+U2(\|&hUz\|;Zs"g.^/g{
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: d4 b6 e0 2e 84 b2 81 e2 50 17 01 2e a9 f5 8f 3f 52 af 8e 1d 39 c3 ad 44 f1 62 7a 19 17 21 7d 3c 7f f5 2a 8d 72 71 4d ad 23 2c e4 1e 63 ba c6 e8 15 00 83 85 5d af 5a a5 8a 34 61 b8 15 57 2c 94 11 aa 8a 39 90 a0 4b dc 7b f4 28 7b 32 90 07 a0 2f d9 75 e8 10 7f 05 74 15 6c 04 c0 28 95 2d 5d 9a 89 80 ab 57 a9 4c 15 cb 95 a3 92 c5 8a 53 de 3c 16 54 b4 70 11 ca 97 57 ff b4 8f 41 31 31 b4 6c dd 7a 93 34 7f 30 07 26 a1 00 b2 c5 82 03 aa cd e0 c1 5c 27 0c 95 cf c5 76 53 62 87 06 f0 4c 9f c8 4f d8 ff 9d 86 0e 13 04 c6 d3 54 49 e0 30 c8 9b 37 2f bb 86 a7 4e 72 e4 22 82 fa 14 14 c5 ee 35 7a 34 43 cc 4d 55 4c 4a 01 30 c8 48 6e e9 d2 ba 15 0d eb db 97 3d 42 42 dc a0 c6 34 39 58 2c 3f 59 8f 24 14 b2 d6 87 80 2d 2e c8 79 0a e7 09 e8 73 6c 80 f5 f7 8f 8a 66 92 2c 53 16 93 Data Ascii: .P.?R9Dbz!}<*rqM#,c]Z4aW,9K{({2/utl(-]WLS<TpWA11lz40&\'vSbLOTI07/Nr"5z4CMULJ0Hn=BB49X,?Y$-.yslf,S
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: 75 f1 22 2b f4 a5 1b 37 e9 fa ed db 4c c5 8e 6c 39 43 7c 09 32 45 01 b0 70 c6 0d 1f c6 f5 b9 10 15 34 06 81 02 cc 5e ba 8c 56 6e dc a8 32 08 03 65 45 90 09 3b 32 dc 8c ad 1a 37 e1 1c 64 4d bf 60 c8 35 80 1f 7f 65 7c 3c fb bf 15 09 3c 61 a0 70 b4 b6 1c 90 4a c6 7b fb de 3d ea 67 63 cb 29 9c e9 05 81 c2 25 e1 61 84 24 19 53 13 c0 29 3e 7e f8 c0 07 7b 38 04 4e 9e 3f cf 79 12 08 8a e1 2b 91 59 a2 77 05 80 97 02 0b 7f 82 d5 70 02 a5 87 31 09 12 54 c0 c0 70 e9 da 35 9e 04 24 a5 3f 7a fa 84 9e 3c 7b ae 90 dd 00 0b 14 08 cb fe 3f 75 27 cb ee dd 29 8f c0 2a f3 50 36 54 75 99 1e 3b 47 a1 27 47 36 26 00 b2 81 8d a2 59 83 ff fc f9 a7 2f 5d a2 c1 13 26 12 16 4c 7a a9 52 b1 02 ad 8e 89 31 7a 7e 50 21 73 8e 45 8f 43 f1 fe a3 47 69 e1 aa b8 4c 3b 14 eb 55 01 38 98 53 af Data Ascii: u"+7Ll9C\|2Ep4^Vn2eE;27dM`5e\|<<apJ{=gc)%a$S)>~{8N?y+Ywp1Tp5$?z<{?u')*P6Tu;G'G6&Y/]&LzR1z~P!sECGiL;U8S
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: 8c 81 21 0d ef 8d 38 02 5c 77 b0 55 a1 10 f2 02 26 eb 99 5e 9e a9 94 86 f0 70 24 26 25 d1 6f 1b 37 d1 b2 75 eb a8 5e ad 5a 34 27 28 30 43 39 56 40 a1 87 3a 38 52 a9 12 25 68 cc c0 9f a9 4b eb d6 ec 99 91 29 fd 85 ab 57 c9 6f 56 24 17 cf 96 f7 e8 40 39 00 a8 43 ae 00 ce 05 a6 62 ea a8 5b 3f c8 8d 00 bd 24 22 e4 62 88 28 0a 90 2f 4f 1e 72 b6 b5 a1 6e 6d db ea cd f6 c7 a2 87 5f 1e a6 43 fc ae dd 74 f3 ce 1d 9e 60 b0 45 1b 93 e0 c0 b6 7c dd 7a 8a 5e b2 24 b5 a0 35 fa 07 17 e3 f0 7e 7d 99 b5 41 7e 27 c6 a2 45 82 3c 5c ac 38 3b a5 5f a8 78 4f 97 e0 60 72 1a 33 86 93 50 e4 99 f1 fe bc ff 80 dc 43 42 98 fe 5d 5e ca 7e f5 15 79 8e 1f 4f ad 9a e8 97 1a c5 10 e3 8e af 65 c4 c2 85 9c 9f 20 86 88 a2 00 e8 08 90 89 3d 3a 74 60 28 6f 7a 4f 86 ae 1d 05 20 ec e0 89 13 b4 Data Ascii: !8\wU&^p$&%o7u^Z4'(0C9V@:8R%hK)WoV$@9Cb[?$"b(/Ornm_Ct`E\|z^$5~}A~'E<\8;_xO`r3PCB]^~yOe =:t`(ozO
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: 07 bb 75 21 a0 5d 99 ed ef 4f 25 8b 0b 2b c7 0a 08 c0 68 17 57 2e fc ad 4c e0 6c b0 1f 61 c5 98 23 7d bc 83 ba c5 a4 cb ef f8 5a 47 ff ba 84 7e 59 b5 4a 21 4b 07 36 a5 70 2f 2f fa be 76 2d 36 59 fb da da 31 d4 5b 57 31 09 05 70 1b 67 c7 c1 1d 99 60 07 b8 f1 e7 9f 1c 0c 42 96 93 3c aa 52 db 01 41 b6 13 ca 8f ea 8b 5d 19 3e 7b f8 ee 0f 9f 3c c5 5d c4 73 50 90 5b 28 b9 ec b1 33 67 c9 d1 df 5f 6d 41 0a 78 4d 40 95 02 f7 b3 2e 82 31 d6 c6 4b a5 ee 99 98 2b b0 c0 c1 e4 44 3e 72 f9 32 5f 33 b3 74 ae 1c 39 b8 80 20 e2 03 30 5b 15 49 db a6 4d 29 c4 dd 8d bd 46 b6 1e 9e a2 c0 a2 8d 5e 01 80 a1 09 70 9a 4c bd 3a 75 4a 1d 13 30 38 78 87 87 d3 f9 2b 57 44 e1 94 c7 6e 19 ea e9 41 5d 5b b7 56 37 7f 5a ff 8e 89 0f 8a 99 4d ab 37 6f e6 36 f0 cc f9 c1 d3 d2 30 40 28 6b 1c Data Ascii: u!]O%+hW.Lla#}ZG~YJ!K6p//v-6Y1[W1pg`B<RA]>{<]sP[(3g_mAxM@.1K+D>r2_3t9 0[IM)F^pL:uJ08x+WDnA][V7ZM7o60@(k
2024-12-10 13:21:13 UTC	1369	IN	Data Raw: 05 40 e1 07 40 88 e1 2f 47 92 45 ec d2 65 9c 6e d8 b7 4b 67 72 1f 3f 5e 34 2e 7c 98 17 38 c8 9e bb 7c 25 cd bc 77 6e dd 8a c2 3d 3d 55 9e 31 90 53 1c 3c 5b 35 41 ae b2 c5 84 68 70 e0 94 29 d4 b1 45 0b 85 97 20 e8 05 44 2d 70 46 b2 f8 84 31 2c cc cc ea 83 d9 2b 00 50 99 3e f6 f6 1c 60 03 10 0b 49 e7 cc bb 3f 76 0c 0d ec d1 43 ab c3 2f be 24 f8 23 7f ae 40 31 0a 1b 0f 0f b6 b3 e5 a5 55 e3 46 14 1b 18 a8 f2 39 4b d6 ae e5 dc 59 6d 04 91 60 d0 c8 00 ef 24 2f b2 02 1e 28 82 bd 62 c3 46 2e 52 67 8e 62 f6 0a 00 5f 7c 91 c2 85 79 f7 93 51 0b 22 ca 19 e6 e9 c1 e5 5c b5 11 70 7f 22 ea 2a 9f 58 b3 75 cf 1e 72 9e 16 9c 01 13 03 1f fd c2 d0 19 2a 13 d9 c1 ff 13 10 15 a5 4d 57 18 cb 83 18 80 7c 86 1b 82 57 08 76 01 60 07 6a 45 f9 43 b9 56 0f 31 e1 9b cc 5e 01 14 cd 1d Data Ascii: @@/GEenKgr?^4.\|8\|%wn==U1S<[5Ahp)E D-pF1,+P>`I?vC/$#@1UF9KYm`$/(bF.Rgb_\|yQ"\p"XurMW\|Wv`jECV1^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.10	49835	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:14 UTC	1295	OUT	GET /js/9950.js?id=3fd808fe8e73d7122f13 HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:14 UTC	731	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:14 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-2e4" expires: Tue, 09 Dec 2025 17:54:49 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 Age: 69951 CF-Cache-Status: HIT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8972cd6543d0-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:14 UTC	638	IN	Data Raw: 32 65 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 35 30 5d 2c 7b 31 39 39 35 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 63 6f 6e 73 74 20 6f 3d 7b 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 22 6c 69 6e 6b 2d 69 6e 70 75 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 65 28 38 35 36 37 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 31 38 35 36 37 29 29 7d 2c 22 73 68 6f 72 74 65 6e 65 64 2d 6c 69 6e 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 65 28 31 31 36 36 29 2e 74 68 65 6e Data Ascii: 2e4"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[9950],{19950:(t,e,n)=>{n.r(e),n.d(e,{default:()=>i});const o={components:{"link-input":function(){return n.e(8567).then(n.bind(n,18567))},"shortened-links":function(){return n.e(1166).then
2024-12-10 13:21:14 UTC	109	IN	Data Raw: 61 69 6c 61 62 6c 65 2e 22 7d 29 7d 2c 6d 65 74 68 6f 64 73 3a 7b 7d 7d 3b 63 6f 6e 73 74 20 69 3d 28 30 2c 6e 28 35 31 39 30 30 29 2e 5a 29 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 2c 21 31 2c 6e 75 6c 6c 2c 22 66 37 37 39 31 66 34 63 22 2c 6e 75 6c 6c 29 2e 65 78 70 6f 72 74 73 7d 7d 5d 29 3b 0d 0a Data Ascii: ailable."})},methods:{}};const i=(0,n(51900).Z)(o,undefined,undefined,!1,null,"f7791f4c",null).exports}}]);
2024-12-10 13:21:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.10	49838	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:15 UTC	1448	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:15 UTC	480	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 13:21:15 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd8978b88141c6-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.10	49837	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:15 UTC	1495	OUT	GET /js/8567.js?id=ff27d36c69a89659efd0 HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:15 UTC	733	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-27165" expires: Tue, 09 Dec 2025 17:54:49 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69952 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8978beb0c352-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:15 UTC	636	IN	Data Raw: 37 63 63 35 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 38 35 36 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 35 36 37 2c 37 39 39 31 5d 2c 7b 37 30 37 30 30 3a 28 61 2c 6f 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 6f 2c 7b 6d 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 65 3d 69 28 35 31 30 31 39 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 69 66 28 41 50 50 2e 54 4f 4f 4c 53 2e 69 73 50 68 6f 6e 65 4e 75 6d 62 65 72 28 61 29 29 72 65 74 75 72 6e 21 30 3b 61 3d 41 50 50 2e 54 4f 4f 4c 53 2e Data Ascii: 7cc5/! For license information please see 8567.js.LICENSE.txt /(self.webpackChunk=self.webpackChunk\|\|[]).push([[8567,7991],{70700:(a,o,i)=>{"use strict";i.d(o,{m:()=>s});var e=i(51019);function s(a){if(APP.TOOLS.isPhoneNumber(a))return!0;a=APP.TOOLS.
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 6f 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6f 29 7d 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 69 2c 65 2c 73 29 7b 69 3d 69 7c 7c 22 26 22 2c 65 3d 65 7c 7c 22 3d 22 3b 76 61 72 20 6e 3d 7b 7d 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 74 3d 2f 5c 2b 2f 67 3b 61 3d 61 2e 73 70 6c 69 74 28 69 29 3b 76 61 72 20 6d 3d 31 65 33 3b 73 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 73 2e 6d 61 78 4b 65 79 73 26 26 28 6d 3d 73 2e 6d 61 78 4b 65 79 73 29 3b 76 Data Ascii: strict";function o(a,o){return Object.prototype.hasOwnProperty.call(a,o)}a.exports=function(a,i,e,s){i=i\|\|"&",e=e\|\|"=";var n={};if("string"!=typeof a\|\|0===a.length)return n;var t=/\+/g;a=a.split(i);var m=1e3;s&&"number"==typeof s.maxKeys&&(m=s.maxKeys);v
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 6d 62 69 6e 65 64 3a 73 2e 69 63 61 6e 6e 2c 63 3d 6d 2e 6c 65 6e 67 74 68 2d 31 3b 63 3e 3d 30 3b 63 2d 2d 29 74 3d 6d 5b 63 5d 2c 70 5b 72 3d 72 3f 74 2b 22 2e 22 2b 72 3a 74 5d 26 26 28 75 3d 70 5b 72 5d 29 3b 69 66 28 2d 31 3d 3d 75 26 26 6e 26 26 28 75 3d 31 29 2c 6d 2e 6c 65 6e 67 74 68 3c 3d 75 7c 7c 2d 31 3d 3d 75 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 54 4c 44 20 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 70 61 72 74 73 3a 6d 2c 74 6c 64 5f 6c 65 76 65 6c 3a 75 2c 61 6c 6c 6f 77 55 6e 6b 6e 6f 77 6e 54 4c 44 3a 6e 7d 29 29 3b 72 65 74 75 72 6e 7b 74 6c 64 3a 6d 2e 73 6c 69 63 65 28 2d 75 29 2e 6a 6f 69 6e 28 22 2e 22 29 2c 64 6f 6d 61 69 6e 3a 6d 2e 73 6c 69 63 65 28 2d 75 2d 31 29 2e 6a 6f 69 6e Data Ascii: mbined:s.icann,c=m.length-1;c>=0;c--)t=m[c],p[r=r?t+"."+r:t]&&(u=p[r]);if(-1==u&&n&&(u=1),m.length<=u\|\|-1==u)throw new Error("Invalid TLD "+JSON.stringify({parts:m,tld_level:u,allowUnknownTLD:n}));return{tld:m.slice(-u).join("."),domain:m.slice(-u-1).join
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 3d 68 28 61 29 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 6f 29 7b 72 65 74 75 72 6e 20 61 2b 32 32 2b 37 35 2a 28 61 3c 32 36 29 2d 28 28 30 21 3d 6f 29 3c 3c 35 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 6f 2c 69 29 7b 76 61 72 20 65 3d 30 3b 66 6f 72 28 61 3d 69 3f 6b 28 61 2f 37 30 30 29 3a 61 3e 3e 31 2c 61 2b 3d 6b 28 61 2f 6f 29 3b 61 3e 34 35 35 3b 65 2b 3d 72 29 61 3d 6b 28 61 2f 33 35 29 3b 72 65 74 75 72 6e 20 6b 28 65 2b 33 36 2a 61 2f 28 61 2b 33 38 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 6f 2c 69 2c 65 2c 73 2c 6e 2c 74 2c 75 2c 70 2c 63 2c 6c 2c 68 2c 64 3d 5b 5d 2c 6a 3d 61 2e 6c 65 6e 67 74 68 2c 62 3d 30 2c 66 3d 31 32 38 2c 77 3d 37 32 3b 66 6f 72 28 28 69 3d 61 2e 6c 61 73 74 Data Ascii: =h(a)})).join("")}function f(a,o){return a+22+75(a<26)-((0!=o)<<5)}function v(a,o,i){var e=0;for(a=i?k(a/700):a>>1,a+=k(a/o);a>455;e+=r)a=k(a/35);return k(e+36a/(a+38))}function w(a){var o,i,e,s,n,t,u,p,c,l,h,d=[],j=a.length,b=0,f=128,w=72;for((i=a.last
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 3f 77 28 61 2e 73 6c 69 63 65 28 34 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3a 61 7d 29 29 7d 7d 2c 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2e 63 61 6c 6c 28 6f 2c 69 2c 6f 2c 61 29 29 7c 7c 28 61 2e 65 78 70 6f 72 74 73 3d 65 29 7d 28 29 7d 2c 38 35 37 35 3a 28 61 2c 6f 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 69 28 35 32 35 31 31 29 2c 73 3d 69 28 36 32 35 30 32 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 6c 61 73 68 65 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 61 75 74 68 3d 6e 75 6c 6c 2c 74 68 69 73 2e 68 6f 73 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 6f 72 74 3d 6e 75 6c 6c 2c 74 68 69 Data Ascii: ?w(a.slice(4).toLowerCase()):a}))}},void 0===(e=function(){return t}.call(o,i,o,a))\|\|(a.exports=e)}()},8575:(a,o,i)=>{"use strict";var e=i(52511),s=i(62502);function n(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,thi
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 29 3b 75 5b 30 5d 3d 75 5b 30 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 67 2c 22 2f 22 29 3b 76 61 72 20 79 3d 61 3d 75 2e 6a 6f 69 6e 28 6d 29 3b 69 66 28 79 3d 79 2e 74 72 69 6d 28 29 2c 21 69 26 26 31 3d 3d 3d 61 2e 73 70 6c 69 74 28 22 23 22 29 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 72 2e 65 78 65 63 28 79 29 3b 69 66 28 66 29 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 74 68 3d 79 2c 74 68 69 73 2e 68 72 65 66 3d 79 2c 74 68 69 73 2e 70 61 74 68 6e 61 6d 65 3d 66 5b 31 5d 2c 66 5b 32 5d 3f 28 74 68 69 73 2e 73 65 61 72 63 68 3d 66 5b 32 5d 2c 74 68 69 73 2e 71 75 65 72 79 3d 6f 3f 62 2e 70 61 72 73 65 28 74 68 69 73 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 28 31 29 29 3a 74 68 69 73 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 28 31 29 29 3a 6f 26 Data Ascii: );u[0]=u[0].replace(/\\/g,"/");var y=a=u.join(m);if(y=y.trim(),!i&&1===a.split("#").length){var f=r.exec(y);if(f)return this.path=y,this.href=y,this.pathname=f[1],f[2]?(this.search=f[2],this.query=o?b.parse(this.search.substr(1)):this.search.substr(1)):o&
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 52 7c 7c 28 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 3d 65 2e 74 6f 41 53 43 49 49 28 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 29 29 3b 76 61 72 20 4e 3d 74 68 69 73 2e 70 6f 72 74 3f 22 3a 22 2b 74 68 69 73 2e 70 6f 72 74 3a 22 22 2c 56 3d 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 68 6f 73 74 3d 56 2b 4e 2c 74 68 69 73 2e 68 72 65 66 2b 3d 74 68 69 73 2e 68 6f 73 74 2c 52 26 26 28 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 3d 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 73 75 62 73 74 72 28 31 2c 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 2d 32 29 2c 22 2f 22 21 3d 3d 79 5b 30 5d 26 26 28 79 3d 22 2f 22 2b 79 29 29 7d 69 66 Data Ascii: name=this.hostname.toLowerCase(),R\|\|(this.hostname=e.toASCII(this.hostname));var N=this.port?":"+this.port:"",V=this.hostname\|\|"";this.host=V+N,this.href+=this.host,R&&(this.hostname=this.hostname.substr(1,this.hostname.length-2),"/"!==y[0]&&(y="/"+y))}if
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 69 26 26 22 2f 22 21 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 26 26 28 69 3d 22 2f 22 2b 69 29 29 3a 6e 7c 7c 28 6e 3d 22 22 29 2c 65 26 26 22 23 22 21 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 28 65 3d 22 23 22 2b 65 29 2c 6d 26 26 22 3f 22 21 3d 3d 6d 2e 63 68 61 72 41 74 28 30 29 26 26 28 6d 3d 22 3f 22 2b 6d 29 2c 6f 2b 6e 2b 28 69 3d 69 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 23 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 7d 29 29 29 2b 28 6d 3d 6d 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 25 32 33 22 29 29 2b 65 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 73 6f 6c Data Ascii: i&&"/"!==i.charAt(0)&&(i="/"+i)):n\|\|(n=""),e&&"#"!==e.charAt(0)&&(e="#"+e),m&&"?"!==m.charAt(0)&&(m="?"+m),o+n+(i=i.replace(/[?#]/g,(function(a){return encodeURIComponent(a)})))+(m=m.replace("#","%23"))+e},n.prototype.resolve=function(a){return this.resol
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 69 7d 76 61 72 20 79 3d 69 2e 70 61 74 68 6e 61 6d 65 26 26 22 2f 22 3d 3d 3d 69 2e 70 61 74 68 6e 61 6d 65 2e 63 68 61 72 41 74 28 30 29 2c 66 3d 61 2e 68 6f 73 74 7c 7c 61 2e 70 61 74 68 6e 61 6d 65 26 26 22 2f 22 3d 3d 3d 61 2e 70 61 74 68 6e 61 6d 65 2e 63 68 61 72 41 74 28 30 29 2c 76 3d 66 7c 7c 79 7c 7c 69 2e 68 6f 73 74 26 26 61 2e 70 61 74 68 6e 61 6d 65 2c 77 3d 76 2c 7a 3d 69 2e 70 61 74 68 6e 61 6d 65 26 26 69 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2f 22 29 7c 7c 5b 5d 2c 78 3d 28 68 3d 61 2e 70 61 74 68 6e 61 6d 65 26 26 61 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2f 22 29 7c 7c 5b 5d 2c 69 2e 70 72 6f 74 6f 63 6f 6c 26 26 21 6a 5b 69 2e 70 72 6f 74 6f 63 6f 6c 5d 29 3b 69 66 28 78 26 26 28 69 2e 68 6f 73 74 6e 61 6d 65 Data Ascii: i}var y=i.pathname&&"/"===i.pathname.charAt(0),f=a.host\|\|a.pathname&&"/"===a.pathname.charAt(0),v=f\|\|y\|\|i.host&&a.pathname,w=v,z=i.pathname&&i.pathname.split("/")\|\|[],x=(h=a.pathname&&a.pathname.split("/")\|\|[],i.protocol&&!j[i.protocol]);if(x&&(i.hostname
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 5b 30 5d 26 26 22 2f 22 3d 3d 3d 7a 5b 30 5d 2e 63 68 61 72 41 74 28 30 29 7c 7c 7a 2e 75 6e 73 68 69 66 74 28 22 22 29 2c 4f 26 26 22 2f 22 21 3d 3d 7a 2e 6a 6f 69 6e 28 22 2f 22 29 2e 73 75 62 73 74 72 28 2d 31 29 26 26 7a 2e 70 75 73 68 28 22 22 29 3b 76 61 72 20 52 2c 43 3d 22 22 3d 3d 3d 7a 5b 30 5d 7c 7c 7a 5b 30 5d 26 26 22 2f 22 3d 3d 3d 7a 5b 30 5d 2e 63 68 61 72 41 74 28 30 29 3b 78 26 26 28 69 2e 68 6f 73 74 6e 61 6d 65 3d 69 2e 68 6f 73 74 3d 43 3f 22 22 3a 7a 2e 6c 65 6e 67 74 68 3f 7a 2e 73 68 69 66 74 28 29 3a 22 22 2c 28 52 3d 21 21 28 69 2e 68 6f 73 74 26 26 69 2e 68 6f 73 74 2e 69 6e 64 65 78 4f 66 28 22 40 22 29 3e 30 29 26 26 69 2e 68 6f 73 74 2e 73 70 6c 69 74 28 22 40 22 29 29 26 26 28 69 2e 61 75 74 68 3d 52 2e 73 68 69 66 74 28 29 Data Ascii: [0]&&"/"===z[0].charAt(0)\|\|z.unshift(""),O&&"/"!==z.join("/").substr(-1)&&z.push("");var R,C=""===z[0]\|\|z[0]&&"/"===z[0].charAt(0);x&&(i.hostname=i.host=C?"":z.length?z.shift():"",(R=!!(i.host&&i.host.indexOf("@")>0)&&i.host.split("@"))&&(i.auth=R.shift()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.10	49839	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:15 UTC	1495	OUT	GET /js/1166.js?id=19bfd34c537a6d4aa0c4 HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/?ref=expired&url=https://t.ly/8cSDx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:15 UTC	732	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-4b67" expires: Tue, 09 Dec 2025 17:54:49 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69952 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd8978c8ed8c18-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:15 UTC	637	IN	Data Raw: 34 62 36 37 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 31 36 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 36 36 5d 2c 7b 37 32 30 30 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 72 28 32 33 36 34 35 29 2c 6f 3d 72 2e 6e 28 6e 29 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 31 5d 7d 29 29 3b 6f 2e 70 75 73 68 28 5b 74 2e 69 64 2c 22 3a 65 78 70 6f 72 74 7b 70 72 69 6d 61 72 79 3a 23 32 Data Ascii: 4b67/! For license information please see 1166.js.LICENSE.txt /"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[1166],{7200:(t,e,r)=>{r.d(e,{Z:()=>i});var n=r(23645),o=r.n(n)()((function(t){return t[1]}));o.push([t.id,":export{primary:#2
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 7d 2c 77 72 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 2e 70 75 74 28 74 68 69 73 2e 64 61 74 61 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 2c 38 29 7d 7d 3b 76 61 72 20 75 3d 73 2c 6c 3d 7b 4c 3a 31 2c 4d 3a 30 2c 51 3a 33 2c 48 3a 32 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 29 7b 74 68 69 73 2e 74 6f 74 61 6c 43 6f 75 6e 74 3d 74 2c 74 68 69 73 2e 64 61 74 61 43 6f 75 6e 74 3d 65 7d 68 2e 52 53 5f 42 4c 4f 43 4b 5f 54 41 42 4c 45 3d 5b 5b 31 2c 32 36 2c 31 39 5d 2c 5b Data Ascii: .prototype={getLength:function(t){return this.data.length},write:function(t){for(var e=0;e<this.data.length;e++)t.put(this.data.charCodeAt(e),8)}};var u=s,l={L:1,M:0,Q:3,H:2};function h(t,e){this.totalCount=t,this.dataCount=e}h.RS_BLOCK_TABLE=[[1,26,19],[
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 37 30 2c 34 34 2c 31 31 2c 37 31 2c 34 35 5d 2c 5b 31 37 2c 34 37 2c 32 31 2c 34 2c 34 38 2c 32 32 5d 2c 5b 39 2c 33 39 2c 31 33 2c 31 36 2c 34 30 2c 31 34 5d 2c 5b 33 2c 31 33 35 2c 31 30 37 2c 35 2c 31 33 36 2c 31 30 38 5d 2c 5b 33 2c 36 37 2c 34 31 2c 31 33 2c 36 38 2c 34 32 5d 2c 5b 31 35 2c 35 34 2c 32 34 2c 35 2c 35 35 2c 32 35 5d 2c 5b 31 35 2c 34 33 2c 31 35 2c 31 30 2c 34 34 2c 31 36 5d 2c 5b 34 2c 31 34 34 2c 31 31 36 2c 34 2c 31 34 35 2c 31 31 37 5d 2c 5b 31 37 2c 36 38 2c 34 32 5d 2c 5b 31 37 2c 35 30 2c 32 32 2c 36 2c 35 31 2c 32 33 5d 2c 5b 31 39 2c 34 36 2c 31 36 2c 36 2c 34 37 2c 31 37 5d 2c 5b 32 2c 31 33 39 2c 31 31 31 2c 37 2c 31 34 30 2c 31 31 32 5d 2c 5b 31 37 2c 37 34 2c 34 36 5d 2c 5b 37 2c 35 34 2c 32 34 2c 31 36 2c 35 35 2c 32 35 Data Ascii: 70,44,11,71,45],[17,47,21,4,48,22],[9,39,13,16,40,14],[3,135,107,5,136,108],[3,67,41,13,68,42],[15,54,24,5,55,25],[15,43,15,10,44,16],[4,144,116,4,145,117],[17,68,42],[17,50,22,6,51,23],[19,46,16,6,47,17],[2,139,111,7,140,112],[17,74,46],[7,54,24,16,55,25
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 35 35 2c 32 35 5d 2c 5b 32 2c 34 35 2c 31 35 2c 36 34 2c 34 36 2c 31 36 5d 2c 5b 31 37 2c 31 35 32 2c 31 32 32 2c 34 2c 31 35 33 2c 31 32 33 5d 2c 5b 32 39 2c 37 34 2c 34 36 2c 31 34 2c 37 35 2c 34 37 5d 2c 5b 34 39 2c 35 34 2c 32 34 2c 31 30 2c 35 35 2c 32 35 5d 2c 5b 32 34 2c 34 35 2c 31 35 2c 34 36 2c 34 36 2c 31 36 5d 2c 5b 34 2c 31 35 32 2c 31 32 32 2c 31 38 2c 31 35 33 2c 31 32 33 5d 2c 5b 31 33 2c 37 34 2c 34 36 2c 33 32 2c 37 35 2c 34 37 5d 2c 5b 34 38 2c 35 34 2c 32 34 2c 31 34 2c 35 35 2c 32 35 5d 2c 5b 34 32 2c 34 35 2c 31 35 2c 33 32 2c 34 36 2c 31 36 5d 2c 5b 32 30 2c 31 34 37 2c 31 31 37 2c 34 2c 31 34 38 2c 31 31 38 5d 2c 5b 34 30 2c 37 35 2c 34 37 2c 37 2c 37 36 2c 34 38 5d 2c 5b 34 33 2c 35 34 2c 32 34 2c 32 32 2c 35 35 2c 32 35 5d 2c 5b Data Ascii: 55,25],[2,45,15,64,46,16],[17,152,122,4,153,123],[29,74,46,14,75,47],[49,54,24,10,55,25],[24,45,15,46,46,16],[4,152,122,18,153,123],[13,74,46,32,75,47],[48,54,24,14,55,25],[42,45,15,32,46,16],[20,147,117,4,148,118],[40,75,47,7,76,48],[43,54,24,22,55,25],[
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 3c 30 3b 29 74 2b 3d 32 35 35 3b 66 6f 72 28 3b 74 3e 3d 32 35 36 3b 29 74 2d 3d 32 35 35 3b 72 65 74 75 72 6e 20 67 2e 45 58 50 5f 54 41 42 4c 45 5b 74 5d 7d 2c 45 58 50 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 2c 4c 4f 47 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 7d 2c 76 3d 30 3b 76 3c 38 3b 76 2b 2b 29 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 5d 3d 31 3c 3c 76 3b 66 6f 72 28 76 3d 38 3b 76 3c 32 35 36 3b 76 2b 2b 29 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 5d 3d 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d 34 5d 5e 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d 35 5d 5e 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d 36 5d 5e 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d Data Ascii: p:function(t){for(;t<0;)t+=255;for(;t>=256;)t-=255;return g.EXP_TABLE[t]},EXP_TABLE:new Array(256),LOG_TABLE:new Array(256)},v=0;v<8;v++)g.EXP_TABLE[v]=1<<v;for(v=8;v<256;v++)g.EXP_TABLE[v]=g.EXP_TABLE[v-4]^g.EXP_TABLE[v-5]^g.EXP_TABLE[v-6]^g.EXP_TABLE[v-
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 5d 2c 5b 36 2c 32 38 2c 35 34 2c 38 30 2c 31 30 36 5d 2c 5b 36 2c 33 32 2c 35 38 2c 38 34 2c 31 31 30 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 5d 2c 5b 36 2c 32 36 2c 35 30 2c 37 34 2c 39 38 2c 31 32 32 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 5d 2c 5b 36 2c 32 36 2c 35 32 2c 37 38 2c 31 30 34 2c 31 33 30 5d 2c 5b 36 2c 33 30 2c 35 36 2c 38 32 2c 31 30 38 2c 31 33 34 5d 2c 5b 36 2c 33 34 2c 36 30 2c 38 36 2c 31 31 32 2c 31 33 38 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 2c 31 34 32 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 2c 31 34 36 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 2c 31 35 30 5d Data Ascii: [6,30,54,78,102],[6,28,54,80,106],[6,32,58,84,110],[6,30,58,86,114],[6,34,62,90,118],[6,26,50,74,98,122],[6,30,54,78,102,126],[6,26,52,78,104,130],[6,30,56,82,108,134],[6,34,60,86,112,138],[6,30,58,86,114,142],[6,34,62,90,118,146],[6,30,54,78,102,126,150]
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 63 61 73 65 20 6f 3a 72 65 74 75 72 6e 20 39 3b 63 61 73 65 20 69 3a 63 61 73 65 20 61 3a 72 65 74 75 72 6e 20 38 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 74 29 7d 65 6c 73 65 20 69 66 28 65 3c 32 37 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 6e 3a 72 65 74 75 72 6e 20 31 32 3b 63 61 73 65 20 6f 3a 72 65 74 75 72 6e 20 31 31 3b 63 61 73 65 20 69 3a 72 65 74 75 72 6e 20 31 36 3b 63 61 73 65 20 61 3a 72 65 74 75 72 6e 20 31 30 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 74 29 7d 65 6c 73 65 7b 69 66 28 21 28 65 3c 34 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 79 70 65 3a 22 2b 65 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 Data Ascii: case o:return 9;case i:case a:return 8;default:throw new Error("mode:"+t)}else if(e<27)switch(t){case n:return 12;case o:return 11;case i:return 16;case a:return 10;default:throw new Error("mode:"+t)}else{if(!(e<41))throw new Error("type:"+e);switch(t){ca
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 73 2e 64 61 74 61 4c 69 73 74 2e 70 75 73 68 28 65 29 2c 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 3d 6e 75 6c 6c 7d 2c 44 2e 69 73 44 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 3c 30 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 74 7c 7c 65 3c 30 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 2b 22 2c 22 2b 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 5d 5b 65 5d 7d 2c 44 2e 67 65 74 4d 6f 64 75 6c 65 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 7d 2c 44 2e 6d 61 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 74 79 70 65 4e 75 6d Data Ascii: s.dataList.push(e),this.dataCache=null},D.isDark=function(t,e){if(t<0\|\|this.moduleCount<=t\|\|e<0\|\|this.moduleCount<=e)throw new Error(t+","+e);return this.modules[t][e]},D.getModuleCount=function(){return this.moduleCount},D.make=function(){if(this.typeNum
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 29 29 66 6f 72 28 76 61 72 20 6e 3d 2d 31 3b 6e 3c 3d 37 3b 6e 2b 2b 29 65 2b 6e 3c 3d 2d 31 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 65 2b 6e 7c 7c 28 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 2b 72 5d 5b 65 2b 6e 5d 3d 30 3c 3d 72 26 26 72 3c 3d 36 26 26 28 30 3d 3d 6e 7c 7c 36 3d 3d 6e 29 7c 7c 30 3c 3d 6e 26 26 6e 3c 3d 36 26 26 28 30 3d 3d 72 7c 7c 36 3d 3d 72 29 7c 7c 32 3c 3d 72 26 26 72 3c 3d 34 26 26 32 3c 3d 6e 26 26 6e 3c 3d 34 29 7d 2c 44 2e 67 65 74 42 65 73 74 4d 61 73 6b 50 61 74 74 65 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 65 3d 30 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 74 68 69 73 2e 6d 61 6b 65 49 6d 70 6c 28 21 30 2c 72 29 3b 76 61 72 20 6e 3d 45 2e 67 65 74 4c 6f 73 74 50 6f Data Ascii: ))for(var n=-1;n<=7;n++)e+n<=-1\|\|this.moduleCount<=e+n\|\|(this.modules[t+r][e+n]=0<=r&&r<=6&&(0==n\|\|6==n)\|\|0<=n&&n<=6&&(0==r\|\|6==r)\|\|2<=r&&r<=4&&2<=n&&n<=4)},D.getBestMaskPattern=function(){for(var t=0,e=0,r=0;r<8;r++){this.makeImpl(!0,r);var n=E.getLostPo
2024-12-10 13:21:15 UTC	1369	IN	Data Raw: 44 2e 73 65 74 75 70 54 79 70 65 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 68 69 73 2e 65 72 72 6f 72 43 6f 72 72 65 63 74 4c 65 76 65 6c 3c 3c 33 7c 65 2c 6e 3d 45 2e 67 65 74 42 43 48 54 79 70 65 49 6e 66 6f 28 72 29 2c 6f 3d 30 3b 6f 3c 31 35 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 21 74 26 26 31 3d 3d 28 6e 3e 3e 6f 26 31 29 3b 6f 3c 36 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 6f 5d 5b 38 5d 3d 69 3a 6f 3c 38 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 6f 2b 31 5d 5b 38 5d 3d 69 3a 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 31 35 2b 6f 5d 5b 38 5d 3d 69 7d 66 6f 72 28 6f 3d 30 3b 6f 3c 31 35 3b 6f 2b 2b 29 7b 69 3d 21 74 26 26 31 3d 3d 28 6e 3e 3e 6f 26 31 29 3b Data Ascii: D.setupTypeInfo=function(t,e){for(var r=this.errorCorrectLevel<<3\|e,n=E.getBCHTypeInfo(r),o=0;o<15;o++){var i=!t&&1==(n>>o&1);o<6?this.modules[o][8]=i:o<8?this.modules[o+1][8]=i:this.modules[this.moduleCount-15+o][8]=i}for(o=0;o<15;o++){i=!t&&1==(n>>o&1);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.10	49843	172.217.21.36	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:15 UTC	1393	OUT	GET /pagead/1p-user-list/10875945736/?random=1733836867034&cv=11&fst=1733835600000&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dO5efoN-V8xiRq9Ee4UlikLm79x3c5ATlDe37PaSSF5cYw7oX&random=2752506817&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:16 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.10	49842	172.217.21.36	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:15 UTC	906	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Ft.ly%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=740086782.1733836867&auid=1916227148.1733836867&npa=0&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&tft=1733836867046&tfd=9201&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://t.ly X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:16 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: text/plain Pragma: no-cache Date: Tue, 10 Dec 2024 13:21:16 GMT Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://t.ly Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.10	49845	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:16 UTC	1161	OUT	GET /pagead/viewthroughconversion/10875945736/?random=1733836867034&cv=11&fst=1733836867034&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:16 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:16 UTC	687	IN	Data Raw: 31 32 33 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1233(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 6e 26 26 63 3d 3d 3d 22 65 73 36 22 3f 67 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 68 28 71 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 3a 62 21 3d 3d 63 26 26 28 74 5b 64 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 61 3d 4d 61 74 68 2e 72 61 Data Ascii: ".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.ra
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 72 65 74 75 72 6e 20 46 3f 4c 3f 4c 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 78 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 Data Ascii: G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userAgentData\|\|null:null;function N(a){return F?L?L.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function P(a){var b;a:{if(b=x.navigator)if(b=b.userAgent)break a;b="
2024-12-10 13:21:16 UTC	1200	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b 29 56 2e 6c 65 6e 67 74 68 7c 7c 55 3d 3d 3d 76 6f 69 64 20 30 3f 57 5b 58 5d 26 26 57 5b 58 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 58 5d 3f 57 3d 57 5b 58 5d 3a 57 3d 57 5b 58 5d 3d 7b 7d 3a 57 5b 58 5d 3d 55 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 7a 4d 34 4d 7a 59 34 4e 6a 63 77 4d 7a 51 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 31 30 38 37 35 39 34 35 37 Data Ascii: undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());)V.length\|\|U===void 0?W[X]&&W[X]!==Object.prototype[X]?W=W[X]:W=W[X]={}:W[X]=U;}).call(this);;s.ss_(window,'OjE3MzM4MzY4NjcwMzQ',['https://www.google.com/pagead/1p-user-list/108759457
2024-12-10 13:21:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.10	49847	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:16 UTC	895	OUT	GET /pagead/html/r20241205/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:16 UTC	639	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9039 X-XSS-Protection: 0 Date: Mon, 09 Dec 2024 22:27:19 GMT Expires: Mon, 23 Dec 2024 22:27:19 GMT Cache-Control: public, max-age=1209600 ETag: 17661348622971093804 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Age: 53637 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:16 UTC	751	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6c 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6e 2c 70 3b 61 3a 7b 66 6f 72 28 76 61 72 20 61 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 77 3d 6c 2c 7a 3d 30 3b 7a 3c 61 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 77 3d 77 5b 61 61 5b 7a 5d 5d 2c 77 3d 3d 6e 75 6c 6c 29 7b 70 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 70 3d 77 Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var l=this\|\|self;var n,p;a:{for(var aa=["CLOSURE_FLAGS"],w=l,z=0;z<aa.length;z++)if(w=w[aa[z]],w==null){p=null;break a}p=w
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 20 47 28 61 29 7b 47 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 47 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 66 61 3d 63 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 43 28 22 45 64 67 65 22 29 3b 21 43 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 46 28 29 3b 46 28 29 3b 43 28 22 53 61 66 61 72 69 22 29 26 26 28 46 28 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 45 64 67 65 22 29 29 7c 7c 28 45 28 29 3f 42 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 43 28 22 45 64 67 2f 22 29 29 7c 7c 45 28 29 26 26 42 28 22 4f 70 65 72 Data Ascii: G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B("Oper
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 70 61 28 6c 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4a 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 29 7b 69 66 28 21 4a 29 62 3a 7b 76 61 72 20 61 3d 6e 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 49 28 63 29 29 7b 4a 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4a 3d 6e 75 6c 6c 7d 28 61 3d 4a 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c Data Ascii: _requests=[]);const b=pa(l.document);b.src=a;l.google_image_requests.push(b)};let J=null;function ra(){if(!J)b:{var a=na();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&I(c)){J=c;break b}}catch(c){}J=null}(a=J)?((b=a.esf_propArray)\|\|
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 6e 69 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 4f 3d 6c 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 46 61 3d 21 21 28 4f 26 26 4f 2e 6d 61 72 6b 26 26 4f 2e 6d 65 61 73 75 72 65 26 26 4f 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 46 61 29 7b 76 61 72 20 62 3b 69 66 28 4d 3d 3d 3d 6e 75 6c 6c 29 7b 4d 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6c 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6c 2e 6c 6f 63 61 74 Data Ascii: niqueId=Math.random()}};const O=l.performance,Fa=!!(O&&O.mark&&O.measure&&O.clearMarks),P=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Fa){var b;if(M===null){M="";try{a="";try{a=l.top.location.hash}catch(c){a=l.locat
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 62 2c 63 2c 64 2b 31 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 66 7c 7c 28 66 3d 30 29 2c 66 3c 32 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 49 61 28 61 2c 62 2c 63 2c 64 2c 66 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 63 2e 6c 65 6e 67 74 68 3e 62 26 26 28 62 3d 63 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 0a Data Ascii: b,c,d+1,f));return e.join(c[d])}}else if(typeof a==="object")return f\|\|(f=0),f<2?encodeURIComponent(Ia(a,b,c,d,f+1)):"...";return encodeURIComponent(String(a))}function Ka(a){let b=1;for(const c in a.h)c.length>b&&(b=c.length);return 3997-b-a.i.length-1}
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3d 3d 6b 2e 6c 65 6e 67 74 68 2d 31 29 66 6f 72 28 72 3d 31 3b 72 3c 6b 2e 6c 65 6e 67 74 68 3b 2b 2b 72 29 7b 76 61 72 20 78 3d 6b 5b 72 5d 3b 78 2e 75 72 6c 7c 7c 28 78 2e 75 72 6c 3d 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 72 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 75 3d 6b 3b 6c 65 74 20 4e 3d 6e 65 77 20 42 61 28 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 3b 67 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 58 3d 75 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 78 3d 58 3b 78 3e 3d 30 3b 2d 2d 78 29 7b 76 61 72 20 76 Data Ascii: location.ancestorOrigins&&g.location.ancestorOrigins.length==k.length-1)for(r=1;r<k.length;++r){var x=k[r];x.url\|\|(x.url=g.location.ancestorOrigins[r-1]\|\|"",x.l=!0)}var u=k;let N=new Ba(l.location.href,!1);g=null;const X=u.length-1;for(x=X;x>=0;--x){var v
2024-12-10 13:21:16 UTC	1338	IN	Data Raw: 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 51 61 28 29 3a 55 2e 67 26 26 68 61 28 28 29 3d 3e 7b 51 61 28 29 7d 29 7d 29 28 29 3b 76 61 72 20 52 61 3d 61 3d 3e 7b 54 2e 67 3d 62 3d 3e 7b 65 61 28 61 2c 63 3d 3e 7b 63 28 62 29 7d 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 48 3d 3d 3d 76 6f 69 64 20 30 26 26 28 48 3d 6a 61 28 29 29 3b 76 61 72 20 62 3d 48 3b 72 65 74 75 72 6e 20 6e 65 77 20 6b 61 28 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 29 7d 3b 76 61 72 20 56 3b 69 66 28 56 3d 66 61 29 7b 76 61 72 20 57 3d 22 49 46 52 41 4d 45 Data Ascii: indow.document.readyState=="complete"?Qa():U.g&&ha(()=>{Qa()})})();var Ra=a=>{T.g=b=>{ea(a,c=>{c(b)})}};function Sa(a){a=a===null?"null":a===void 0?"undefined":a;H===void 0&&(H=ja());var b=H;return new ka(b?b.createHTML(a):a)};var V;if(V=fa){var W="IFRAME

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.10	49848	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:16 UTC	2249	OUT	GET /pagead/ads?client=ca-pub-5561763581314444&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1733836861&plaf=7%3A2&plat=3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&pra=5&wgl=1&aihb=0&aiof=3&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.3221&aiapmi=0.33938&aiombap=1&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836866989&bpp=15&bdt=6356&idt=6027&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=2977550825633&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=12 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:17 UTC	575	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:17 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:17 UTC	815	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 35 2c 20 30 2e 36 30 30 30 30 30 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-fil
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 2e 62 74 6e 20 7b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 2c 20 62 61 63 6b 67 72 6f 75 6e 64 20 2e 37 35 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 2c 20 62 61 63 6b 67 72 6f 75 6e 64 20 2e 37 35 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 2c 20 62 61 63 6b 67 72 6f 75 6e 64 20 2e 37 35 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 2c 20 62 61 63 6b 67 72 6f 75 6e 64 20 2e 37 35 73 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 Data Ascii: ackground-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition: opacity 1s, background .75s;background: transparent;color: #fff
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 6c 61 73 73 5c 78 33 64 5c 78 32 32 62 74 6e 20 73 6b 69 70 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 5c 78 32 32 5c 78 33 65 5c 78 33 63 73 76 67 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 32 30 20 30 20 34 38 20 34 38 5c 78 32 32 66 69 6c 6c 5c 78 33 64 5c 78 32 32 23 35 46 36 33 36 38 5c 78 32 32 5c 78 33 65 5c 78 33 63 70 61 74 68 20 64 5c 78 33 64 5c 78 32 32 4d 33 38 20 31 32 2e 38 33 4c 33 35 2e 31 37 20 31 30 20 32 34 20 32 31 2e 31 37 20 31 32 2e 38 33 20 31 30 20 31 30 20 31 32 2e 38 33 20 32 31 2e 31 37 20 32 34 20 31 30 20 33 35 2e 31 37 20 31 32 2e 38 33 20 33 38 20 32 34 20 32 36 2e 38 33 20 33 35 2e 31 37 20 33 38 20 33 38 20 33 35 2e 31 37 20 32 Data Ascii: lass\x3d\x22btn skip\x22\x3e\x3cdiv style\x3d\x22cursor: pointer;\x22\x3e\x3csvg viewBox\x3d\x220 0 48 48\x22fill\x3d\x22#5F6368\x22\x3e\x3cpath d\x3d\x22M38 12.83L35.17 10 24 21.17 12.83 10 10 12.83 21.17 24 10 35.17 12.83 38 24 26.83 35.17 38 38 35.17 2
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 6e 3a 20 62 6f 74 74 6f 6d 3b 20 77 69 64 74 68 3a 20 31 30 33 39 70 78 3b 20 68 65 69 67 68 74 3a 20 36 34 30 70 78 3b 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 69 66 72 61 6d 65 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 64 6f 63 20 5c 78 33 64 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 5c 78 32 37 61 64 5f 69 66 72 61 6d 65 5c 78 32 37 29 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 64 6f 63 2e 6f 70 65 6e 28 5c 78 32 37 74 65 78 74 2f 68 74 6d 6c 5c 78 32 37 2c 20 5c 78 32 37 72 65 70 6c 61 63 65 5c 78 32 37 29 3b 64 6f 63 2e 77 72 69 74 65 28 5c 78 32 37 5c 5c 78 33 63 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 5c 5c 78 33 65 5c 5c 78 33 63 68 74 6d 6c 20 6c 61 6e 67 5c 5c 78 Data Ascii: n: bottom; width: 1039px; height: 640px;\x22\x3e\x3c/iframe\x3e\x3cscript\x3evar doc \x3d document.getElementById(\x27ad_iframe\x27).contentWindow.document;doc.open(\x27text/html\x27, \x27replace\x27);doc.write(\x27\\x3c!DOCTYPE html\\x3e\\x3chtml lang\\x
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 63 70 2d 61 6e 69 6d 3b 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 61 6d 70 2d 66 63 70 2d 61 6e 69 6d 20 7b 30 25 20 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 7d 31 30 30 25 20 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 31 30 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 31 30 30 30 70 78 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 6d 70 2d 66 63 70 2d 61 6e 69 6d 20 7b 30 25 20 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 Data Ascii: cp-anim;}@-webkit-keyframes amp-fcp-anim {0% {-webkit-transform: translateY(0);transform: translateY(0);}100% {-webkit-transform: translateY(1000px);transform: translateY(1000px);}}@keyframes amp-fcp-anim {0% {-webkit-transform: translateY(0);transform: t
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 2e 33 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 35 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 32 30 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 33 35 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b Data Ascii: .3;-mys-overflow-limit:0;box-sizing:border-box;display:flex;align-items:center;flex-direction:row;height:100%;flex-grow:1;position:relative;}.ns-udmpd-e-5,.ns-udmpd-e-20,.ns-udmpd-e-35{line-height:1.3;box-sizing:border-box;display:flex;align-items:center;
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 6d 79 73 2d 65 6c 6c 69 70 73 69 73 3a 61 75 74 6f 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 6e 6f 6e 65 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 31 32 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 31 34 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 31 38 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 32 37 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 32 39 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 33 33 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 34 32 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 34 34 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 34 38 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 35 36 2c 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 35 38 7b 2d 6d 79 73 2d 73 63 6f 72 65 3a 31 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 2e 6e 73 2d 75 Data Ascii: low:hidden;-mys-ellipsis:auto;-mys-overflow-limit:none;}.ns-udmpd-e-12,.ns-udmpd-e-14,.ns-udmpd-e-18,.ns-udmpd-e-27,.ns-udmpd-e-29,.ns-udmpd-e-33,.ns-udmpd-e-42,.ns-udmpd-e-44,.ns-udmpd-e-48,.ns-udmpd-e-56,.ns-udmpd-e-58{-mys-score:1;display:inline;}.ns-u
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 35 32 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 35 33 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 35 34 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 Data Ascii: ;}.ns-udmpd-e-52{line-height:1.3;-mys-overflow-limit:0;box-sizing:border-box;display:flex;align-items:center;flex-direction:row;width:100%;}.ns-udmpd-e-53{display:block;flex-shrink:0;flex-grow:0;height:36px;}.ns-udmpd-e-54{line-height:1.3;box-sizing:borde
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 6f 72 61 74 65 5c 5c 78 32 32 5c 5c 78 33 65 2e 6e 73 2d 75 64 6d 70 64 2d 6c 2d 73 71 75 61 72 65 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 6c 2d 73 71 75 61 72 65 20 2e 74 61 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 7d 20 2e 6e 73 2d 75 64 6d 70 64 2d 6c 2d 73 71 75 61 72 65 20 2e 74 61 67 2d 61 6e 69 6d 61 74 69 6f 6e 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 2d 69 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 36 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 34 38 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 66 6f 72 77 61 72 64 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 Data Ascii: orate\\x22\\x3e.ns-udmpd-l-square{opacity:1;position:relative;}.ns-udmpd-l-square .tag{display:inline-flex;} .ns-udmpd-l-square .tag-animation{animation-name:fade-in;animation-delay:.6s;animation-duration:.48s;animation-fill-mode:forwards;animation-timing
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 6c 2d 73 71 75 61 72 65 20 2e 70 72 6f 6d 6f 2d 74 65 78 74 20 61 2c 2e 70 72 6f 6d 6f 2d 74 65 78 74 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 6c 2d 73 71 75 61 72 65 20 2e 6c 6f 67 6f 2d 62 61 63 6b 75 70 2d 74 65 78 74 20 61 2c 2e 6c 6f 67 6f 2d 62 61 63 6b 75 70 2d 74 65 78 74 20 73 70 61 6e 2c 2e 6c 6f 67 6f 2d 62 61 63 6b 75 70 2d 74 65 78 74 2d 6d 75 6c 74 69 2d 6c 69 6e 65 20 61 2c 2e 6c 6f 67 6f 2d 62 61 63 6b 75 70 2d 74 65 78 74 2d 6d 75 6c 74 69 2d 6c 69 6e 65 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 7d 2e 6e 73 2d 75 64 6d 70 64 2d 65 2d 30 7b Data Ascii: nd{display:block;}.ns-udmpd-l-square .promo-text a,.promo-text span{background-image:none;}.ns-udmpd-l-square .logo-backup-text a,.logo-backup-text span,.logo-backup-text-multi-line a,.logo-backup-text-multi-line span{background-image:none;}.ns-udmpd-e-0{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.10	49846	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:16 UTC	1967	OUT	GET /pagead/ads?client=ca-pub-5561763581314444&output=html&h=280&slotname=2321115505&adk=348108860&adf=4181732005&pi=t.ma~as.2321115505&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836867004&bpp=3&bdt=6372&idt=6062&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=77&ady=312&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE% [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:17 UTC	575	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:16 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:17 UTC	815	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 31 32 30 35 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 48 54 4d 4c 2c 42 4f 44 59 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 23 6d 79 73 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 77 69 64 74 68 3a 31 30 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20241205';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height: 100%;width:10
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 78 3a 30 3b 7d 2e 61 6d 70 2d 66 63 70 20 7b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 20 39 3b 74 6f 70 3a 20 30 3b 6c 65 66 74 3a 20 30 3b 77 69 64 74 68 3a 20 31 31 31 30 70 78 3b 68 65 69 67 68 74 3a 20 31 30 30 30 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 31 30 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 31 30 30 30 70 78 29 3b 7d 2e 61 6d 70 2d 66 63 70 20 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 31 35 30 30 6d 73 20 73 74 65 70 2d 65 6e 64 20 61 6d 70 2d 66 63 70 2d 61 6e 69 6d 3b 61 6e 69 6d 61 74 69 6f 6e 3a 20 31 35 30 30 6d 73 Data Ascii: x:0;}.amp-fcp {display: inline-block;position: absolute;z-index: 9;top: 0;left: 0;width: 1110px;height: 1000px;-webkit-transform: translateY(1000px);transform: translateY(1000px);}.amp-fcp {-webkit-animation: 1500ms step-end amp-fcp-anim;animation: 1500ms
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 31 20 30 20 30 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 32 36 2e 36 70 78 20 33 33 2e 33 70 78 20 32 36 2e 36 70 78 20 32 37 2e 37 35 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 2e 35 70 78 20 73 6f 6c 69 64 20 23 65 66 65 66 65 66 3b 2d 6d 79 73 2d 6f 76 65 72 66 6c 6f 77 2d 6c 69 6d 69 74 3a 30 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 35 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 3b 2d 6d Data Ascii: y:flex;flex:1 0 0;flex-direction:column;align-items:flex-start;justify-content:center;height:100%;padding:26.6px 33.3px 26.6px 27.75px;border-left:0.5px solid #efefef;-mys-overflow-limit:0;}.ns-q9rt6-e-5{box-sizing:border-box;flex-shrink:0;font-family:;-m
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 73 66 6f 72 6d 3a 63 61 70 69 74 61 6c 69 7a 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 31 37 7b 2d 6d 79 73 2d 73 63 6f 72 65 3a 31 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 76 2d 30 20 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 30 2c 2e 6e 73 2d 71 39 72 74 36 2d 76 2d 30 20 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 37 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 76 2d 30 20 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 76 2d 30 20 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 31 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 31 70 78 Data Ascii: sform:capitalize;white-space:nowrap;max-width:100%;}.ns-q9rt6-e-17{-mys-score:1;display:inline;}.ns-q9rt6-v-0 .ns-q9rt6-e-0,.ns-q9rt6-v-0 .ns-q9rt6-e-7{font-size:24px;}.ns-q9rt6-v-0 .ns-q9rt6-e-5{font-size:36px;}.ns-q9rt6-v-0 .ns-q9rt6-e-12{font-size:21px
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 6f 6e 3a 66 61 64 65 69 6e 5f 6b 65 79 66 72 61 6d 65 73 20 2e 39 73 20 62 6f 74 68 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 34 2c 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 39 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 35 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 2e 6e 73 2d 71 39 72 74 36 2d 65 2d 36 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 23 66 66 Data Ascii: on:fadein_keyframes .9s both;background-position:center;background-color:#fff;}.ns-q9rt6-e-4,.ns-q9rt6-e-9{background-color:#fff;z-index:1;}.ns-q9rt6-e-5{font-family:"Roboto",Roboto,Arial,sans-serif;}.ns-q9rt6-e-6{background-image:linear-gradient(0deg,#ff
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 20 3d 20 64 2e 73 75 62 73 74 72 69 6e 67 28 65 69 2c 20 64 2e 6c 65 6e 67 74 68 29 3b 61 2e 68 72 65 66 20 3d 20 63 20 2b 20 74 20 2b 20 72 3b 20 7d 20 65 6c 73 65 20 7b 61 2e 68 72 65 66 20 2b 3d 20 22 26 63 6c 6b 74 3d 22 20 2b 20 74 3b 7d 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 35 33 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 31 32 30 35 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 61 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c Data Ascii: = d.substring(ei, d.length);a.href = c + t + r; } else {a.href += "&clkt=" + t;}}}</script><script data-jc="53" data-jc-version="r20241205">(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 72 28 3b 74 68 69 73 2e 73 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 73 2e 73 68 69 66 74 28 29 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 62 29 7b 74 68 69 73 2e 74 79 70 65 3d 61 3b 74 68 69 73 2e 67 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 62 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 21 31 7d 72 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 21 30 7d 3b 76 61 72 20 66 61 2c 75 3b 61 3a 7b 66 6f 72 28 76 61 72 20 68 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 77 3d 6d 2c 69 61 3d 30 3b 69 61 3c 68 61 2e 6c 65 6e 67 74 68 3b 69 61 2b 2b 29 69 66 28 77 3d 77 5b 68 61 5b 69 61 5d 5d 2c 77 3d 3d 6e 75 6c 6c 29 7b 75 3d Data Ascii: r(;this.s.length;)this.s.shift()()};function r(a,b){this.type=a;this.g=this.target=b;this.defaultPrevented=!1}r.prototype.h=function(){this.defaultPrevented=!0};var fa,u;a:{for(var ha=["CLOSURE_FLAGS"],w=m,ia=0;ia<ha.length;ia++)if(w=w[ha[ia]],w==null){u=
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 2e 63 6c 69 65 6e 74 58 3d 61 2e 63 6c 69 65 6e 74 58 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 63 6c 69 65 6e 74 58 3a 61 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 61 2e 63 6c 69 65 6e 74 59 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 63 6c 69 65 6e 74 59 3a 61 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 61 2e 73 63 72 65 65 6e 58 7c 7c 30 2c 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 61 2e 73 63 72 65 65 6e 59 7c 7c 30 29 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 61 2e 62 75 74 74 6f 6e 3b 74 68 69 73 2e 6b 65 79 3d 61 2e 6b 65 79 7c 7c 22 22 3b 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 61 6c 74 4b 65 79 3d 61 2e 61 6c 74 4b 65 79 3b 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 61 2e 73 68 69 66 74 4b Data Ascii: .clientX=a.clientX!==void 0?a.clientX:a.pageX,this.clientY=a.clientY!==void 0?a.clientY:a.pageY,this.screenX=a.screenX\|\|0,this.screenY=a.screenY\|\|0);this.button=a.button;this.key=a.key\|\|"";this.ctrlKey=a.ctrlKey;this.altKey=a.altKey;this.shiftKey=a.shiftK
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 74 61 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 62 2e 74 79 70 65 3b 69 66 28 63 20 69 6e 20 61 2e 67 29 7b 76 61 72 20 64 3d 61 2e 67 5b 63 5d 2c 66 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 64 2c 62 2c 76 6f 69 64 20 30 29 2c 65 3b 28 65 3d 66 3e 3d 30 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 64 2c 66 2c 31 29 3b 65 26 26 28 43 28 62 29 2c 61 2e 67 5b 63 5d 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 28 64 65 6c 65 74 65 20 61 2e 67 5b 63 5d 2c 61 2e 68 2d 2d 29 29 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 7b 63 6f 6e 73 74 20 65 3d Data Ascii: nction ta(a,b){const c=b.type;if(c in a.g){var d=a.g[c],f=Array.prototype.indexOf.call(d,b,void 0),e;(e=f>=0)&&Array.prototype.splice.call(d,f,1);e&&(C(b),a.g[c].length==0&&(delete a.g[c],a.h--))}} function sa(a,b,c,d){for(let f=0;f<a.length;++f){const e=
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 72 65 3a 21 21 64 2c 63 3d 7a 61 28 63 29 2c 61 26 26 61 5b 42 5d 29 3f 28 61 3d 61 2e 67 2c 65 3d 53 74 72 69 6e 67 28 62 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 65 20 69 6e 20 61 2e 67 26 26 28 62 3d 61 2e 67 5b 65 5d 2c 63 3d 73 61 28 62 2c 63 2c 64 2c 66 29 2c 63 3e 2d 31 26 26 28 43 28 62 5b 63 5d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 62 2c 63 2c 31 29 2c 62 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 28 64 65 6c 65 74 65 20 61 2e 67 5b 65 5d 2c 61 2e 68 2d 2d 29 29 29 29 3a 61 26 26 28 61 3d 42 61 28 61 29 29 26 26 28 62 3d 61 2e 67 5b 62 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2c 61 3d 2d 31 2c 62 26 26 28 61 3d 73 61 28 62 2c 63 2c 64 2c 66 29 29 2c 28 63 3d 61 3e 2d 31 3f 62 5b 61 5d 3a 6e 75 6c 6c 29 26 26 Data Ascii: re:!!d,c=za(c),a&&a[B])?(a=a.g,e=String(b).toString(),e in a.g&&(b=a.g[e],c=sa(b,c,d,f),c>-1&&(C(b[c]),Array.prototype.splice.call(b,c,1),b.length==0&&(delete a.g[e],a.h--)))):a&&(a=Ba(a))&&(b=a.g[b.toString()],a=-1,b&&(a=sa(b,c,d,f)),(c=a>-1?b[a]:null)&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.10	49849	172.217.19.226	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:16 UTC	583	OUT	GET /getconfig/sodar?sv=200&tid=gda&tv=r20241205&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://t.ly Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:16 UTC	586	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Tue, 10 Dec 2024 13:21:16 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:16 UTC	804	IN	Data Raw: 34 34 31 61 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 54 45 42 59 5a 37 33 70 4a 74 79 39 68 63 49 50 33 71 5f 71 34 41 63 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 39 59 61 64 5a 4b 41 76 44 66 56 73 31 59 48 6e 4f 47 53 5f 59 70 41 47 50 78 61 73 34 33 71 43 43 4d 74 75 33 47 56 78 52 61 77 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 72 55 72 7a 73 67 33 4a 2b 6e 78 64 44 54 4b 6d 32 4e 74 68 59 39 50 70 4b 4d 67 6b 5a 78 36 52 46 57 53 52 65 75 7a 72 34 37 73 54 6b 48 73 31 57 77 46 32 58 35 72 31 74 43 74 4f 57 4d 56 49 77 4f 35 75 5a 76 69 75 38 74 34 46 6c 65 59 56 54 53 71 64 55 76 62 44 55 39 70 65 4a 30 62 52 4d 4d Data Ascii: 441a{"sodar_query_id":"TEBYZ73pJty9hcIP3q_q4Ac","injector_basename":"sodar2","bg_hash_basename":"9YadZKAvDfVs1YHnOGS_YpAGPxas43qCCMtu3GVxRaw","bg_binary":"rUrzsg3J+nxdDTKm2NthY9PpKMgkZx6RFWSReuzr47sTkHs1WwF2X5r1tCtOWMVIwO5uZviu8t4FleYVTSqdUvbDU9peJ0bRMM
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 57 32 4a 6f 47 76 39 2b 36 43 33 2f 6c 6f 48 76 36 37 32 69 66 62 39 65 4b 76 76 7a 79 49 34 37 4a 6e 68 46 65 52 30 58 63 66 44 44 7a 4e 30 62 44 75 33 61 55 43 45 75 71 70 72 4e 50 59 73 49 50 69 5a 52 6b 45 47 33 79 47 4b 72 2f 35 58 4f 38 50 76 4f 35 50 32 30 4d 6e 41 70 4d 52 43 74 6a 77 49 5a 76 45 79 30 2b 30 53 4e 5a 76 59 4a 41 4f 50 56 4d 6b 57 2b 42 49 49 38 76 66 59 79 6a 52 37 4a 68 39 6c 70 75 70 4a 38 65 33 64 35 46 63 6b 39 51 62 49 4d 51 6d 63 73 4a 4f 33 66 70 45 32 4d 4d 55 66 42 69 4a 2b 4a 4c 52 4b 45 75 54 4f 43 2b 51 76 4a 6e 74 7a 49 34 49 34 79 35 6c 36 50 5a 55 55 37 6a 66 5a 31 6c 41 38 4d 73 62 2b 73 63 49 77 79 63 6c 6b 6d 35 59 4e 66 72 41 44 70 66 37 30 49 6d 61 61 69 41 5a 73 58 6e 45 42 2b 71 63 76 48 73 38 4e 6e 53 70 53 Data Ascii: W2JoGv9+6C3/loHv672ifb9eKvvzyI47JnhFeR0XcfDDzN0bDu3aUCEuqprNPYsIPiZRkEG3yGKr/5XO8PvO5P20MnApMRCtjwIZvEy0+0SNZvYJAOPVMkW+BII8vfYyjR7Jh9lpupJ8e3d5Fck9QbIMQmcsJO3fpE2MMUfBiJ+JLRKEuTOC+QvJntzI4I4y5l6PZUU7jfZ1lA8Msb+scIwyclkm5YNfrADpf70ImaaiAZsXnEB+qcvHs8NnSpS
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 71 6d 36 31 2f 7a 55 54 6f 65 62 78 79 35 36 70 57 42 46 56 31 53 42 50 6d 4f 4a 6a 6c 53 7a 2b 68 41 48 65 37 7a 70 32 55 51 55 76 42 4c 50 58 36 59 59 75 38 62 51 43 59 4d 68 44 78 43 34 32 68 4a 6c 6b 7a 69 36 4d 76 4e 74 79 70 4b 54 62 65 30 79 33 61 43 54 58 6d 33 55 47 51 76 59 37 58 7a 6f 53 67 4d 67 2f 2b 76 5a 47 6d 64 57 2b 76 66 4d 6e 5a 30 66 58 73 66 6c 67 47 2f 66 6f 30 67 79 6d 61 6f 31 69 52 49 6d 42 6d 51 62 54 43 6f 55 4c 4e 58 67 4c 77 4e 48 65 2b 41 43 74 44 51 34 4d 36 43 76 64 53 59 6d 52 79 34 6d 71 6b 66 33 68 6f 38 79 4e 65 61 4a 35 4a 44 61 66 2f 4c 61 63 42 63 57 6a 65 72 39 65 4e 43 61 6b 57 34 70 30 43 74 61 64 6f 6f 41 6a 47 58 5a 55 57 32 4d 65 6d 42 43 45 58 34 61 73 30 76 73 2f 32 67 71 78 41 75 72 31 63 41 4a 43 78 44 32 Data Ascii: qm61/zUToebxy56pWBFV1SBPmOJjlSz+hAHe7zp2UQUvBLPX6YYu8bQCYMhDxC42hJlkzi6MvNtypKTbe0y3aCTXm3UGQvY7XzoSgMg/+vZGmdW+vfMnZ0fXsflgG/fo0gymao1iRImBmQbTCoULNXgLwNHe+ACtDQ4M6CvdSYmRy4mqkf3ho8yNeaJ5JDaf/LacBcWjer9eNCakW4p0CtadooAjGXZUW2MemBCEX4as0vs/2gqxAur1cAJCxD2
2024-12-10 13:21:16 UTC	1390	IN	Data Raw: 63 37 37 57 31 64 45 41 6a 55 47 6f 42 34 70 62 6c 68 69 4f 31 64 6f 31 72 49 45 79 35 6c 2f 6b 70 67 74 4c 6e 67 50 50 4b 68 71 65 74 31 54 79 4d 4a 59 7a 7a 43 76 61 36 4a 4c 56 6c 41 33 75 4f 33 6c 47 64 6d 38 5a 47 50 67 42 75 48 39 65 70 63 32 72 79 66 4d 77 47 6d 63 4f 77 66 39 6d 50 38 4a 4c 67 6d 6a 59 52 4f 7a 41 33 4b 68 63 66 39 62 6d 55 69 69 35 57 53 58 55 37 49 4f 37 76 4f 6c 55 72 73 31 65 4d 56 71 39 34 4f 75 72 4e 30 39 54 78 57 51 50 4a 56 57 7a 58 64 56 75 72 36 69 4c 4b 52 65 4f 56 4c 68 36 36 53 54 38 33 38 64 70 37 52 41 69 72 39 56 53 6b 30 4d 31 53 30 74 77 41 46 68 37 44 66 6f 6a 45 49 42 49 74 70 32 79 4d 6a 63 43 51 54 6e 68 4f 6f 47 42 6a 74 70 6d 4c 64 56 70 59 59 67 6a 79 59 69 2f 49 76 53 7a 30 69 63 4e 45 6d 6a 6d 4f 62 59 Data Ascii: c77W1dEAjUGoB4pblhiO1do1rIEy5l/kpgtLngPPKhqet1TyMJYzzCva6JLVlA3uO3lGdm8ZGPgBuH9epc2ryfMwGmcOwf9mP8JLgmjYROzA3Khcf9bmUii5WSXU7IO7vOlUrs1eMVq94OurN09TxWQPJVWzXdVur6iLKReOVLh66ST838dp7RAir9VSk0M1S0twAFh7DfojEIBItp2yMjcCQTnhOoGBjtpmLdVpYYgjyYi/IvSz0icNEmjmObY
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 55 6a 48 74 43 68 54 61 41 32 55 54 49 42 51 36 37 43 61 33 32 69 38 6d 47 61 68 59 55 58 69 39 69 73 6f 4e 43 6d 4b 76 49 4e 6d 42 78 5a 69 44 71 50 64 67 5a 6b 61 4b 7a 73 63 65 33 4f 6a 79 4d 35 77 5a 6f 51 42 4f 50 6e 69 2b 73 2b 45 76 77 4b 6d 48 73 47 36 70 47 46 4b 56 2f 50 2b 68 68 76 75 46 77 4b 31 41 53 4c 6a 38 55 76 35 31 73 39 73 72 69 76 62 62 44 65 55 33 4a 70 54 30 4a 41 4e 51 4c 78 69 33 61 65 30 5a 78 4c 5a 31 61 62 6e 33 77 75 54 4f 30 5a 46 65 4e 54 4a 55 70 70 5a 75 67 45 6d 61 76 57 37 4a 61 70 48 73 77 6c 38 55 2f 62 32 76 54 59 72 6f 6d 63 7a 75 42 42 54 44 59 73 6c 6c 50 37 2f 4e 61 61 5a 6a 37 51 4d 35 6c 49 35 72 58 65 66 46 34 54 30 65 7a 66 7a 6c 50 73 36 58 4d 78 31 35 52 79 7a 62 51 45 39 78 66 36 62 70 51 67 42 6d 50 39 62 Data Ascii: UjHtChTaA2UTIBQ67Ca32i8mGahYUXi9isoNCmKvINmBxZiDqPdgZkaKzsce3OjyM5wZoQBOPni+s+EvwKmHsG6pGFKV/P+hhvuFwK1ASLj8Uv51s9srivbbDeU3JpT0JANQLxi3ae0ZxLZ1abn3wuTO0ZFeNTJUppZugEmavW7JapHswl8U/b2vTYromczuBBTDYsllP7/NaaZj7QM5lI5rXefF4T0ezfzlPs6XMx15RyzbQE9xf6bpQgBmP9b
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 2b 50 41 74 47 61 46 49 74 6d 76 31 76 53 77 61 31 61 36 33 39 43 71 57 69 66 44 6d 54 4e 4c 6f 66 54 46 61 76 62 32 78 62 4c 50 4f 31 66 6e 36 51 37 4e 67 42 74 41 41 4f 73 79 71 72 61 71 39 72 65 4d 5a 57 6a 43 58 73 70 6b 69 57 58 2f 77 38 66 59 55 2b 33 2b 4e 43 64 63 54 2f 6e 56 48 5a 4d 4e 41 4c 36 75 34 4a 63 77 51 36 32 30 62 54 63 57 47 4c 4c 4a 4c 50 4a 43 73 65 78 58 55 6b 43 44 33 34 30 32 55 6a 62 44 57 65 34 50 5a 5a 6a 4b 30 59 77 46 77 39 68 5a 66 53 6e 4e 79 56 30 45 38 67 59 69 55 63 65 66 6f 42 4c 64 70 62 55 68 68 68 4f 4f 69 30 50 43 43 7a 45 66 63 7a 31 69 31 7a 32 36 74 74 42 62 68 68 63 36 63 4b 37 38 66 57 6d 30 2b 37 77 39 2b 4b 4a 4a 54 70 31 6d 6f 6a 73 74 77 65 75 37 33 2f 58 77 63 76 31 47 43 4d 69 78 4b 73 78 5a 4d 39 77 73 Data Ascii: +PAtGaFItmv1vSwa1a639CqWifDmTNLofTFavb2xbLPO1fn6Q7NgBtAAOsyqraq9reMZWjCXspkiWX/w8fYU+3+NCdcT/nVHZMNAL6u4JcwQ620bTcWGLLJLPJCsexXUkCD3402UjbDWe4PZZjK0YwFw9hZfSnNyV0E8gYiUcefoBLdpbUhhhOOi0PCCzEfcz1i1z26ttBbhhc6cK78fWm0+7w9+KJJTp1mojstweu73/Xwcv1GCMixKsxZM9ws
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 4c 45 41 79 6e 41 33 2b 2b 4c 71 53 59 69 79 52 73 6c 77 41 68 6e 49 77 4b 78 50 4e 74 76 6f 6b 67 69 76 6d 70 4c 66 6b 59 61 63 52 4f 32 6d 39 2b 38 50 43 68 31 76 44 6b 6c 61 62 6d 47 34 62 4f 42 37 5a 44 6d 4b 34 43 4f 5a 50 66 6b 53 55 6e 49 75 77 32 61 4c 39 44 6a 77 63 36 69 74 4a 30 6f 48 55 68 45 4a 6c 55 70 4d 6b 67 62 71 6d 30 67 39 65 58 49 55 57 33 43 57 37 6f 32 44 6e 59 4f 6e 74 34 66 43 74 6e 43 73 65 47 57 41 47 4d 44 38 38 36 55 58 46 6f 64 77 50 4f 41 66 71 48 7a 53 4e 4f 74 55 59 67 4c 2b 46 2f 6c 43 35 44 79 73 6b 79 37 77 74 70 79 73 38 66 63 78 6d 49 65 4b 38 61 53 70 31 72 36 36 41 2b 49 66 37 6f 37 66 77 53 6b 67 32 30 67 4f 39 4d 49 42 79 6b 69 4f 64 47 5a 6f 69 33 50 78 33 72 74 49 7a 72 4e 45 77 66 64 4a 61 4a 70 51 4a 68 58 45 Data Ascii: LEAynA3++LqSYiyRslwAhnIwKxPNtvokgivmpLfkYacRO2m9+8PCh1vDklabmG4bOB7ZDmK4COZPfkSUnIuw2aL9Djwc6itJ0oHUhEJlUpMkgbqm0g9eXIUW3CW7o2DnYOnt4fCtnCseGWAGMD886UXFodwPOAfqHzSNOtUYgL+F/lC5Dysky7wtpys8fcxmIeK8aSp1r66A+If7o7fwSkg20gO9MIBykiOdGZoi3Px3rtIzrNEwfdJaJpQJhXE
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 51 63 39 61 34 43 69 58 76 57 66 6c 65 67 39 7a 2f 45 62 42 37 6a 58 37 34 50 58 78 53 76 49 78 68 32 6d 50 5a 69 57 37 4a 74 77 59 53 4d 7a 6b 31 41 66 38 35 77 33 34 62 67 36 4d 34 7a 51 78 42 33 54 64 47 65 6f 55 6b 63 66 31 4d 54 54 6c 77 47 57 45 49 6b 33 79 4a 6f 70 54 39 39 78 6d 79 34 74 32 4c 44 5a 61 76 5a 4e 44 64 6d 4e 42 43 58 76 76 47 66 61 37 6e 72 79 30 68 7a 70 50 46 59 50 49 69 34 4d 35 44 63 63 4a 74 67 48 65 71 72 4a 56 2b 77 43 50 6b 36 2b 57 79 48 61 68 41 37 69 53 71 6e 4a 71 70 45 4b 2b 33 65 31 5a 48 4c 71 33 53 4a 6b 4b 64 78 45 63 4b 65 62 69 65 73 4e 33 54 67 38 39 51 5a 2b 37 73 6c 63 57 35 70 4c 41 42 42 4e 6b 42 6a 6b 5a 71 6b 42 69 47 62 56 42 61 2f 73 56 68 75 4c 32 78 4d 54 38 68 75 41 4f 35 58 6b 49 38 63 50 36 66 48 4a Data Ascii: Qc9a4CiXvWfleg9z/EbB7jX74PXxSvIxh2mPZiW7JtwYSMzk1Af85w34bg6M4zQxB3TdGeoUkcf1MTTlwGWEIk3yJopT99xmy4t2LDZavZNDdmNBCXvvGfa7nry0hzpPFYPIi4M5DccJtgHeqrJV+wCPk6+WyHahA7iSqnJqpEK+3e1ZHLq3SJkKdxEcKebiesN3Tg89QZ+7slcW5pLABBNkBjkZqkBiGbVBa/sVhuL2xMT8huAO5XkI8cP6fHJ
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 74 32 63 79 41 59 68 68 57 2f 4d 6e 57 59 48 58 4e 47 6d 76 37 55 54 62 39 53 6e 6b 78 36 62 69 31 58 68 5a 35 47 52 6c 61 45 65 4b 35 38 43 6c 4d 42 41 61 34 6d 65 31 57 6d 4a 75 6c 6f 49 46 42 4c 46 4c 47 43 57 70 73 47 70 4d 4a 6f 44 6b 54 59 5a 4e 56 33 74 35 38 6e 76 52 78 79 2b 35 6f 2f 76 7a 49 4a 59 4e 47 56 77 47 78 4b 74 31 6d 2b 67 43 63 66 69 69 37 48 75 63 70 67 6d 47 64 4b 63 64 69 30 64 68 42 7a 68 77 4b 41 32 46 36 33 53 6f 52 62 62 64 2b 52 4a 2f 43 67 69 48 67 55 39 36 61 5a 77 7a 6b 38 70 66 5a 47 51 4f 53 39 43 6e 38 74 61 79 6b 37 62 6e 75 72 48 38 4b 46 4e 7a 64 55 63 58 42 6c 74 70 51 30 4a 7a 6a 2f 74 52 79 4a 55 74 4d 6a 33 6b 7a 2f 68 48 61 6f 32 58 6a 37 56 72 36 66 74 4d 69 5a 2f 62 71 36 59 50 2f 6c 55 62 41 35 55 78 55 36 54 Data Ascii: t2cyAYhhW/MnWYHXNGmv7UTb9Snkx6bi1XhZ5GRlaEeK58ClMBAa4me1WmJuloIFBLFLGCWpsGpMJoDkTYZNV3t58nvRxy+5o/vzIJYNGVwGxKt1m+gCcfii7HucpgmGdKcdi0dhBzhwKA2F63SoRbbd+RJ/CgiHgU96aZwzk8pfZGQOS9Cn8tayk7bnurH8KFNzdUcXBltpQ0Jzj/tRyJUtMj3kz/hHao2Xj7Vr6ftMiZ/bq6YP/lUbA5UxU6T
2024-12-10 13:21:17 UTC	1390	IN	Data Raw: 71 56 63 46 41 46 32 6f 65 35 33 44 53 64 46 63 31 35 38 72 6a 4c 4b 36 54 57 4a 5a 4c 55 68 5a 72 79 72 34 6d 79 4e 6c 39 32 4e 59 54 6c 38 4f 75 32 53 52 75 67 59 31 78 6d 41 57 64 58 4d 6a 6d 6f 70 51 57 50 47 52 39 63 75 6f 34 4d 78 73 32 53 6f 78 30 65 41 57 77 76 44 74 2b 4d 46 4c 68 6f 36 41 67 56 30 34 45 33 53 68 78 51 51 33 34 61 32 71 37 73 48 70 57 62 33 4e 67 41 72 39 6d 48 31 69 79 38 73 39 4e 57 64 41 73 53 4b 45 47 67 73 6a 37 56 30 47 66 53 7a 6c 37 49 4d 37 53 77 75 41 64 7a 39 77 77 67 6d 4a 4b 44 31 78 63 61 34 67 55 53 41 41 41 55 4d 59 64 2f 68 35 6f 30 49 78 67 57 66 73 77 6f 4d 2f 31 33 34 70 69 31 74 50 32 59 55 47 70 50 4d 6e 66 57 6a 36 35 34 6d 35 58 73 43 63 37 62 69 4d 69 52 5a 59 4a 72 66 79 6f 36 72 43 6e 5a 4f 42 43 48 42 Data Ascii: qVcFAF2oe53DSdFc158rjLK6TWJZLUhZryr4myNl92NYTl8Ou2SRugY1xmAWdXMjmopQWPGR9cuo4Mxs2Sox0eAWwvDt+MFLho6AgV04E3ShxQQ34a2q7sHpWb3NgAr9mH1iy8s9NWdAsSKEGgsj7V0GfSzl7IM7SwuAdz9wwgmJKD1xca4gUSAAAUMYd/h5o0IxgWfswoM/134pi1tP2YUGpPMnfWj654m5XsCc7biMiRZYJrfyo6rCnZOBCHB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.10	49852	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:17 UTC	1466	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:17 UTC	426	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8731 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd89831d9542ac-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:17 UTC	943	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 73 2c 76 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 56 2c 66 2c 67 29 7b 66 6f 72 28 56 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 70 61 72 73 65 49 6e 74 28 56 28 34 38 35 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 34 33 35 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 56 28 34 35 38 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 35 32 32 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 34 36 37 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 56 28 34 33 37 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 56 28 34 32 39 29 29 2f 37 2b 70 61 72 73 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(W,h,i,j,k,l,s,v){W=b,function(c,e,V,f,g){for(V=b,f=c();!![];)try{if(g=parseInt(V(485))/1+-parseInt(V(435))/2+parseInt(V(458))/3(-parseInt(V(522))/4)+-parseInt(V(467))/5(parseInt(V(437))/6)+parseInt(V(429))/7+pars
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 28 34 34 34 29 5d 28 30 29 2c 48 3d 30 3b 38 3e 48 3b 50 3d 55 26 31 7c 50 3c 3c 31 2e 37 31 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f 5b 5a 28 35 31 38 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 55 3d 31 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 55 7c 50 3c 3c 31 2e 38 39 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 5a 28 35 31 38 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3d 30 2c 48 2b 2b 29 3b 66 6f 72 28 55 3d 4b 5b 5a 28 34 34 34 29 5d 28 30 29 2c 48 3d 30 3b 31 36 3e 48 3b 50 3d 50 3c 3c 31 2e 32 33 7c 55 26 31 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 5a 28 35 31 38 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 7d 4c 2d 2d 2c Data Ascii: (444)](0),H=0;8>H;P=U&1\|P<<1.71,Q==F-1?(Q=0,O[Z(518)](G(P)),P=0):Q++,U>>=1,H++);}else{for(U=1,H=0;H<N;P=U\|P<<1.89,F-1==Q?(Q=0,O[Z(518)](G(P)),P=0):Q++,U=0,H++);for(U=K[Z(444)](0),H=0;16>H;P=P<<1.23\|U&1,F-1==Q?(Q=0,O[Z(518)](G(P)),P=0):Q++,U>>=1,H++);}L--,
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 3e 4d 3b 48 5b 4d 5d 3d 4d 2c 4d 2b 3d 31 29 3b 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 32 28 35 30 39 29 5d 28 32 2c 32 29 2c 4e 3d 31 3b 4e 21 3d 53 3b 54 3d 50 26 4f 2c 50 3e 3e 3d 31 2c 50 3d 3d 30 26 26 28 50 3d 46 2c 4f 3d 47 28 51 2b 2b 29 29 2c 52 7c 3d 4e 2a 28 30 3c 54 3f 31 3a 30 29 2c 4e 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 52 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 32 28 35 30 39 29 5d 28 32 2c 38 29 2c 4e 3d 31 3b 4e 21 3d 53 3b 54 3d 50 26 4f 2c 50 3e 3e 3d 31 2c 30 3d 3d 50 26 26 28 50 3d 46 2c 4f 3d 47 28 51 2b 2b 29 29 2c 52 7c 3d 4e 2a 28 30 3c 54 3f 31 3a 30 29 2c 4e 3c 3c 3d 31 29 3b 55 3d 65 28 52 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 Data Ascii: >M;H[M]=M,M+=1);for(R=0,S=Math[a2(509)](2,2),N=1;N!=S;T=P&O,P>>=1,P==0&&(P=F,O=G(Q++)),R\|=N(0<T?1:0),N<<=1);switch(R){case 0:for(R=0,S=Math[a2(509)](2,8),N=1;N!=S;T=P&O,P>>=1,0==P&&(P=F,O=G(Q++)),R\|=N(0<T?1:0),N<<=1);U=e(R);break;case 1:for(R=0,S=Math[a
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 32 29 5d 28 29 2c 50 3d 30 3b 50 3c 4f 5b 61 38 28 35 33 39 29 5d 3b 4f 5b 50 5d 3d 3d 3d 4f 5b 50 2b 31 5d 3f 4f 5b 61 38 28 34 34 36 29 5d 28 50 2b 31 2c 31 29 3a 50 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4f 7d 28 49 29 2c 4a 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 4a 3d 4a 5b 61 37 28 35 32 36 29 5d 5b 61 37 28 34 34 35 29 5d 28 4a 29 2c 4b 3d 30 3b 4b 3c 49 5b 61 37 28 35 33 39 29 5d 3b 4c 3d 49 5b 4b 5d 2c 4d 3d 6e 28 67 2c 45 2c 4c 29 2c 4a 28 4d 29 3f 28 4e 3d 4d 3d 3d 3d 27 73 27 26 26 21 67 5b 61 37 28 35 31 36 29 5d 28 45 5b 4c 5d 29 2c 61 37 28 35 33 31 29 3d 3d 3d 46 2b 4c 3f 48 28 46 2b 4c 2c 4d 29 3a 4e 7c 7c 48 28 46 2b 4c 2c 45 5b 4c 5d 29 29 3a 48 28 46 2b 4c 2c 4d 29 2c 4b 2b 2b 29 3b 72 65 74 75 72 6e 20 47 3b 66 Data Ascii: 2)](),P=0;P<O[a8(539)];O[P]===O[P+1]?O[a8(446)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a7(526)][a7(445)](J),K=0;K<I[a7(539)];L=I[K],M=n(g,E,L),J(M)?(N=M==='s'&&!g[a7(516)](E[L]),a7(531)===F+L?H(F+L,M):N\|\|H(F+L,E[L])):H(F+L,M),K++);return G;f
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 2c 63 68 6c 41 70 69 53 69 74 65 6b 65 79 2c 34 34 34 56 6b 55 72 66 77 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 6e 6f 77 2c 63 68 63 74 78 2c 6f 6e 65 72 72 6f 72 2c 2f 6a 73 64 2f 72 2f 2c 6a 57 72 72 37 2c 73 69 64 2c 53 65 74 2c 35 55 44 45 6b 61 6a 2c 46 44 31 32 49 37 76 63 4b 39 69 66 57 50 58 36 7a 4c 78 6e 43 59 34 74 45 48 6b 56 6f 6a 52 71 4a 77 75 64 62 4d 53 24 51 72 79 4f 47 6c 55 35 54 41 73 68 33 67 38 70 5a 2b 4e 65 42 61 2d 30 6d 2c 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 65 72 72 6f 72 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 73 6f 72 74 2c 67 48 53 43 51 58 5a 41 2c 63 68 6c 41 70 69 55 72 6c 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 62 6f 64 79 2c 6a 73 64 2c 70 6f 73 74 4d 65 73 73 61 67 65 2c 65 72 72 6f 72 Data Ascii: unction,chlApiSitekey,444VkUrfw,fromCharCode,now,chctx,onerror,/jsd/r/,jWrr7,sid,Set,5UDEkaj,FD12I7vcK9ifWPX6zLxnCY4tEHkVojRqJwudbMS$QryOGlU5TAsh3g8pZ+NeBa-0m,contentWindow,error,display: none,sort,gHSCQXZA,chlApiUrl,appendChild,body,jsd,postMessage,error
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 65 3d 65 5b 61 35 28 34 33 30 29 5d 28 4f 62 6a 65 63 74 5b 61 35 28 34 39 39 29 5d 28 63 29 29 2c 63 3d 4f 62 6a 65 63 74 5b 61 35 28 35 31 35 29 5d 28 63 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 28 66 2c 67 2c 61 6c 2c 45 2c 46 2c 47 29 7b 69 66 28 61 6c 3d 57 2c 45 3d 61 6c 28 35 32 38 29 2c 21 66 5b 61 6c 28 34 38 39 29 5d 29 72 65 74 75 72 6e 3b 68 5b 61 6c 28 34 35 34 29 5d 26 26 28 67 3d 3d 3d 61 6c 28 35 31 39 29 3f 28 46 3d 7b 7d 2c 46 5b 61 6c 28 34 38 34 29 5d 3d 45 2c 46 5b 61 6c 28 34 36 35 29 5d 3d 66 2e 72 2c 46 5b 61 6c 28 35 31 31 29 5d 3d 61 6c 28 35 31 39 29 2c 68 5b 61 6c 28 34 35 34 29 5d 5b 61 6c 28 34 37 38 29 5d 28 46 2c 27 2a 27 29 29 3a 28 47 3d 7b 7d 2c 47 5b 61 6c 28 34 38 34 29 5d 3d 45 2c 47 5b 61 6c Data Ascii: e=e[a5(430)](Object[a5(499)](c)),c=Object[a5(515)](c));return e}function D(f,g,al,E,F,G){if(al=W,E=al(528),!f[al(489)])return;h[al(454)]&&(g===al(519)?(F={},F[al(484)]=E,F[al(465)]=f.r,F[al(511)]=al(519),h[al(454)][al(478)](F,'*')):(G={},G[al(484)]=E,G[al
2024-12-10 13:21:17 UTC	943	IN	Data Raw: 5b 61 68 28 35 32 34 29 5d 5b 61 68 28 34 32 37 29 5d 2b 61 68 28 34 32 33 29 2b 31 2b 61 68 28 34 39 34 29 2b 49 2e 72 2b 61 68 28 34 38 33 29 2c 4b 3d 6e 65 77 20 68 5b 28 61 68 28 34 39 30 29 29 5d 28 29 2c 21 4b 29 72 65 74 75 72 6e 3b 4c 3d 61 68 28 34 31 36 29 2c 4d 3d 7b 7d 2c 4d 5b 61 68 28 34 35 37 29 5d 3d 68 5b 61 68 28 35 32 34 29 5d 5b 61 68 28 34 35 37 29 5d 2c 4d 5b 61 68 28 34 37 34 29 5d 3d 68 5b 61 68 28 35 32 34 29 5d 5b 61 68 28 34 37 34 29 5d 2c 4d 5b 61 68 28 35 32 39 29 5d 3d 68 5b 61 68 28 35 32 34 29 5d 5b 61 68 28 35 32 39 29 5d 2c 4d 5b 61 68 28 34 32 31 29 5d 3d 68 5b 61 68 28 35 32 34 29 5d 5b 61 68 28 35 32 33 29 5d 2c 4e 3d 4d 2c 4b 5b 61 68 28 34 39 37 29 5d 28 4c 2c 4a 2c 21 21 5b 5d 29 2c 4b 5b 61 68 28 34 35 30 29 5d 3d Data Ascii: [ah(524)][ah(427)]+ah(423)+1+ah(494)+I.r+ah(483),K=new h[(ah(490))](),!K)return;L=ah(416),M={},M[ah(457)]=h[ah(524)][ah(457)],M[ah(474)]=h[ah(524)][ah(474)],M[ah(529)]=h[ah(524)][ah(529)],M[ah(421)]=h[ah(524)][ah(523)],N=M,K[ah(497)](L,J,!![]),K[ah(450)]=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.10	49854	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:17 UTC	1295	OUT	GET /js/1166.js?id=19bfd34c537a6d4aa0c4 HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:17 UTC	732	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Tue, 01 Jan 1980 00:00:01 GMT vary: Accept-Encoding etag: W/"12cea601-4b67" expires: Tue, 09 Dec 2025 17:54:49 GMT Cache-Control: public, max-age=31536000, no-transform, no-store x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 200 CF-Cache-Status: HIT Age: 69954 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd89846ed78c2d-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:17 UTC	637	IN	Data Raw: 34 62 36 37 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 31 36 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 36 36 5d 2c 7b 37 32 30 30 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 72 28 32 33 36 34 35 29 2c 6f 3d 72 2e 6e 28 6e 29 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 31 5d 7d 29 29 3b 6f 2e 70 75 73 68 28 5b 74 2e 69 64 2c 22 3a 65 78 70 6f 72 74 7b 70 72 69 6d 61 72 79 3a 23 32 Data Ascii: 4b67/! For license information please see 1166.js.LICENSE.txt /"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[1166],{7200:(t,e,r)=>{r.d(e,{Z:()=>i});var n=r(23645),o=r.n(n)()((function(t){return t[1]}));o.push([t.id,":export{primary:#2
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 7d 2c 77 72 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 2e 70 75 74 28 74 68 69 73 2e 64 61 74 61 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 2c 38 29 7d 7d 3b 76 61 72 20 75 3d 73 2c 6c 3d 7b 4c 3a 31 2c 4d 3a 30 2c 51 3a 33 2c 48 3a 32 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 29 7b 74 68 69 73 2e 74 6f 74 61 6c 43 6f 75 6e 74 3d 74 2c 74 68 69 73 2e 64 61 74 61 43 6f 75 6e 74 3d 65 7d 68 2e 52 53 5f 42 4c 4f 43 4b 5f 54 41 42 4c 45 3d 5b 5b 31 2c 32 36 2c 31 39 5d 2c 5b Data Ascii: .prototype={getLength:function(t){return this.data.length},write:function(t){for(var e=0;e<this.data.length;e++)t.put(this.data.charCodeAt(e),8)}};var u=s,l={L:1,M:0,Q:3,H:2};function h(t,e){this.totalCount=t,this.dataCount=e}h.RS_BLOCK_TABLE=[[1,26,19],[
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 37 30 2c 34 34 2c 31 31 2c 37 31 2c 34 35 5d 2c 5b 31 37 2c 34 37 2c 32 31 2c 34 2c 34 38 2c 32 32 5d 2c 5b 39 2c 33 39 2c 31 33 2c 31 36 2c 34 30 2c 31 34 5d 2c 5b 33 2c 31 33 35 2c 31 30 37 2c 35 2c 31 33 36 2c 31 30 38 5d 2c 5b 33 2c 36 37 2c 34 31 2c 31 33 2c 36 38 2c 34 32 5d 2c 5b 31 35 2c 35 34 2c 32 34 2c 35 2c 35 35 2c 32 35 5d 2c 5b 31 35 2c 34 33 2c 31 35 2c 31 30 2c 34 34 2c 31 36 5d 2c 5b 34 2c 31 34 34 2c 31 31 36 2c 34 2c 31 34 35 2c 31 31 37 5d 2c 5b 31 37 2c 36 38 2c 34 32 5d 2c 5b 31 37 2c 35 30 2c 32 32 2c 36 2c 35 31 2c 32 33 5d 2c 5b 31 39 2c 34 36 2c 31 36 2c 36 2c 34 37 2c 31 37 5d 2c 5b 32 2c 31 33 39 2c 31 31 31 2c 37 2c 31 34 30 2c 31 31 32 5d 2c 5b 31 37 2c 37 34 2c 34 36 5d 2c 5b 37 2c 35 34 2c 32 34 2c 31 36 2c 35 35 2c 32 35 Data Ascii: 70,44,11,71,45],[17,47,21,4,48,22],[9,39,13,16,40,14],[3,135,107,5,136,108],[3,67,41,13,68,42],[15,54,24,5,55,25],[15,43,15,10,44,16],[4,144,116,4,145,117],[17,68,42],[17,50,22,6,51,23],[19,46,16,6,47,17],[2,139,111,7,140,112],[17,74,46],[7,54,24,16,55,25
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 35 35 2c 32 35 5d 2c 5b 32 2c 34 35 2c 31 35 2c 36 34 2c 34 36 2c 31 36 5d 2c 5b 31 37 2c 31 35 32 2c 31 32 32 2c 34 2c 31 35 33 2c 31 32 33 5d 2c 5b 32 39 2c 37 34 2c 34 36 2c 31 34 2c 37 35 2c 34 37 5d 2c 5b 34 39 2c 35 34 2c 32 34 2c 31 30 2c 35 35 2c 32 35 5d 2c 5b 32 34 2c 34 35 2c 31 35 2c 34 36 2c 34 36 2c 31 36 5d 2c 5b 34 2c 31 35 32 2c 31 32 32 2c 31 38 2c 31 35 33 2c 31 32 33 5d 2c 5b 31 33 2c 37 34 2c 34 36 2c 33 32 2c 37 35 2c 34 37 5d 2c 5b 34 38 2c 35 34 2c 32 34 2c 31 34 2c 35 35 2c 32 35 5d 2c 5b 34 32 2c 34 35 2c 31 35 2c 33 32 2c 34 36 2c 31 36 5d 2c 5b 32 30 2c 31 34 37 2c 31 31 37 2c 34 2c 31 34 38 2c 31 31 38 5d 2c 5b 34 30 2c 37 35 2c 34 37 2c 37 2c 37 36 2c 34 38 5d 2c 5b 34 33 2c 35 34 2c 32 34 2c 32 32 2c 35 35 2c 32 35 5d 2c 5b Data Ascii: 55,25],[2,45,15,64,46,16],[17,152,122,4,153,123],[29,74,46,14,75,47],[49,54,24,10,55,25],[24,45,15,46,46,16],[4,152,122,18,153,123],[13,74,46,32,75,47],[48,54,24,14,55,25],[42,45,15,32,46,16],[20,147,117,4,148,118],[40,75,47,7,76,48],[43,54,24,22,55,25],[
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 3c 30 3b 29 74 2b 3d 32 35 35 3b 66 6f 72 28 3b 74 3e 3d 32 35 36 3b 29 74 2d 3d 32 35 35 3b 72 65 74 75 72 6e 20 67 2e 45 58 50 5f 54 41 42 4c 45 5b 74 5d 7d 2c 45 58 50 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 2c 4c 4f 47 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 7d 2c 76 3d 30 3b 76 3c 38 3b 76 2b 2b 29 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 5d 3d 31 3c 3c 76 3b 66 6f 72 28 76 3d 38 3b 76 3c 32 35 36 3b 76 2b 2b 29 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 5d 3d 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d 34 5d 5e 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d 35 5d 5e 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d 36 5d 5e 67 2e 45 58 50 5f 54 41 42 4c 45 5b 76 2d Data Ascii: p:function(t){for(;t<0;)t+=255;for(;t>=256;)t-=255;return g.EXP_TABLE[t]},EXP_TABLE:new Array(256),LOG_TABLE:new Array(256)},v=0;v<8;v++)g.EXP_TABLE[v]=1<<v;for(v=8;v<256;v++)g.EXP_TABLE[v]=g.EXP_TABLE[v-4]^g.EXP_TABLE[v-5]^g.EXP_TABLE[v-6]^g.EXP_TABLE[v-
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 5d 2c 5b 36 2c 32 38 2c 35 34 2c 38 30 2c 31 30 36 5d 2c 5b 36 2c 33 32 2c 35 38 2c 38 34 2c 31 31 30 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 5d 2c 5b 36 2c 32 36 2c 35 30 2c 37 34 2c 39 38 2c 31 32 32 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 5d 2c 5b 36 2c 32 36 2c 35 32 2c 37 38 2c 31 30 34 2c 31 33 30 5d 2c 5b 36 2c 33 30 2c 35 36 2c 38 32 2c 31 30 38 2c 31 33 34 5d 2c 5b 36 2c 33 34 2c 36 30 2c 38 36 2c 31 31 32 2c 31 33 38 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 2c 31 34 32 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 2c 31 34 36 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 2c 31 35 30 5d Data Ascii: [6,30,54,78,102],[6,28,54,80,106],[6,32,58,84,110],[6,30,58,86,114],[6,34,62,90,118],[6,26,50,74,98,122],[6,30,54,78,102,126],[6,26,52,78,104,130],[6,30,56,82,108,134],[6,34,60,86,112,138],[6,30,58,86,114,142],[6,34,62,90,118,146],[6,30,54,78,102,126,150]
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 63 61 73 65 20 6f 3a 72 65 74 75 72 6e 20 39 3b 63 61 73 65 20 69 3a 63 61 73 65 20 61 3a 72 65 74 75 72 6e 20 38 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 74 29 7d 65 6c 73 65 20 69 66 28 65 3c 32 37 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 6e 3a 72 65 74 75 72 6e 20 31 32 3b 63 61 73 65 20 6f 3a 72 65 74 75 72 6e 20 31 31 3b 63 61 73 65 20 69 3a 72 65 74 75 72 6e 20 31 36 3b 63 61 73 65 20 61 3a 72 65 74 75 72 6e 20 31 30 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 74 29 7d 65 6c 73 65 7b 69 66 28 21 28 65 3c 34 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 79 70 65 3a 22 2b 65 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 Data Ascii: case o:return 9;case i:case a:return 8;default:throw new Error("mode:"+t)}else if(e<27)switch(t){case n:return 12;case o:return 11;case i:return 16;case a:return 10;default:throw new Error("mode:"+t)}else{if(!(e<41))throw new Error("type:"+e);switch(t){ca
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 73 2e 64 61 74 61 4c 69 73 74 2e 70 75 73 68 28 65 29 2c 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 3d 6e 75 6c 6c 7d 2c 44 2e 69 73 44 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 3c 30 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 74 7c 7c 65 3c 30 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 2b 22 2c 22 2b 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 5d 5b 65 5d 7d 2c 44 2e 67 65 74 4d 6f 64 75 6c 65 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 7d 2c 44 2e 6d 61 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 74 79 70 65 4e 75 6d Data Ascii: s.dataList.push(e),this.dataCache=null},D.isDark=function(t,e){if(t<0\|\|this.moduleCount<=t\|\|e<0\|\|this.moduleCount<=e)throw new Error(t+","+e);return this.modules[t][e]},D.getModuleCount=function(){return this.moduleCount},D.make=function(){if(this.typeNum
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 29 29 66 6f 72 28 76 61 72 20 6e 3d 2d 31 3b 6e 3c 3d 37 3b 6e 2b 2b 29 65 2b 6e 3c 3d 2d 31 7c 7c 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 3c 3d 65 2b 6e 7c 7c 28 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 2b 72 5d 5b 65 2b 6e 5d 3d 30 3c 3d 72 26 26 72 3c 3d 36 26 26 28 30 3d 3d 6e 7c 7c 36 3d 3d 6e 29 7c 7c 30 3c 3d 6e 26 26 6e 3c 3d 36 26 26 28 30 3d 3d 72 7c 7c 36 3d 3d 72 29 7c 7c 32 3c 3d 72 26 26 72 3c 3d 34 26 26 32 3c 3d 6e 26 26 6e 3c 3d 34 29 7d 2c 44 2e 67 65 74 42 65 73 74 4d 61 73 6b 50 61 74 74 65 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 65 3d 30 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 74 68 69 73 2e 6d 61 6b 65 49 6d 70 6c 28 21 30 2c 72 29 3b 76 61 72 20 6e 3d 45 2e 67 65 74 4c 6f 73 74 50 6f Data Ascii: ))for(var n=-1;n<=7;n++)e+n<=-1\|\|this.moduleCount<=e+n\|\|(this.modules[t+r][e+n]=0<=r&&r<=6&&(0==n\|\|6==n)\|\|0<=n&&n<=6&&(0==r\|\|6==r)\|\|2<=r&&r<=4&&2<=n&&n<=4)},D.getBestMaskPattern=function(){for(var t=0,e=0,r=0;r<8;r++){this.makeImpl(!0,r);var n=E.getLostPo
2024-12-10 13:21:17 UTC	1369	IN	Data Raw: 44 2e 73 65 74 75 70 54 79 70 65 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 68 69 73 2e 65 72 72 6f 72 43 6f 72 72 65 63 74 4c 65 76 65 6c 3c 3c 33 7c 65 2c 6e 3d 45 2e 67 65 74 42 43 48 54 79 70 65 49 6e 66 6f 28 72 29 2c 6f 3d 30 3b 6f 3c 31 35 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 21 74 26 26 31 3d 3d 28 6e 3e 3e 6f 26 31 29 3b 6f 3c 36 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 6f 5d 5b 38 5d 3d 69 3a 6f 3c 38 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 6f 2b 31 5d 5b 38 5d 3d 69 3a 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 31 35 2b 6f 5d 5b 38 5d 3d 69 7d 66 6f 72 28 6f 3d 30 3b 6f 3c 31 35 3b 6f 2b 2b 29 7b 69 3d 21 74 26 26 31 3d 3d 28 6e 3e 3e 6f 26 31 29 3b Data Ascii: D.setupTypeInfo=function(t,e){for(var r=this.errorCorrectLevel<<3\|e,n=E.getBCHTypeInfo(r),o=0;o<15;o++){var i=!t&&1==(n>>o&1);o<6?this.modules[o][8]=i:o<8?this.modules[o+1][8]=i:this.modules[this.moduleCount-15+o][8]=i}for(o=0;o<15;o++){i=!t&&1==(n>>o&1);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.10	49857	142.250.181.100	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:18 UTC	1169	OUT	GET /pagead/1p-user-list/10875945736/?random=1733836867034&cv=11&fst=1733835600000&bg=ffffff&guid=ON&async=1&gtm=45be4c90v888461834za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&hn=www.googleadservices.com&frm=0&tiba=World%27s%20Shortest%20URL%20Shortener%20%7C%20T.LY&npa=0&pscdl=noapi&auid=1916227148.1733836867&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dO5efoN-V8xiRq9Ee4UlikLm79x3c5ATlDe37PaSSF5cYw7oX&random=2752506817&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:19 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.10	49863	104.20.7.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:18 UTC	1529	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/8efd891efeaf15d7 HTTP/1.1 Host: t.ly Connection: keep-alive Content-Length: 15795 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://t.ly Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:18 UTC	15795	OUT	Data Raw: 7b 22 77 70 22 3a 22 50 5a 4b 4a 32 31 44 6f 32 6b 4b 32 45 37 57 44 38 44 68 46 66 4a 31 41 46 76 77 46 78 73 78 7a 7a 31 6f 44 67 36 46 49 33 41 70 33 39 4b 46 62 49 42 43 57 33 6b 44 24 46 45 38 4b 63 47 5a 5a 46 76 64 7a 46 58 46 7a 41 7a 4b 44 46 52 7a 44 53 57 61 4a 64 6b 5a 55 35 71 4a 49 33 4c 5a 77 76 6c 24 68 37 63 56 4a 53 4c 32 4d 77 2b 44 6c 36 49 64 78 46 32 4b 4b 48 78 62 31 55 47 46 59 63 47 39 51 55 46 51 4a 37 62 46 31 4d 4b 46 78 4a 31 31 4a 4c 45 4a 78 46 44 33 46 66 6b 75 46 44 2b 55 46 69 4e 6f 76 63 5a 42 44 76 64 47 4b 46 31 4e 55 46 31 57 43 66 46 43 31 46 44 55 52 39 54 4b 71 24 77 41 31 63 31 44 51 53 77 5a 36 32 4c 2d 74 51 49 46 73 4a 31 78 65 6a 5a 46 6f 75 5a 33 37 39 49 72 52 63 46 43 74 51 64 4c 73 76 4a 46 54 64 73 39 78 Data Ascii: {"wp":"PZKJ21Do2kK2E7WD8DhFfJ1AFvwFxsxzz1oDg6FI3Ap39KFbIBCW3kD$FE8KcGZZFvdzFXFzAzKDFRzDSWaJdkZU5qJI3LZwvl$h7cVJSL2Mw+Dl6IdxF2KKHxb1UGFYcG9QUFQJ7bF1MKFxJ11JLEJxFD3FfkuFD+UFiNovcZBDvdGKF1NUF1WCfFC1FDUR9TKq$wA1c1DQSwZ62L-tQIFsJ1xejZFouZ379IrRcFCtQdLsvJFTds9x
2024-12-10 13:21:19 UTC	1049	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.t.ly; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=j37WLsUoVt4W8aZscZcJ6CELo9mBnD86rM9iPuswGkU-1733836879-1.2.1.1-RNZp8CiaQn7pCJhZ.0KQoFWuxBmsBCqq1fKe4MpIWA.w4LDtXKgzZ8T4sroTuQkZ.mnjwjr_.lqWXG65Ymy3ZMoF7.PmFYHLrkzGNf7csNCIYiadjkG2JaxDOv0NXpGHIxZM72wUgq0Qh5EnC1VybxlcQTAl2B.0CrgG727Ebve4NZ6DEr7_MMn3HHVw1ibXQwTRx0K67GIJmt8oa61RkUq8I_QLhsg6MxWqGxhEBSweH2Ezx0RAbwbfIiVhwB_bQppuLJkzFoei02.wzFa3hco8N8c6ZUPd8hLbCXa6FIXbGfxDTR1FN0DIJkmiYwslEpzZDiB1sdekZJgGxlWZ3clDcjbK08imuXzHDlENd2Dc6MaebXGtgK55YPdIaEap; Path=/; Expires=Wed, 10-Dec-25 13:21:19 GMT; Domain=.t.ly; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd898d998243bf-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.10	49865	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:19 UTC	1325	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js? HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:19 UTC	426	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8820 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8efd898f6ad115d7-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:19 UTC	943	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 2c 42 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 56 2c 66 2c 67 29 7b 66 6f 72 28 56 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 67 3d 70 61 72 73 65 49 6e 74 28 56 28 33 32 39 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 56 28 34 32 37 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 56 28 33 35 36 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 33 36 37 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 34 30 38 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 56 28 33 37 34 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 33 30 39 29 29 2f 37 29 2b 2d 70 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(W,h,i,j,k,o,s,B){W=b,function(d,e,V,f,g){for(V=b,f=d();!![];)try{if(g=parseInt(V(329))/1+parseInt(V(427))/2(parseInt(V(356))/3)+-parseInt(V(367))/4(-parseInt(V(408))/5)+parseInt(V(374))/6*(-parseInt(V(309))/7)+-p
2024-12-10 13:21:19 UTC	1369	IN	Data Raw: 29 2c 4b 3d 30 3b 4b 3c 49 5b 61 31 28 33 31 39 29 5d 3b 4c 3d 49 5b 4b 5d 2c 4d 3d 6d 28 67 2c 45 2c 4c 29 2c 4a 28 4d 29 3f 28 4e 3d 4d 3d 3d 3d 27 73 27 26 26 21 67 5b 61 31 28 33 31 38 29 5d 28 45 5b 4c 5d 29 2c 61 31 28 33 36 33 29 3d 3d 3d 46 2b 4c 3f 48 28 46 2b 4c 2c 4d 29 3a 4e 7c 7c 48 28 46 2b 4c 2c 45 5b 4c 5d 29 29 3a 48 28 46 2b 4c 2c 4d 29 2c 4b 2b 2b 29 3b 72 65 74 75 72 6e 20 47 3b 66 75 6e 63 74 69 6f 6e 20 48 28 4f 2c 50 2c 61 30 29 7b 61 30 3d 62 2c 4f 62 6a 65 63 74 5b 61 30 28 33 30 33 29 5d 5b 61 30 28 33 33 39 29 5d 5b 61 30 28 33 39 34 29 5d 28 47 2c 50 29 7c 7c 28 47 5b 50 5d 3d 5b 5d 29 2c 47 5b 50 5d 5b 61 30 28 34 32 33 29 5d 28 4f 29 7d 7d 2c 6f 3d 57 28 34 30 31 29 5b 57 28 33 34 36 29 5d 28 27 3b 27 29 2c 73 3d 6f 5b 57 28 Data Ascii: ),K=0;K<I[a1(319)];L=I[K],M=m(g,E,L),J(M)?(N=M==='s'&&!g[a1(318)](E[L]),a1(363)===F+L?H(F+L,M):N\|\|H(F+L,E[L])):H(F+L,M),K++);return G;function H(O,P,a0){a0=b,Object[a0(303)][a0(339)][a0(394)](G,P)\|\|(G[P]=[]),G[P][a0(423)](O)}},o=W(401)[W(346)](';'),s=o[W(
2024-12-10 13:21:19 UTC	1369	IN	Data Raw: 2c 48 2b 2b 29 3b 7d 4c 2d 2d 2c 30 3d 3d 4c 26 26 28 4c 3d 4d 61 74 68 5b 61 65 28 33 35 37 29 5d 28 32 2c 4e 29 2c 4e 2b 2b 29 2c 64 65 6c 65 74 65 20 4a 5b 4b 5d 7d 65 6c 73 65 20 66 6f 72 28 55 3d 49 5b 4b 5d 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 31 26 55 7c 50 3c 3c 31 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f 5b 61 65 28 34 32 33 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 4b 3d 28 4c 2d 2d 2c 4c 3d 3d 30 26 26 28 4c 3d 4d 61 74 68 5b 61 65 28 33 35 37 29 5d 28 32 2c 4e 29 2c 4e 2b 2b 29 2c 49 5b 54 5d 3d 4d 2b 2b 2c 53 74 72 69 6e 67 28 53 29 29 7d 69 66 28 27 27 21 3d 3d 4b 29 7b 69 66 28 4f 62 6a 65 63 74 5b 61 65 28 33 30 33 29 5d 5b 61 65 28 33 33 39 29 5d 5b 61 65 28 33 39 34 29 5d 28 4a 2c 4b 29 29 7b 69 Data Ascii: ,H++);}L--,0==L&&(L=Math[ae(357)](2,N),N++),delete J[K]}else for(U=I[K],H=0;H<N;P=1&U\|P<<1,Q==F-1?(Q=0,O[ae(423)](G(P)),P=0):Q++,U>>=1,H++);K=(L--,L==0&&(L=Math[ae(357)](2,N),N++),I[T]=M++,String(S))}if(''!==K){if(Object[ae(303)][ae(339)][ae(394)](J,K)){i
2024-12-10 13:21:19 UTC	1369	IN	Data Raw: 20 31 3a 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 68 28 33 35 37 29 5d 28 32 2c 31 36 29 2c 4e 3d 31 3b 4e 21 3d 53 3b 54 3d 4f 26 50 2c 50 3e 3e 3d 31 2c 50 3d 3d 30 26 26 28 50 3d 46 2c 4f 3d 47 28 51 2b 2b 29 29 2c 52 7c 3d 28 30 3c 54 3f 31 3a 30 29 2a 4e 2c 4e 3c 3c 3d 31 29 3b 55 3d 65 28 52 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 4d 3d 48 5b 33 5d 3d 55 2c 4c 5b 61 68 28 34 32 33 29 5d 28 55 29 3b 3b 29 7b 69 66 28 51 3e 45 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 68 28 33 35 37 29 5d 28 32 2c 4b 29 2c 4e 3d 31 3b 4e 21 3d 53 3b 54 3d 4f 26 50 2c 50 3e 3e 3d 31 2c 30 3d 3d 50 26 26 28 50 3d 46 2c 4f 3d 47 28 51 2b 2b 29 29 2c 52 7c 3d 4e 2a 28 30 3c 54 3f 31 3a Data Ascii: 1:for(R=0,S=Math[ah(357)](2,16),N=1;N!=S;T=O&P,P>>=1,P==0&&(P=F,O=G(Q++)),R\|=(0<T?1:0)N,N<<=1);U=e(R);break;case 2:return''}for(M=H[3]=U,L[ah(423)](U);;){if(Q>E)return'';for(R=0,S=Math[ah(357)](2,K),N=1;N!=S;T=O&P,P>>=1,0==P&&(P=F,O=G(Q++)),R\|=N(0<T?1:
2024-12-10 13:21:19 UTC	1369	IN	Data Raw: 2c 64 65 74 61 69 6c 2c 69 6e 64 65 78 4f 66 2c 6a 57 72 72 37 2c 62 75 72 73 77 34 6b 65 47 4f 2b 78 7a 5a 2d 43 42 38 79 55 66 53 44 54 69 37 6a 74 57 49 24 4b 39 6f 33 32 64 46 6e 35 68 52 4d 70 50 61 41 4a 67 36 6d 4c 59 58 71 6c 56 76 30 45 51 4e 48 63 31 2c 72 65 61 64 79 53 74 61 74 65 2c 72 61 6e 64 6f 6d 2c 2f 6a 73 64 2f 72 2f 2c 6f 62 6a 65 63 74 2c 70 75 73 68 2c 69 6e 63 6c 75 64 65 73 2c 73 74 61 74 75 73 2c 6e 6f 77 2c 31 37 32 31 32 30 4f 68 75 6b 68 64 2c 73 75 63 63 65 73 73 2c 70 72 6f 74 6f 74 79 70 65 2c 30 2e 35 30 31 36 37 35 36 39 34 33 39 34 31 34 33 3a 31 37 33 33 38 33 32 37 38 35 3a 50 6a 66 78 30 67 45 70 50 7a 57 4c 38 6f 79 70 31 74 4b 45 6f 50 66 6a 73 46 6a 58 49 45 47 77 70 30 46 32 56 6e 42 35 79 70 67 2c 5f 63 66 5f 63 Data Ascii: ,detail,indexOf,jWrr7,bursw4keGO+xzZ-CB8yUfSDTi7jtWI$K9o32dFn5hRMpPaAJg6mLYXqlVv0EQNHc1,readyState,random,/jsd/r/,object,push,includes,status,now,172120Ohukhd,success,prototype,0.501675694394143:1733832785:Pjfx0gEpPzWL8oyp1tKEoPfjsFjXIEGwp0F2VnB5ypg,_cf_c
2024-12-10 13:21:19 UTC	1369	IN	Data Raw: 45 74 65 34 3b 75 42 4e 68 69 35 3b 64 69 77 4d 77 38 3b 66 6a 47 56 64 33 3b 52 74 57 6d 30 3b 49 4e 75 76 34 3b 44 53 4a 76 38 3b 5a 55 50 72 31 3b 6a 57 72 72 37 3b 6e 57 73 53 58 32 3b 4f 43 65 6e 77 31 3b 66 53 72 52 48 36 2c 6f 6e 74 69 6d 65 6f 75 74 2c 70 6f 73 74 4d 65 73 73 61 67 65 2c 63 68 63 74 78 2c 62 69 6e 64 2c 6c 6f 61 64 69 6e 67 2c 73 6f 75 72 63 65 2c 33 32 39 30 4c 69 6d 50 58 46 27 2e 73 70 6c 69 74 28 27 2c 27 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 6d 7d 2c 61 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 66 2c 67 2c 61 6c 2c 45 2c 46 2c 47 29 7b 69 66 28 61 6c 3d 57 2c 45 3d 61 6c 28 33 31 35 29 2c 21 66 5b 61 6c 28 33 36 39 29 5d 29 72 65 74 75 72 6e 3b 68 5b 61 6c 28 33 32 34 29 5d 26 26 28 67 3d 3d 3d Data Ascii: Ete4;uBNhi5;diwMw8;fjGVd3;RtWm0;INuv4;DSJv8;ZUPr1;jWrr7;nWsSX2;OCenw1;fSrRH6,ontimeout,postMessage,chctx,bind,loading,source,3290LimPXF'.split(','),a=function(){return am},a()}function D(f,g,al,E,F,G){if(al=W,E=al(315),!f[al(369)])return;h[al(324)]&&(g===
2024-12-10 13:21:19 UTC	1032	IN	Data Raw: 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4b 5b 61 62 28 34 30 39 29 5d 28 61 62 28 33 33 32 29 2c 61 62 28 33 35 38 29 29 2c 4f 3d 7b 7d 2c 4f 5b 61 62 28 33 37 39 29 5d 3d 48 2c 4f 5b 61 62 28 34 30 34 29 5d 3d 4e 2c 4f 5b 61 62 28 34 30 37 29 5d 3d 61 62 28 33 34 30 29 2c 50 3d 42 5b 61 62 28 33 39 31 29 5d 28 4a 53 4f 4e 5b 61 62 28 33 39 32 29 5d 28 4f 29 29 5b 61 62 28 33 37 33 29 5d 28 27 2b 27 2c 61 62 28 33 37 31 29 29 2c 4b 5b 61 62 28 34 30 30 29 5d 28 27 76 5f 27 2b 49 2e 72 2b 27 3d 27 2b 50 29 7d 63 61 74 63 68 28 51 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 64 2c 5a 2c 65 29 7b 66 6f 72 28 5a 3d 57 2c 65 3d 5b 5d 3b 64 21 3d 3d 6e 75 6c 6c 3b 65 3d 65 5b 5a 28 33 39 33 29 5d 28 4f 62 6a 65 63 74 5b 5a 28 33 38 35 29 5d 28 64 29 29 Data Ascii: )]=function(){},K[ab(409)](ab(332),ab(358)),O={},O[ab(379)]=H,O[ab(404)]=N,O[ab(407)]=ab(340),P=B[ab(391)](JSON[ab(392)](O))[ab(373)]('+',ab(371)),K[ab(400)]('v_'+I.r+'='+P)}catch(Q){}}function n(d,Z,e){for(Z=W,e=[];d!==null;e=e[Z(393)](Object[Z(385)](d))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.10	49859	172.217.19.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:19 UTC	530	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:19 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Tue, 10 Dec 2024 13:21:19 GMT Expires: Tue, 10 Dec 2024 13:21:19 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:19 UTC	725	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,va
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: {var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof Object.create=="function"
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e 67 2c 65 29 2c 48 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 66 29 3b 72 Data Ascii: turn H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.g,e),H(a)}a.g.h=null;d.call(a.g,f);r
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 65 2e 6c 65 6e 67 Data Ascii: .prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.length;){var e=this.g;this.g=[];for(var h=0;h<e.leng
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 65 29 29 3b 65 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 65 2e Data Ascii: d")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.initCustomEvent("unhandledrejection",!1,!0,e));e.promise=this;e.
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 67 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b Data Ascii: ),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var g=[],f=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&b[
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 Data Ascii: ww.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.ownerDocument&&a.ownerDocument.defaultView\|\|window).document).querySelector)==null?void 0
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 68 28 62 2e 67 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 46 28 62 2c 43 61 28 61 29 2c 32 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 46 28 62 2c 44 61 28 61 29 2c 33 29 3b 63 61 73 65 20 33 3a 69 66 28 21 28 61 2e 6f 3e 30 29 29 7b 62 2e 67 3d 34 3b 62 72 65 61 6b 7d 72 65 74 Data Ascii: is.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switch(b.g){case 1:return F(b,Ca(a),2);case 2:return F(b,Da(a),3);case 3:if(!(a.o>0)){b.g=4;break}ret
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 3d 3d 76 6f 69 64 20 30 3f 31 33 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 6a 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 53 2e 63 61 Data Ascii: }function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}function Ka(){return window.GoogleGcLKhOms===void 0?13:1};function S(a,b){this.h=a;this.j=b}function La(a,b){S.ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.10	49860	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:19 UTC	401	OUT	GET /getconfig/sodar?sv=200&tid=gda&tv=r20241205&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:19 UTC	586	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Tue, 10 Dec 2024 13:21:19 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:19 UTC	804	IN	Data Raw: 34 33 65 65 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 54 30 42 59 5a 5f 48 65 49 4d 43 4c 39 66 67 50 6d 4a 43 54 36 41 38 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 39 59 61 64 5a 4b 41 76 44 66 56 73 31 59 48 6e 4f 47 53 5f 59 70 41 47 50 78 61 73 34 33 71 43 43 4d 74 75 33 47 56 78 52 61 77 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 72 55 72 6d 79 4d 52 68 5a 67 70 66 41 33 58 62 71 42 36 56 56 72 53 6b 48 6c 63 57 6a 6e 4c 75 32 78 4f 41 2f 69 75 55 79 46 2f 46 69 79 39 57 51 47 43 50 36 4b 59 37 78 43 41 32 32 75 56 52 50 74 6d 2f 78 57 6f 66 32 74 54 6c 7a 6c 56 57 57 49 6e 6e 4f 50 42 2b 49 41 79 4e 4e 7a 72 6a 38 39 Data Ascii: 43ee{"sodar_query_id":"T0BYZ_HeIMCL9fgPmJCT6A8","injector_basename":"sodar2","bg_hash_basename":"9YadZKAvDfVs1YHnOGS_YpAGPxas43qCCMtu3GVxRaw","bg_binary":"rUrmyMRhZgpfA3XbqB6VVrSkHlcWjnLu2xOA/iuUyF/Fiy9WQGCP6KY7xCA22uVRPtm/xWof2tTlzlVWWInnOPB+IAyNNzrj89
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 36 53 6f 79 72 4e 75 65 70 78 4d 49 33 57 30 4a 38 35 64 78 48 30 50 46 49 55 35 72 47 2f 45 53 68 61 36 31 5a 4f 6d 61 73 72 5a 70 53 64 44 6d 45 61 78 49 62 73 49 6d 39 6f 62 56 2f 55 71 6c 7a 55 4b 2f 6a 77 4f 74 4b 56 2f 2f 46 55 55 36 68 66 71 73 76 44 67 52 45 6f 6d 30 57 4b 39 6d 4e 71 45 4a 70 79 70 57 72 42 6d 76 4e 32 48 56 34 32 69 4b 69 32 79 51 4c 42 52 51 56 65 63 35 69 5a 5a 55 37 61 7a 61 32 2b 57 63 4b 78 4e 51 55 56 77 4e 5a 63 46 48 71 42 48 65 33 35 55 70 36 67 6c 50 4d 55 50 65 65 50 4e 4c 2b 70 59 77 51 78 34 2f 34 31 58 2f 47 58 47 48 76 53 4b 35 2b 75 57 55 4a 7a 31 61 76 50 66 54 42 67 67 44 4b 30 5a 69 4a 34 58 50 55 49 48 31 62 61 63 34 6c 51 69 6c 38 39 75 77 6d 4c 71 4d 39 56 36 70 74 6e 34 30 54 66 52 4f 56 53 61 44 57 47 43 Data Ascii: 6SoyrNuepxMI3W0J85dxH0PFIU5rG/ESha61ZOmasrZpSdDmEaxIbsIm9obV/UqlzUK/jwOtKV//FUU6hfqsvDgREom0WK9mNqEJpypWrBmvN2HV42iKi2yQLBRQVec5iZZU7aza2+WcKxNQUVwNZcFHqBHe35Up6glPMUPeePNL+pYwQx4/41X/GXGHvSK5+uWUJz1avPfTBggDK0ZiJ4XPUIH1bac4lQil89uwmLqM9V6ptn40TfROVSaDWGC
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 71 4b 31 72 6f 79 59 45 78 6a 48 41 43 70 58 57 4c 72 43 33 2b 61 2f 59 46 36 33 65 6e 74 49 62 6f 43 65 44 6d 59 41 37 64 4a 2b 41 51 2b 66 5a 55 6e 32 50 58 47 53 67 6a 66 53 48 6c 34 57 2b 48 39 6d 65 76 34 2f 54 4f 6e 43 54 6e 39 50 79 46 6a 44 49 51 35 7a 48 53 38 42 51 35 55 77 42 78 72 59 62 2f 58 4b 61 64 63 65 6f 6f 58 75 36 79 44 67 47 34 32 39 39 2b 6b 4d 49 55 5a 54 75 52 6b 56 55 61 79 48 42 41 32 71 34 53 62 63 48 64 43 31 49 59 7a 32 36 30 36 79 4c 46 33 62 53 6e 65 2f 77 54 74 52 44 33 61 4b 54 4b 69 34 4a 41 4e 62 6a 2b 49 6b 50 46 70 73 56 30 61 62 55 30 47 68 6e 45 2f 39 6f 51 2f 4f 76 78 44 42 65 6f 33 67 58 4b 71 6a 53 4d 5a 50 4d 54 6a 30 72 32 4e 6f 6c 62 47 41 6b 6c 58 6f 62 6d 42 77 35 6f 56 4b 46 31 67 54 70 2b 63 6e 4b 77 58 54 Data Ascii: qK1royYExjHACpXWLrC3+a/YF63entIboCeDmYA7dJ+AQ+fZUn2PXGSgjfSHl4W+H9mev4/TOnCTn9PyFjDIQ5zHS8BQ5UwBxrYb/XKadceooXu6yDgG4299+kMIUZTuRkVUayHBA2q4SbcHdC1IYz2606yLF3bSne/wTtRD3aKTKi4JANbj+IkPFpsV0abU0GhnE/9oQ/OvxDBeo3gXKqjSMZPMTj0r2NolbGAklXobmBw5oVKF1gTp+cnKwXT
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 54 68 73 61 48 62 36 4a 4f 4b 42 6a 51 68 4c 36 51 7a 43 2f 64 6e 72 51 70 6b 38 58 64 64 68 78 31 69 34 50 6f 2f 38 56 6b 70 51 72 2b 30 5a 32 69 46 30 75 70 58 7a 38 76 6d 51 6b 45 2f 52 69 7a 72 53 34 79 33 39 64 75 7a 42 41 2f 5a 6b 49 75 73 2f 73 4b 77 73 53 49 44 57 35 59 78 65 46 6f 6d 57 39 6f 33 68 4b 56 65 6e 37 32 78 45 7a 72 37 30 64 38 38 74 4a 51 4f 63 77 6e 61 6e 30 38 36 45 73 59 45 4a 76 66 71 6c 46 4d 64 45 73 69 4a 45 6a 54 4b 79 37 37 4c 72 46 69 69 67 70 39 39 75 53 48 31 73 65 6f 6b 76 30 4b 79 38 4f 45 35 57 7a 70 42 43 32 38 5a 48 53 38 53 6a 34 77 76 4a 6a 51 70 56 71 53 4f 6e 61 4d 56 59 79 65 34 42 6f 44 31 63 54 36 49 42 66 4c 6c 43 71 54 49 4e 54 76 39 45 77 52 32 76 43 4e 30 6d 57 6e 32 4d 69 58 59 6c 57 71 43 37 58 67 52 2f Data Ascii: ThsaHb6JOKBjQhL6QzC/dnrQpk8Xddhx1i4Po/8VkpQr+0Z2iF0upXz8vmQkE/RizrS4y39duzBA/ZkIus/sKwsSIDW5YxeFomW9o3hKVen72xEzr70d88tJQOcwnan086EsYEJvfqlFMdEsiJEjTKy77LrFiigp99uSH1seokv0Ky8OE5WzpBC28ZHS8Sj4wvJjQpVqSOnaMVYye4BoD1cT6IBfLlCqTINTv9EwR2vCN0mWn2MiXYlWqC7XgR/
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 38 59 33 30 45 49 31 6e 70 75 31 6d 72 72 47 75 73 42 73 36 69 63 67 71 49 49 55 51 37 4d 5a 49 71 55 49 39 56 79 68 30 65 57 2b 6a 65 42 75 38 70 65 4b 64 71 73 58 6b 42 47 56 6f 62 67 5a 58 67 32 30 6e 77 4d 77 66 66 6e 68 6c 42 4a 70 34 44 4d 45 4b 72 48 39 6b 38 47 37 79 62 6b 65 5a 34 6d 39 66 73 39 6a 43 65 57 43 6b 74 45 6c 6e 35 4b 70 31 56 77 51 69 33 68 49 33 66 45 62 33 38 78 65 49 6c 68 37 58 37 65 33 6b 47 46 66 6d 68 59 55 41 44 46 7a 72 4f 34 49 69 48 59 4e 35 6a 30 35 62 32 2f 49 35 48 42 36 34 2b 62 4b 56 48 69 7a 4b 2b 58 63 4b 34 73 4e 75 45 34 4d 6d 56 65 4b 31 47 58 77 44 34 52 64 46 6c 49 73 69 4a 6a 63 4e 44 75 6a 61 38 4c 56 42 45 7a 72 31 71 54 79 30 73 2b 53 6f 4d 41 67 48 2f 6c 52 6f 70 42 6d 69 55 54 4c 48 69 4c 32 30 56 68 68 Data Ascii: 8Y30EI1npu1mrrGusBs6icgqIIUQ7MZIqUI9Vyh0eW+jeBu8peKdqsXkBGVobgZXg20nwMwffnhlBJp4DMEKrH9k8G7ybkeZ4m9fs9jCeWCktEln5Kp1VwQi3hI3fEb38xeIlh7X7e3kGFfmhYUADFzrO4IiHYN5j05b2/I5HB64+bKVHizK+XcK4sNuE4MmVeK1GXwD4RdFlIsiJjcNDuja8LVBEzr1qTy0s+SoMAgH/lRopBmiUTLHiL20Vhh
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 4a 34 64 72 46 39 41 6a 59 4e 49 67 71 63 78 6a 49 66 52 38 42 57 56 75 78 4a 33 69 76 67 69 51 42 67 77 4d 68 69 44 39 51 52 76 32 6d 42 46 70 33 4b 54 79 79 72 79 6a 4f 2b 69 61 62 6e 68 69 35 43 45 67 47 62 6c 36 46 63 43 74 41 2b 45 55 4c 70 65 57 36 73 72 51 46 62 66 55 31 38 66 73 74 64 4e 54 46 42 4d 55 42 53 67 6c 56 62 64 52 4b 6c 31 72 6d 37 6f 35 59 77 71 4b 38 72 73 31 46 78 70 36 67 77 51 71 77 4a 69 6a 4e 6b 44 4d 6b 41 42 50 71 4b 6b 6b 4a 47 4e 65 51 61 64 47 43 41 45 79 61 49 6c 36 45 59 5a 4b 67 58 57 58 58 67 53 68 5a 35 49 53 77 2f 4e 62 65 52 73 38 6f 47 75 6e 2f 71 4a 55 4a 77 2b 73 77 34 46 69 6e 36 6a 45 50 76 35 4a 37 62 58 33 4d 51 56 71 45 61 76 47 52 65 55 35 71 53 66 44 56 4b 31 56 44 41 38 2f 6a 55 6f 33 38 4f 66 74 79 31 59 Data Ascii: J4drF9AjYNIgqcxjIfR8BWVuxJ3ivgiQBgwMhiD9QRv2mBFp3KTyyryjO+iabnhi5CEgGbl6FcCtA+EULpeW6srQFbfU18fstdNTFBMUBSglVbdRKl1rm7o5YwqK8rs1Fxp6gwQqwJijNkDMkABPqKkkJGNeQadGCAEyaIl6EYZKgXWXXgShZ5ISw/NbeRs8oGun/qJUJw+sw4Fin6jEPv5J7bX3MQVqEavGReU5qSfDVK1VDA8/jUo38Ofty1Y
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 67 44 46 78 6f 54 57 2f 47 61 58 70 74 76 4e 6c 77 59 58 68 50 37 30 58 76 62 61 6c 77 44 6f 32 4e 35 62 4e 4c 39 45 5a 53 57 77 2f 49 65 47 69 37 32 5a 58 53 71 69 64 52 48 4c 72 36 31 4a 66 4b 49 54 6c 4b 49 37 42 55 54 75 33 69 54 56 42 48 46 79 69 4e 76 62 69 6f 57 43 4c 6a 2f 4e 4f 33 38 58 39 34 74 38 74 6f 38 36 32 4a 33 59 62 76 35 78 64 64 6f 57 73 4f 56 67 49 56 6a 63 31 6b 2b 42 4e 32 4f 61 31 4d 54 6b 37 42 75 4e 41 64 38 69 63 31 4e 6f 45 58 46 37 61 54 33 59 73 4f 41 4a 4a 67 37 64 5a 4d 30 78 32 51 34 37 5a 6c 4b 6b 62 56 59 64 47 71 74 62 48 32 53 5a 6c 30 75 37 36 6e 55 61 79 58 47 6f 66 6b 49 73 6c 49 58 59 74 69 74 33 39 4a 30 73 6d 63 57 44 6f 67 64 33 53 4a 62 46 55 66 4e 61 57 6b 63 35 38 49 64 4a 47 51 70 52 38 38 61 66 64 77 50 30 Data Ascii: gDFxoTW/GaXptvNlwYXhP70XvbalwDo2N5bNL9EZSWw/IeGi72ZXSqidRHLr61JfKITlKI7BUTu3iTVBHFyiNvbioWCLj/NO38X94t8to862J3Ybv5xddoWsOVgIVjc1k+BN2Oa1MTk7BuNAd8ic1NoEXF7aT3YsOAJJg7dZM0x2Q47ZlKkbVYdGqtbH2SZl0u76nUayXGofkIslIXYtit39J0smcWDogd3SJbFUfNaWkc58IdJGQpR88afdwP0
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 54 5a 46 6a 75 52 44 78 5a 44 70 37 65 70 67 78 76 74 47 46 4e 77 67 4b 62 77 61 4a 79 56 49 57 59 63 34 34 30 50 59 68 36 44 4b 56 53 74 50 71 2b 7a 52 62 4b 53 4e 51 52 48 63 59 4f 69 6b 35 76 4b 5a 79 38 69 6d 66 47 33 65 49 4d 6c 68 34 47 4c 38 66 62 38 50 44 74 36 56 30 49 42 6e 6e 37 30 71 58 2b 78 58 41 7a 5a 30 34 72 64 57 7a 7a 56 43 72 6f 71 55 73 34 31 4b 50 65 6d 57 70 56 57 51 39 63 36 71 58 6b 46 59 7a 45 6d 79 56 38 68 57 41 4b 62 4d 4b 35 54 36 42 56 41 39 66 46 32 71 41 6c 7a 31 54 52 6e 6a 41 74 52 6e 63 78 7a 4a 34 71 52 47 41 6e 65 6e 41 30 73 74 34 64 2b 41 56 61 61 54 54 67 49 34 58 47 41 5a 37 4d 52 68 35 6c 73 44 50 6d 36 50 6b 61 75 4f 72 6f 5a 77 4d 4f 34 53 31 61 54 38 65 73 57 79 6d 36 31 72 34 55 72 41 65 4d 46 65 56 41 78 4f Data Ascii: TZFjuRDxZDp7epgxvtGFNwgKbwaJyVIWYc440PYh6DKVStPq+zRbKSNQRHcYOik5vKZy8imfG3eIMlh4GL8fb8PDt6V0IBnn70qX+xXAzZ04rdWzzVCroqUs41KPemWpVWQ9c6qXkFYzEmyV8hWAKbMK5T6BVA9fF2qAlz1TRnjAtRncxzJ4qRGAnenA0st4d+AVaaTTgI4XGAZ7MRh5lsDPm6PkauOroZwMO4S1aT8esWym61r4UrAeMFeVAxO
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 58 35 34 35 50 6e 36 64 73 2b 55 6e 6e 74 45 56 62 5a 53 56 51 50 78 78 43 4a 44 4e 74 45 48 44 48 74 74 4e 70 59 4d 59 36 4b 68 32 5a 32 76 52 57 45 36 34 39 79 35 37 6c 62 50 75 54 79 37 30 52 46 74 76 4e 4e 49 76 34 57 39 70 57 70 71 56 59 35 54 2f 37 34 62 32 51 53 4c 53 30 34 46 54 5a 64 65 55 35 5a 47 39 74 43 4e 58 58 6a 38 75 45 59 61 34 76 45 2f 59 38 38 65 61 62 54 33 54 50 6b 72 79 70 4a 48 58 64 59 32 6b 50 48 41 2b 75 4b 42 74 79 53 4e 48 30 73 66 7a 6d 58 58 4b 55 70 47 6d 4b 30 55 61 32 55 72 62 76 35 4e 6a 53 42 77 57 49 66 64 31 63 31 73 39 58 6c 6d 63 2b 77 4c 69 53 55 69 50 37 76 52 50 70 59 77 62 4a 72 34 79 55 4a 37 45 4b 37 55 2b 46 61 36 42 6d 48 52 45 50 6f 4c 4b 68 6a 63 72 34 37 35 71 56 4e 6a 65 62 64 4e 47 31 50 62 46 63 48 65 Data Ascii: X545Pn6ds+UnntEVbZSVQPxxCJDNtEHDHttNpYMY6Kh2Z2vRWE649y57lbPuTy70RFtvNNIv4W9pWpqVY5T/74b2QSLS04FTZdeU5ZG9tCNXXj8uEYa4vE/Y88eabT3TPkrypJHXdY2kPHA+uKBtySNH0sfzmXXKUpGmK0Ua2Urbv5NjSBwWIfd1c1s9Xlmc+wLiSUiP7vRPpYwbJr4yUJ7EK7U+Fa6BmHREPoLKhjcr475qVNjebdNG1PbFcHe
2024-12-10 13:21:19 UTC	1390	IN	Data Raw: 6b 34 78 44 4a 34 38 62 39 7a 6e 44 56 63 36 6a 61 67 73 72 5a 73 78 65 50 37 2f 74 79 69 46 39 51 6f 43 64 53 4d 33 30 4c 50 48 32 36 77 76 74 70 67 42 74 46 61 7a 2b 71 2f 5a 66 6f 34 41 4d 74 44 30 2f 59 61 46 4d 50 65 79 37 74 2f 7a 61 66 33 39 4a 6c 38 77 51 47 37 79 36 55 32 79 7a 73 41 67 33 72 7a 6f 52 6a 7a 63 64 50 65 56 67 51 72 2b 6f 50 77 32 41 7a 6f 6d 76 6d 66 58 31 49 4e 35 6b 51 66 58 6c 37 4b 37 47 69 77 77 36 6d 41 75 4a 71 76 70 47 56 79 6e 34 6b 41 64 35 31 6e 53 63 62 4d 2f 67 49 62 41 62 47 4d 47 6e 63 50 68 6a 54 36 39 4e 6a 41 70 35 2b 48 77 63 72 56 70 39 42 53 65 77 77 77 62 65 41 47 4a 58 77 35 4e 54 4b 61 48 43 6a 59 4d 37 32 55 32 4d 54 30 62 44 72 5a 69 47 35 4c 5a 50 6b 65 31 77 6e 44 53 44 43 75 7a 72 35 52 56 54 65 65 76 Data Ascii: k4xDJ48b9znDVc6jagsrZsxeP7/tyiF9QoCdSM30LPH26wvtpgBtFaz+q/Zfo4AMtD0/YaFMPey7t/zaf39Jl8wQG7y6U2yzsAg3rzoRjzcdPeVgQr+oPw2AzomvmfX1IN5kQfXl7K7Giww6mAuJqvpGVyn4kAd51nScbM/gIbAbGMGncPhjT69NjAp5+HwcrVp9BSewwwbeAGJXw5NTKaHCjYM72U2MT0bDrZiG5LZPke1wnDSDCuzr5RVTeev

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.10	49867	172.217.19.230	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:19 UTC	652	OUT	GET /simgad/18426777046261427710/14763004658117789537?w=400&h=209&tw=1&q=75 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:20 UTC	824	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 195704 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 06 Dec 2024 13:05:50 GMT Expires: Sat, 06 Dec 2025 13:05:50 GMT Cache-Control: public, max-age=31536000 Age: 346530 Last-Modified: Wed, 30 Oct 2024 16:41:20 GMT Content-Type: image/jpeg Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:20 UTC	566	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 0a 0a 0a 08 0a 0a 0a 08 08 08 08 09 08 09 09 09 09 09 0d 07 07 07 08 11 0e 1f 1e 11 0e 1c 1c 20 24 2e 27 20 22 2c 23 10 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0d 0b 0d 0d 0d 0d 12 32 21 1c 21 32 32 32 32 32 32 32 26 32 32 32 32 32 26 26 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 26 32 32 32 32 32 32 32 32 32 26 26 32 26 26 26 ff c0 00 11 08 04 17 07 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 06 04 05 07 03 08 ff c4 00 62 10 00 01 02 03 04 07 06 05 01 03 07 08 08 02 01 15 01 00 02 03 04 11 05 21 31 f0 06 12 41 51 61 71 81 13 91 a1 b1 c1 e1 07 14 22 d1 f1 32 23 42 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!2222222&22222&&2222222222222222222&222222222&&2&&&b!1AQaq"2#B
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 05 a7 af 44 16 b9 de 82 13 44 14 14 02 7d 38 2a 8b 4f 45 15 51 0a ef e0 a8 a0 e7 aa 07 bf 50 81 53 8e 71 41 79 fd 90 3b fd 90 11 14 a0 b7 f4 41 71 40 cf 25 44 e7 f7 a8 50 5b f9 a2 15 ce e0 82 91 9d e5 15 89 1d 3c aa 88 a7 66 68 8a 0c fd 91 0a 52 88 2d 3c 33 54 54 25 03 82 21 9b d0 06 dd e8 a1 44 5e 28 a9 91 c1 02 99 bd 02 f4 13 97 df 14 14 1f 4e 88 07 3c 10 4e 48 2a 09 5c f1 45 07 dd 04 39 ee 41 2f f3 fc 20 a7 8f d9 04 ef 40 28 25 7d 38 28 28 07 3b d1 52 8a 87 b7 2e 6a 09 ef 44 0b f2 36 20 61 9a d0 20 11 9c 51 50 8e 9e 40 a2 21 fb 74 45 07 3c 7c d0 4a 52 99 bd 02 88 25 50 4e 08 a1 dd b1 07 d6 52 37 65 1a 04 6b ff 00 61 1a 14 51 4b c8 2c 75 7d 16 be 4c fd b3 a8 d9 c5 af ae f3 5e cd a4 da 3a 22 be 6a d1 95 6b 4b 27 a4 04 46 44 87 46 18 6f 2c fd 57 72 07 9a Data Ascii: DD}8OEQPSqAy;Aq@%DP[<fhR-<3TT%!D^(N<NH\E9A/ @(%}8((;R.jD6 a QP@!tE<\|JR%PNR7ekaQK,u}L^:"jkK'FDFo,Wr
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: e2 82 78 7d a8 80 69 4b bf 28 05 15 29 9c 50 0f 87 92 08 7d f8 92 50 38 e4 a0 9e dd e8 07 f2 82 9d a8 31 eb ee 50 14 0c ef 2a 87 3d b9 aa 07 51 b1 01 40 a2 08 8a 95 14 cd 0a 07 04 04 04 13 db 82 06 79 a0 94 ce c4 53 25 00 df b2 ef 44 12 8a 05 51 52 9d 7e c8 15 3d 3c d0 4f 3f 0a 6c 41 3d b6 d1 00 e7 9a 2a 67 92 01 a5 33 7a 08 82 53 38 de a0 20 9f 9d 88 a9 5a ed f7 40 cf 1a a0 87 aa 2a ef c8 28 3d 06 c6 d2 71 1e c5 93 92 8c d7 be 66 c8 b4 a5 63 4a 3e 9a cc 74 17 3c 02 ce e7 38 2f 27 e5 e6 e7 56 7e 2f 6f 5f e1 eb ef 99 fb 8d 8b 4b b4 56 6e d7 81 fc d6 28 96 85 0d ae 9d 98 a9 a0 89 11 ee 1d 90 ae cb 85 7a ae 4f 87 ff 00 a7 9f b6 a7 7f ff 00 77 57 c8 b6 df ac bf fe 47 61 62 ca c9 59 b0 22 3e 23 a0 ce da 12 91 1d 0a 5e 6e 23 83 e6 62 43 b8 bd 80 6c be b7 ee 34 Data Ascii: x}iK()P}P81P=Q@yS%DQR~=<O?lA=g3zS8 Z@*(=qfcJ>t<8/'V~/o_KVn(zOwWGabY">#^n#bCl4
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 80 a8 20 20 1f b7 34 04 04 04 04 0c ee 40 f6 40 40 40 40 cf 24 04 04 04 04 04 04 00 80 80 81 9e 08 26 79 a2 88 2a 20 7e e8 21 45 10 33 cd 41 15 04 42 be 9d c8 08 2a 02 0a 88 04 0a a0 a8 15 41 6e 55 0c f4 41 50 5c f0 44 3c 50 54 41 54 51 9c 50 5c f4 41 41 cf 04 45 cf 45 43 1b d0 5a a0 bb 73 7a 20 88 bd df 74 17 3c d5 45 ce e2 83 2b 90 4a e7 14 46 55 f4 54 29 9c 10 54 45 af 7a 00 28 2d 6f cd 51 19 57 1c 94 00 50 50 88 67 9a a2 83 9c 10 65 ad d7 cd 05 ae ef c5 c8 15 fb 6f 40 14 ce 28 19 e4 37 22 2e ed 95 af 54 19 57 d7 80 40 a1 e6 a8 0f 3f 04 17 c1 05 19 c4 d1 05 f6 ee 44 2b ed c1 06 5d de e8 15 af 40 6e df 9a 20 57 65 e8 2a 01 f0 f7 41 71 dd f7 40 3d 3b f1 41 7d b9 a0 b7 67 60 40 ae de 68 85 6e f5 dc 50 5a 7a f0 a2 06 ec d5 02 b8 e4 a0 67 6e 28 8c ab bb de Data Ascii: 4@@@@@$&y* ~!E3ABAnUAP\D<PTATQP\AAEECZsz t<E+JFUT)TEz(-oQWPPgeo@(7".TW@?D+]@n WeAq@=;A}g`@hnPZzgn(
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 05 7f 1b 54 10 8d bb fc 8a 0b e9 5e a8 a9 9e 48 07 1e fe 68 07 cf bd 06 39 dd b5 05 08 21 cf 34 50 8c ed 28 21 cf 34 10 8e f4 10 8e 1b 10 02 08 73 bd 00 0c 51 5c 79 99 26 4c 00 c7 10 0d 46 ab b0 2d 24 ad 7c 93 fa da dd c1 bb 9d 49 fb 6c d0 b4 76 d5 b2 9d 0a cf 7b e0 4c cb cf 4b 98 f2 b1 06 b3 84 38 6e 17 3e a2 f0 2f 35 5e 37 3e b8 ef f6 af 77 82 6a 7a 4b 02 d4 16 24 c4 28 f0 dc e8 f3 2d 89 04 b1 d0 23 35 d2 82 10 14 88 1d b4 d6 b8 2d d8 e0 e4 df 5b 93 a6 9e 6f 91 c5 8e f3 6f 6f 53 d3 78 12 56 c4 a5 98 5e 1a df e5 16 bb e4 66 4b 43 9d 29 31 ab 52 ca f4 37 70 2b 5e b7 ac 6b 3a 84 cc d6 75 2b c4 66 25 9f 02 2c 68 11 07 ed 65 e2 45 83 16 95 03 b4 63 a8 ef 25 ec 63 5f 6c cd 4f cb c5 e4 c7 d3 57 35 f1 23 6d de ab 26 0b cf f0 82 51 02 fc e0 81 ed cc 94 0c d7 a2 Data Ascii: T^Hh9!4P(!4sQ\y&LF-$\|Ilv{LK8n>/5^7>wjzK$(-#5-[oooSxV^fKC)1R7p+^k:u+f%,heEc%c_lOW5#m&Q
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: d1 97 11 ed fb 5a 19 35 64 7b 3a 45 d0 c9 ab c7 64 1b 79 0b c3 f9 3a 9f fa 7a af 73 86 59 34 f3 db 66 04 84 9c 1f e4 c8 92 f2 70 e6 1f 0d f1 a5 67 7b 4f db ea 0b 9a 5e ea e2 68 6e a2 ea cf ca e5 dd fb 67 d4 6b ff 00 a4 e0 cc eb 5e eb 2d 07 d1 18 91 e7 1b 16 71 af 83 06 55 f7 0a 54 4d 45 07 61 fe 11 bd 6f f9 5f 27 3f c7 24 f7 5c 7f 1b e3 d9 c9 75 7d 47 79 a7 36 83 1a e9 c9 86 bb f9 b9 63 6c f9 76 43 76 a3 63 34 32 94 14 d9 f5 38 ff 00 e5 5c 3c 18 fe 4e 4c cf d3 bb 9b 7f c7 c7 ab 7f 2f 2c ee f2 5e eb c2 4c f4 40 cf 25 04 af df 70 45 0a 08 6e c1 04 aa 28 7e e8 22 01 41 33 8a 05 06 17 a8 25 10 4a 67 60 45 33 c5 03 a7 76 28 31 a6 70 45 10 33 bd 04 28 19 e2 80 8a 20 88 19 de a0 94 54 0a 80 73 c5 03 3d 10 44 04 53 dd 01 04 41 50 44 02 82 14 15 04 45 10 10 10 54 Data Ascii: Z5d{:Edy:zsY4fpg{O^hngk^-qUTMEao_'?$\u}Gy6clvCvc428\<NL/,^L@%pEn(~"A3%Jg`E3v(1pE3( Ts=DSAPDET
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 14 01 5d 88 28 37 22 2e da 64 20 6f e9 cd 00 1c ec 41 90 c2 bc 7b 90 06 77 20 67 aa 06 f4 14 1f 4f ca 05 76 6d bd 11 97 aa 08 0a 0b 5a a0 1e ff 00 52 82 fb 71 aa 0a 49 bf 37 20 0c ef 55 43 9c 30 46 2a 33 c2 f4 54 1d 3c 82 0b bf 25 11 30 bf 24 20 c8 67 82 08 76 a0 04 0a 77 f9 a0 bc 50 50 71 cd c8 20 ce f4 16 be bf 84 01 9e 28 2d 73 8d c8 86 da 20 a3 86 3e 57 a0 0c 38 df ca 88 19 e4 10 29 79 e9 cd 00 1c f5 41 46 07 0f 40 81 cd 04 e8 80 10 4f 1f 00 80 7c d1 54 fd ae e2 82 7b 74 40 ad 73 72 06 7d 90 33 bf a2 05 78 6c 40 cf 34 03 f6 40 41 36 ec db c1 03 3b 94 13 3c d5 50 28 07 1c 3d 90 41 9e 08 1e 7e 68 27 a7 9d 10 2b 9c 28 8a c7 6e 49 40 28 20 cf 24 12 b9 e0 81 9e bb 51 4d a7 f0 82 0a 8a ef f2 44 64 c7 96 b9 ae 69 a3 9a 43 9a 45 c4 38 1c 56 3a 9d cb 19 67 5f Data Ascii: ](7".d oA{w gOvmZRqI7 UC0F*3T<%0$ gvwPPq (-s >W8)yAF@O\|T{t@sr}3xl@4@A6;<P(=A~h'+(nI@( $QMDdiCE8V:g_
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: e2 6b bc ed e3 76 84 84 69 48 d1 65 e6 61 ba 0c 78 2e 2d 7b 5d 73 81 aa f4 31 bf b4 9a 8f 2f 93 8f e9 ab 9a e1 9c 9d 85 6c 69 4c ef bd 04 d9 4b f6 ec da 80 3b aa 8a 1e a8 21 e6 81 9d 88 27 ba 06 08 26 dc 90 82 d2 e2 82 67 a2 01 fb 73 c1 04 37 8c 84 14 7a 77 a0 9b 3c d4 0c ed 08 17 f5 bd 02 be 88 21 fc a0 1c e2 8a 87 ed de 82 a0 94 41 89 d9 9b d0 5b f3 b2 88 a6 dc dc 82 1c f1 28 04 67 81 41 2f 50 07 dd 15 0e 42 0c 50 65 9e 88 21 c3 d7 d1 04 aa 28 77 5f f6 28 20 1d d8 20 e5 59 d2 11 27 26 65 e5 a1 7f 49 1e 23 61 83 88 68 fe 2e 8b 1d ea 66 5d 56 58 cd d5 99 8f 6c 16 64 a6 8e c0 31 25 a1 01 68 3a 11 6b 22 3a 8f 74 b4 2a 51 f1 79 92 57 89 cf cd ae ed be de e7 c7 e1 97 ac cf 4e ae ca b7 e4 0c a4 f4 68 a6 66 66 6a 2c 58 90 1b 19 ac d7 11 22 ea d4 8a e0 05 fc ca Data Ascii: kviHeax.-{]s1/liLK;!'&gs7zw<!A[(gA/PBPe!(w_( Y'&eI#ah.f]VXld1%h:k":t*QyWNhffj,X"
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 20 88 22 00 41 3b d4 50 e7 9a 09 dc 81 7a 06 78 a0 c4 a2 88 05 00 8c d5 04 40 3f 6e bc 11 44 12 99 de 82 20 10 81 45 01 04 45 10 0a 06 79 20 88 08 19 e8 82 20 a8 08 22 05 11 55 04 41 50 44 04 04 02 33 8a 02 02 0a 88 88 a2 02 02 02 06 79 20 20 05 01 50 28 14 ce f4 04 04 0c f3 40 28 19 e4 80 10 61 ee a3 20 22 05 01 01 05 a2 02 a8 7b a0 20 a8 15 41 73 cd 01 10 08 08 32 a2 02 20 33 cd 52 aa 02 22 ed 41 41 d8 aa 28 3c fe e8 14 df c5 05 f2 44 5c f3 41 51 03 9e 4a 8a 10 02 23 21 c1 02 b8 66 88 8a 80 aa 32 27 af 9a 0a d2 82 d7 3b d1 15 03 bb 3b 10 55 43 0c ed 44 65 f7 ea 81 c8 22 2d c8 28 37 20 7a e6 88 2f 9d fc 55 14 5d f7 44 41 f7 41 95 33 8a 0b 9e 08 03 3c d0 5c ef bd 03 8a 22 9c 77 a0 c8 1b e8 80 0f 3d 9c 90 00 fc 6f b9 51 73 c9 00 78 28 2e 78 a0 67 8a a0 10 Data Ascii: "A;Pzx@?nD EEy "UAPD3y P(@(a "{ As2 3R"AA(<D\AQJ#!f2';;UCDe"-(7 z/U]DAA3<\"w=oQsx(.xg
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 42 bb f6 78 f1 44 51 9d 80 84 14 74 a7 b2 00 ee 41 7c 7c 10 08 e6 80 33 76 08 32 a0 a1 aa 09 5e ef 14 42 99 d8 82 81 c6 b8 f5 41 31 41 6b c9 02 95 45 08 f5 ea 82 53 d3 a1 40 28 2e 69 b5 04 cf 8a 0b e7 dd 54 03 b6 a6 ef 24 10 11 54 0a 50 d2 f1 e4 50 2b de 81 b6 b8 fa 20 03 c3 d1 04 e9 8f 44 0e bb fb 90 29 cf ef c1 03 af e1 03 8f 2e a1 04 ce e2 a2 83 0e 37 a0 87 c4 f7 20 86 eb 8f e4 20 7b f2 28 a7 76 c4 13 3c 50 36 ed 3e 41 00 b5 04 40 a6 35 41 39 60 3b d0 62 42 2a 81 87 e0 72 50 4c 72 2f e2 aa 39 12 53 d1 a5 63 42 98 97 79 83 1e 0b b5 a1 bc 56 a0 ac 39 31 37 2c ad bc 5c 97 8f 53 51 ea b3 76 18 b7 ac 49 4b 6a 5c 09 6b 76 4c 46 9a 87 12 19 3f 54 cc 37 d6 23 39 1a 1a 74 5e 5d e3 fa dd 66 bd 8e 3e 5f bc cd 79 63 9e 27 23 4d 3e 30 06 04 f4 56 c6 8f 31 11 cd 6b Data Ascii: BxDQtA\|\|3v2^BA1AkES@(.iT$TPP+ D).7 {(v<P6>A@5A9`;bB*rPLr/9ScByV917,\SQvIKj\kvLF?T7#9t^]f>_yc'#M>0V1k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.10	49866	172.217.19.230	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:19 UTC	652	OUT	GET /simgad/17147156143050066190/14763004658117789537?w=100&h=100&tw=1&q=75 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:20 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 6616 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 05 Dec 2024 14:51:32 GMT Expires: Fri, 05 Dec 2025 14:51:32 GMT Cache-Control: public, max-age=31536000 Age: 426588 Last-Modified: Tue, 01 Oct 2024 15:41:49 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:20 UTC	569	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 01 b6 08 06 00 00 00 13 09 a3 70 00 00 19 9f 49 44 41 54 78 9c ed dd ef 71 1b 47 9a 07 e0 b7 af f6 bb 94 81 b8 11 48 17 81 b8 11 98 17 81 e1 08 ac 8d c0 70 04 96 eb 02 30 1c c0 d5 d2 11 18 8e e0 a4 08 96 8a e0 c4 08 fa 3e 4c c3 86 20 90 68 90 00 66 f0 e2 79 aa 50 12 c9 01 a6 09 0e e6 37 fd 77 4a ad 35 00 20 8b ff 18 bb 00 00 70 48 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 Data Ascii: PNGIHDRpIDATxqGHp0>L hfyP7wJ5 pHT6Rl"HE` @T6Rl"HE` @T6Rl"HE` @*T6Rl"HE
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 f2 b7 b1 0b 30 05 a5 94 3a 76 19 d6 fc 58 6b 9d 8f 5d 08 80 73 a5 c6 06 40 2a 82 0d 80 54 34 45 0e fe e8 d8 e6 2a 22 5e 1d 60 5f 1f 23 e2 f3 23 Data Ascii: 6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl0:vXk]s@T4E"^`_##
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 8e 1c ed c3 57 6b fd dc 4e 4e 3f 77 3e e5 45 0c 83 4b a6 5e 13 1e d3 fa 68 bc bb b1 0a 71 2a ad d6 3a 8b 21 e0 f6 b9 18 f9 a1 94 72 db 2e 56 9f e3 65 0c cd 90 ef c7 ae c1 3f 97 60 bb 5c bd cd 90 2b e7 d0 1c 39 ba 5a eb bb 18 9a 26 7b 2d 0f 39 9c fb a1 7d 1c f9 f5 8f 62 a3 76 b1 7c 60 b3 5e 77 cf 7c fe c9 b4 80 bb 8e a1 89 b2 b7 15 e2 9b 18 8e a5 47 c3 ed a1 cf 70 1d 86 fd bf 8b 21 d8 6e b7 1c 93 9b 5f 4f 9a 60 bb 40 ad 09 ec d5 13 9e 3a 3b 6c 49 0e 6e 12 cd 25 ad 69 72 d7 50 fc 95 17 31 34 ff b0 dd 77 31 34 8d 2d 9e f9 3a 77 cf 2e c9 89 b5 5a d3 55 f4 d7 de 5e c7 e3 e1 f6 31 76 f7 93 2d 62 38 26 6f 56 8b a1 b7 ef 5f c7 44 3e 5f 3d 04 db 65 9a 6d 7c dd fb c1 99 7a 73 e4 64 d6 72 ac b5 ce a3 bf cf ed ad c9 dc db d5 5a 17 b5 d6 9b 7a a1 2b b9 b4 26 ee eb e8 Data Ascii: WkNN?w>EK^hq*:!r.Ve?`\+9Z&{-9}bv\|`^w\|Gp!n_O`@:;lIn%irP14w14-:w.ZU^1v-b8&oV_D>_=em\|zsdrZz+&
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: 8b 89 9b 18 46 84 ee 6a a6 8d 18 e6 04 ce 26 da a7 f6 e3 89 f6 73 dd fe 7d 19 fa d7 8e a2 75 1d 8c 5d 8c 51 09 b6 04 5a f3 df fa c0 8d 9e 5b d3 3c c5 22 76 07 db eb 52 ca 9b 89 9e bc 9f a5 bd cf 6f 62 38 39 df 44 ff 89 f9 3e 86 75 3a e7 c7 29 d9 f3 8d 55 b6 d6 74 fb d3 18 fb 26 2f c1 96 c3 bb f8 b2 f9 eb 28 35 a6 3d 06 91 cc 62 a2 f3 da da 00 9b c7 bc 89 2f 3b d6 af d6 1e 3d b5 b2 4d bf c6 30 f2 d1 fd d8 b6 a8 b5 be 6f e1 f6 94 f7 16 b6 12 6c 39 cc d6 fe bf cf ad 69 9e e2 7d ec be c2 9e c5 44 83 2d 22 7e 3f c1 3e 3e c5 50 bb dd e7 6e 0a 97 ec 2e 04 1b 07 64 f0 c8 99 db 32 21 fb d8 27 d3 9e e1 fc 2f 2e f0 be 5a 9f 22 e2 e7 88 f8 cf 5a eb 55 ad 75 2e d4 98 b0 bb b1 0b 70 4c 82 ed fc 6d d6 8c 16 c7 dc 59 5b 73 b2 e7 f6 2a 97 32 59 fb 9f 11 f1 f7 16 66 e9 27 Data Ascii: Fj&s}u]QZ[<"vRob89D>u:)Ut&/(5=b/;=M0ol9i}D-"~?>>Pn.d2!'/.Z"ZUu.pLmY[s*2Yf'
2024-12-10 13:21:20 UTC	1390	IN	Data Raw: cf b6 13 fd f2 d4 85 78 ae 36 df ae e7 e4 73 73 e2 26 b8 ab 13 ee 2b 22 f6 1e 4c f2 ed 48 e1 f6 7a ca 83 79 36 42 2d e2 0c 3f 13 fb 2a a5 bc 6c c7 c2 63 b5 d3 fb 88 f8 2f a1 f6 25 c1 36 21 ed ca 6c f3 aa ec be 9d 18 cf 51 4f ad ed 45 9c b6 d6 76 75 c2 7d fd 69 cf c1 24 63 85 db 24 47 d2 b5 01 3f cb f8 72 fa cb f2 08 bb ba 3e c2 6b 3e 49 1b f9 f8 21 1e 5f 03 f2 63 44 5c 9f c1 a2 0d 27 27 d8 a6 65 be e5 7b e7 1a 6a 11 fd 27 9f 77 27 ac 2d 5c 9d 68 3f 5f 69 83 49 7a 56 26 89 18 27 dc 66 27 de df a3 5a 8d 65 1e c3 67 60 73 4e e7 31 4e e6 a3 37 45 96 52 ae 4a 29 cb 88 f8 3d be 5c 75 68 d3 cf 31 84 da 39 9f 1f 8e 46 b0 3d cf 55 e7 76 cb 5d 1b b4 2b b4 c7 0e e4 73 d4 7b f2 79 11 bb 6f bb 71 28 d7 27 da cf 43 6e a2 6f a4 64 44 0b b7 13 86 fe db 76 1c 8e aa 8d 7a Data Ascii: x6ss&+"LHzy6B-?*lc/%6!lQOEvu}i$c$G?r>k>I!_cD\''e{j'w'-\h?_iIzV&'f'Zeg`sN1N7ERJ)=\uh19F=Uv]+s{yoq('CnodDvz
2024-12-10 13:21:20 UTC	487	IN	Data Raw: 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 Data Ascii: @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.10	49875	142.250.181.14	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:20 UTC	661	OUT	GET /i/ca-pub-5561763581314444?href=https%3A%2F%2Ft.ly&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:21 UTC	1938	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 10 Dec 2024 13:21:20 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-ScyKicGam-A_vTYDUrAQlg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjytDikmJw1pBikPj6kkkNiJ3SZ7AGAHHrzXOsk4HYaO15VgcgTvp3nrUAiA0VLrHaA7Fj0SVWTyBW7bnEagzE99ddYn0OxDPOX2ZdAMRFEldYG4CY4esVVg4gFuLhuNDwcBebwIpZr78wKWkk5RfGJ-fnlRRlJpWW5BelJaelFqcWlaUWxRsZGJkYGhlY6BkYxxcYAAD5fkE7" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 37 30 37 33 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 7073if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 68 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 Data Ascii: function(){return fa(ba(this))}})}return a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ha=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.prototype=a;return new b};if(typeof Object.se
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 68 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e Data Ascii: instanceof e)this.ha(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 77 28 44 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 49 29 7b 7a 5b 44 5d 3d 49 3b 41 2d 2d 3b 41 3d 3d 30 26 26 6c 28 7a 29 7d 7d 76 61 72 20 7a 3d 5b 5d 2c 41 3d 30 3b 64 6f 20 7a 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 41 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6d 62 28 77 28 7a 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 Data Ascii: ),k=h.next();return k.done?c([]):new e(function(l,n){function w(D){return function(I){z[D]=I;A--;A==0&&l(z)}}var z=[],A=0;do z.push(void 0),A++,c(k.value).mb(w(z.length-1),n),k=h.next();while(!k.done)})};return e});var sa=function(a,b,c){if(a==null)throw
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 68 7d 29 3b 0a 70 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 71 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d Data Ascii: h});p("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(_.q([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 68 5b 31 5d 3b 72 65 74 75 72 6e 20 66 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 29 7b 66 6f 72 28 3b 6c 2e 68 65 61 64 21 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 71 61 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 0a 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 70 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: h[1];return fa(function(){if(l){for(;l.head!=h[1];)l=l.qa;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});p("Set",function(a){if(function(
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 21 3d 3d 2d 31 7d 7d 29 3b 0a 70 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c Data Ascii: !==-1}});p("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var e=[],f=typeof Symbol!="undefined"&&Symbol.iterator&&b[Symbol.iterator];if(typeof f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 3c 30 26 26 28 64 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 65 2b 64 29 29 3b 66 6f 72 28 63 3d 4e 75 6d 62 65 72 28 63 7c 7c 30 29 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 62 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 3b 76 61 72 20 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 75 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 75 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 75 61 29 3b 70 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f Data Ascii: <0&&(d=Math.max(0,e+d));for(c=Number(c\|\|0);c<d;c++)this[c]=b;return this}});var ua=function(a){return a?a:Array.prototype.fill};p("Int8Array.prototype.fill",ua);p("Uint8Array.prototype.fill",ua);p("Uint8ClampedArray.prototype.fill",ua);p("Int16Array.proto
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 26 26 5f 2e 44 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 0a 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 61 28 29 3f 45 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 74 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 74 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 48 61 28 29 3f 30 3a 5f 2e 74 28 22 45 64 67 65 22 29 29 7c 7c 5f 2e 74 28 22 53 69 6c 6b 22 29 7d 3b 5f 2e 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4a 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 4d 61 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 5f 2e 41 61 28 61 29 7d 3b 5f 2e 4f Data Ascii: &&_.Da.brands.length>0:!1};Ia=function(){return Ha()?Ea("Chromium"):(_.t("Chrome")\|\|_.t("CriOS"))&&!(Ha()?0:_.t("Edge"))\|\|_.t("Silk")};_.Ka=function(a){return Ja&&a!=null&&a instanceof Uint8Array};Na=function(){var a=Error();Ma(a,"incident");_.Aa(a)};_.O
2024-12-10 13:21:21 UTC	1938	IN	Data Raw: 5b 5d 2c 7b 7d 29 3b 76 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 63 61 6c 6c 28 5b 5d 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 7d 76 62 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 26 26 28 61 5b 53 79 6d 62 6f 6c 2e 69 73 43 6f 6e 63 61 74 53 70 72 65 61 64 61 62 6c 65 5d 3d 21 30 29 7d 3b 5f 2e 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 79 62 3d 62 3b 61 3d 6e 65 77 20 61 28 62 29 3b 79 62 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 64 21 3d 6e 75 6c 6c 3f 64 3a 30 3b 61 3d 3d 6e 75 6c 6c 26 26 28 61 3d Data Ascii: [],{});vb=Array.prototype.concat.call([],b).length===1}vb&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.zb=function(a,b){yb=b;a=new a(b);yb=void 0;return a};_.u=function(a,b,c){var d=d!=null?d:0;a==null&&(a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.10	49884	104.20.6.133	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:20 UTC	1314	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/8efd891efeaf15d7 HTTP/1.1 Host: t.ly Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR5UHFzd3UzK0grVS9CT1pvbWp2RlE9PSIsInZhbHVlIjoiQnY4b1NRZmEybVVMU0FzcHF0YmV1RTdrQXFUekFjYjBCNmRMYzVxVUNYc21kblJNUVNFR1BXVG9aUTFGVUVLL0p6TU52dENRc3hiQ0xKMW5PdG9JajZBQTBnTitaWUdycG1DYWpUOEFqcDhmYnhwQ2JLUFJ0OGtTS1gvWnZyMmsiLCJtYWMiOiI1YWMxOTJjNzhhZjVhYjcxZDJiYjI0N2FhOTVlZWEzNmVjZjQ2YjdmOWJiYzE5YTUxZmEwYjNkNDgyMzVlMzMxIiwidGFnIjoiIn0%3D; tly_session=eyJpdiI6InUvRmZIS3VReGRyUy9tRHJlcFFxZ0E9PSIsInZhbHVlIjoiU0JaMUdiTWM0VytsaytoRlpzUjl2ZTNQVUxrV1hKYVBrWHgyVTlqVzZsRXcwakZ6akxNS3JuM1FPQXZyajR2dVNZWnhEWDNFRXpsWFNNem9QZW1Hc0JqSCtJREhhZGkrTXJ2M1VoSnQvb0xZU2gzY1BUM1lZYmNSb3ZZL1FQY28iLCJtYWMiOiI0ZjM5M2Y1MTQ5NDc3M2IxYTk4YzI4MGEzMjU2ZGI1YzQxZWVmN2RlOTFmYWViNDIzNDU3MmM1Yzg4YTYxN2ZiIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1916227148.1733836867; userTimezone=America/New_York; _gid=GA1.2.1865077283.1733836870; _gat_gtag_UA_89207177_8=1; _ga_W1D48QS4F7=GS1.1.1733836870.1.0.1733836870.0.0.0; _ga=GA1.1.1931574979.1733836870
2024-12-10 13:21:21 UTC	309	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 10 Dec 2024 13:21:21 GMT Content-Length: 0 Connection: close allow: POST Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8efd899aff9a42c9-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.10	49887	172.217.21.36	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	771	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	1117	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Tue, 10 Dec 2024 13:21:22 GMT Date: Tue, 10 Dec 2024 13:21:22 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-hZPhMbe5nNYmMW62XNrw8w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:22 UTC	273	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 5a 50 68 4d 62 65 35 6e 4e 59 6d 4d 57 36 32 58 4e 72 77 38 77 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="hZPhMbe5nNYmMW62XNrw8w">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-12-10 13:21:22 UTC	563	IN	Data Raw: 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 27 7d 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 69 66 28 61 2e 73 6f 75 72 63 65 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 Data Ascii: glesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("r
2024-12-10 13:21:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.10	49890	142.250.181.1	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	366	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:23 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Tue, 10 Dec 2024 13:21:22 GMT Expires: Tue, 10 Dec 2024 13:21:22 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:23 UTC	725	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,va
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: {var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof Object.create=="function"
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e 67 2c 65 29 2c 48 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 66 29 3b 72 Data Ascii: turn H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.g,e),H(a)}a.g.h=null;d.call(a.g,f);r
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 65 2e 6c 65 6e 67 Data Ascii: .prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.length;){var e=this.g;this.g=[];for(var h=0;h<e.leng
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 65 29 29 3b 65 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 65 2e Data Ascii: d")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.initCustomEvent("unhandledrejection",!1,!0,e));e.promise=this;e.
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 67 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b Data Ascii: ),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var g=[],f=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&b[
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 Data Ascii: ww.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.ownerDocument&&a.ownerDocument.defaultView\|\|window).document).querySelector)==null?void 0
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 68 28 62 2e 67 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 46 28 62 2c 43 61 28 61 29 2c 32 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 46 28 62 2c 44 61 28 61 29 2c 33 29 3b 63 61 73 65 20 33 3a 69 66 28 21 28 61 2e 6f 3e 30 29 29 7b 62 2e 67 3d 34 3b 62 72 65 61 6b 7d 72 65 74 Data Ascii: is.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switch(b.g){case 1:return F(b,Ca(a),2);case 2:return F(b,Da(a),3);case 3:if(!(a.o>0)){b.g=4;break}ret
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 3d 3d 76 6f 69 64 20 30 3f 31 33 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 6a 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 53 2e 63 61 Data Ascii: }function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}function Ka(){return window.GoogleGcLKhOms===void 0?13:1};function S(a,b){this.h=a;this.j=b}function La(a,b){S.ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.10	49900	50.31.142.255	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	780	OUT	GET /usersync/googleadx/?google_gid=CAESEHe7ZCKibi5CAEr3oKOy5YA&google_cver=1&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	716	IN	HTTP/1.1 302 Found content-type: text/html; charset=utf-8 content-length: 229 cache-control: no-cache, no-store, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT location: /usersync/googleadx/?google_cver=1&google_gid=CAESEHe7ZCKibi5CAEr3oKOy5YA&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&s=2 p3p: CP="We do not support P3P header." pragma: no-cache set-cookie: zuid=78_l5Zw6aUVtSW2Ox4O7; Path=/; Domain=zemanta.com; Expires=Wed, 10 Dec 2025 13:21:22 GMT; Max-Age=31536000; Secure; SameSite=None date: Tue, 10 Dec 2024 13:21:22 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload connection: close
2024-12-10 13:21:22 UTC	229	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 6f 6f 67 6c 65 61 64 78 2f 3f 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 48 65 37 5a 43 4b 69 62 69 35 43 41 45 72 33 6f 4b 4f 79 35 59 41 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 52 34 72 4d 5f 6a 34 32 51 53 52 2d 57 77 50 78 78 39 4b 38 78 63 48 55 63 45 63 32 79 5f 58 4c 34 6a 5a 65 38 41 39 4c 45 58 71 6c 66 42 50 38 39 74 7a 72 63 4c 54 6b 56 33 72 48 4d 37 6f 5a 59 4d 7a 4e 69 66 44 62 57 4e 64 4f 33 31 4c 46 35 77 35 39 53 39 51 36 50 38 31 38 50 43 5f 43 6b 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/googleadx/?google_cver=1&google_gid=CAESEHe7ZCKibi5CAEr3oKOy5YA&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.10	49901	35.208.249.213	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	772	OUT	GET /ju/cs/google?google_gid=CAESECFcl9Vev1dErg-ZjBNH1c8&google_cver=1&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW HTTP/1.1 Host: gtrace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	700	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW&google_hm=22210ca7d02b196e2njvxb00m4ihpoje Set-Cookie: __mguid_=22210ca7d02b196e2njvxb00m4ihpoje; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Tue, 10 Dec 2024 13:21:22 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:22 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.10	49886	172.217.19.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	706	OUT	GET /sodar/sodar2/232/runner.html HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	678	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 13020 Date: Tue, 10 Dec 2024 13:21:22 GMT Expires: Tue, 10 Dec 2024 14:11:22 GMT Cache-Control: public, max-age=3000 Last-Modified: Mon, 23 Sep 2024 18:12:21 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:22 UTC	712	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 70 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d Data Ascii: <!DOCTYPE html><meta charset=utf-8><script>(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 65 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 65 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 66 3d 65 5b 30 5d 2c 68 3b 21 61 26 26 66 20 69 6e 20 76 3f 68 3d 76 3a 68 3d 72 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 7b 76 61 72 20 64 3d 65 5b 66 5d 3b 69 66 28 21 28 64 20 69 6e 20 68 29 29 62 72 65 61 6b 20 61 3b 68 3d 68 5b 64 5d 7d 65 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 75 26 26 63 3d 3d 3d 22 65 73 36 22 3f 68 5b 65 5d 3a 6e 75 6c 6c Data Ascii: ;if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 76 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6d 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f Data Ascii: ject.freeze(a),Object.freeze(b));return a}function A(a){var b=typeof v.Symbol!="undefined"&&x(v.Symbol,"iterator")&&a[x(v.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:m(a)};throw Error(String(a)+" is not an iterable o
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 2e 68 3d 6e 75 6c 6c 2c 48 28 61 2e 67 2c 64 29 2c 4b 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 65 2e 63 61 6c 6c 28 61 2e 67 2c 68 29 3b 72 65 74 75 72 6e 20 4b 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 66 6f 72 28 3b 61 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 68 28 61 2e 67 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 67 2e 6a 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 6c 3d 76 6f 69 64 20 30 2c 48 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 6a 3d 21 31 3b 69 66 28 61 2e 67 2e 69 29 7b 62 3d 61 2e 67 2e 69 3b 61 2e 67 2e 69 3d 6e 75 6c 6c 3b 69 66 28 62 2e 4d 29 74 68 72 6f 77 20 62 2e 44 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 Data Ascii: .h=null,H(a.g,d),K(a)}a.g.h=null;e.call(a.g,h);return K(a)}function K(a){for(;a.g.g;)try{var b=a.h(a.g);if(b)return a.g.j=!1,{value:b.value,done:!1}}catch(c){a.g.l=void 0,H(a.g,c)}a.g.j=!1;if(a.g.i){b=a.g.i;a.g.i=null;if(b.M)throw b.D;return{value:b.retur
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 74 68 3b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 7b 76 61 72 20 6b 3d 0a 64 5b 67 5d 3b 64 5b 67 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6a 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 64 3b 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 67 2c 6e 29 29 Data Ascii: th;){var d=this.g;this.g=[];for(var g=0;g<d.length;++g){var k=d[g];d[g]=null;try{k()}catch(l){this.j(l)}}}this.g=null};c.prototype.j=function(d){this.i(function(){throw d;})};b.prototype.j=function(){function d(l){return function(n){k\|\|(k=!0,l.call(g,n))
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 64 29 29 3b 64 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 64 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 64 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 67 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 68 2e 68 28 74 68 69 73 2e 67 5b 64 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 68 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 0a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 6a 28 29 3b 64 2e 42 28 67 2e 72 65 73 6f 6c 76 65 2c 67 2e 72 65 6a 65 63 74 29 Data Ascii: "unhandledrejection",!1,!0,d));d.promise=this;d.reason=this.i;return k(d)};b.prototype.R=function(){if(this.g!=null){for(var d=0;d<this.g.length;++d)h.h(this.g[d]);this.g=null}};var h=new c;b.prototype.I=function(d){var g=this.j();d.B(g.resolve,g.reject)
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 6c 61 28 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 21 50 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 50 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 74 68 69 73 2e 67 3d 61 7d 52 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 29 7b 51 3d 3d 3d 76 6f 69 Data Ascii: la(){var a=null;if(!P)return a;try{var b=function(c){return c};a=P.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};function R(a){this.g=a}R.prototype.toString=function(){return this.g+""};function S(a){Q===voi
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 20 76 6f 69 64 20 62 28 76 6f 69 64 20 30 29 7d 2c 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 61 3d 61 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 61 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 76 61 72 20 72 61 3d 7a 28 5b 22 68 74 74 70 73 3a 2f 2f 65 70 31 2e 61 64 74 72 61 66 66 69 63 71 75 61 6c 69 74 79 2e 67 6f 6f 67 6c 65 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 2c 73 61 3d 7a 28 5b 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 2c 62 2c 63 2c 65 29 7b 76 61 72 20 66 3d 76 6f 69 64 20 30 3b 66 3d 66 3d 3d 3d 76 6f 69 64 20 Data Ascii: void b(void 0)},a)})}function qa(a){a=a===void 0?document:a;return a.createElement("img")};var ra=z(["https://ep1.adtrafficquality.google/bg/",".js"]),sa=z(["https://pagead2.googlesyndication.com/bg/",".js"]);function ta(a,b,c,e){var f=void 0;f=f===void
2024-12-10 13:21:22 UTC	1390	IN	Data Raw: 2c 62 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 22 29 29 3a 28 62 3d 42 61 28 62 2e 64 61 74 61 29 29 26 26 45 61 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 2c 66 2c 68 3b 72 65 74 75 72 6e 20 4c 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 73 77 69 74 63 68 28 64 2e 67 29 7b 63 61 73 65 20 31 3a 63 3d 62 2e 64 61 74 61 3b 65 3d 62 2e 70 6f 72 74 73 5b 30 5d 3b 69 66 28 63 5b 30 5d 3d 3d 3d 31 26 26 74 79 70 65 6f 66 20 63 5b 31 5d 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 63 5b 32 5d 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 63 5b 33 5d 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 74 79 70 65 6f 66 20 63 5b 34 5d 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 72 65 74 75 72 6e 20 49 28 64 Data Ascii: ,b.postMessage("")):(b=Ba(b.data))&&Ea(a,b)}function Da(a,b){var c,e,f,h;return L(function(d){switch(d.g){case 1:c=b.data;e=b.ports[0];if(c[0]===1&&typeof c[1]==="string"&&typeof c[2]==="string"&&typeof c[3]==="number"&&typeof c[4]==="boolean")return I(d
2024-12-10 13:21:22 UTC	1188	IN	Data Raw: 26 76 3d 32 33 31 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 69 64 3d 73 6f 64 61 72 32 26 76 3d 32 33 31 22 29 3b 57 28 65 2c 22 74 22 2c 61 29 3b 62 26 26 28 57 28 65 2c 22 6c 69 22 2c 62 2e 50 29 2c 57 28 65 2c 62 2e 63 6f 6e 74 65 78 74 3d 3d 3d 22 63 72 22 3f 22 62 67 61 69 22 3a 22 6a 6b 22 2c 62 2e 4f 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 76 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 46 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 29 7b 62 3d 49 61 28 31 2c 62 29 3b 57 Data Ascii: &v=231":"https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231");W(e,"t",a);b&&(W(e,"li",b.P),W(e,b.context==="cr"?"bgai":"jk",b.O));return e}function Ja(a){return new v.Promise(function(b){Fa(a,function(){b()})})}function Ka(a,b){b=Ia(1,b);W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.10	49898	188.166.17.21	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	782	OUT	GET /adxcookie?id=&google_gid=CAESELqoJB2ILVOLH5_tSMp0hks&google_cver=1&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	516	IN	HTTP/1.1 302 302 Date: Tue, 10 Dec 2024 13:21:22 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=3e7b9369-0658-4550-b77a-a6f2d90c239b.503050882; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://cm.g.doubleclick.net/pixel?google_nid=bt&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.10	49899	35.214.136.108	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	773	OUT	GET /sync?ssp=google&google_gid=CAESEImQHyRRkUYMNoxTatB-flo&google_cver=1&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	963	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Tue, 10 Dec 2024 13:21:22 GMT Location: https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEImQHyRRkUYMNoxTatB-flo&google_cver=1&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z Set-Cookie: tuuid=fe599ace-232e-44cc-ad08-afae4110058f; path=/; expires=Wed, 10-Dec-2025 13:21:22 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1733836882; path=/; expires=Wed, 10-Dec-2025 13:21:22 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1733836882; path=/; expires=Wed, 10-Dec-2025 13:21:22 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1733836882; path=/; expires=Wed, 10-Dec-2025 13:21:22 GMT; domain=.bidswitch.net; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.10	49891	172.217.21.36	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	792	OUT	GET /ads/measurement/l?ebcid=ALh7CaQsNCj0c-YhhHZ7ee0p3ZFeY_Axepm1Sxs2-aQFwmruXTtoCsHJNlSuRIe7dGNp_cWFRy-9xdFZhrM3znR9r7sCNnYQAQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:22 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.10	49896	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	405	OUT	GET /simgad/17147156143050066190/14763004658117789537?w=100&h=100&tw=1&q=75 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:23 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 6616 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 05 Dec 2024 14:51:32 GMT Expires: Fri, 05 Dec 2025 14:51:32 GMT Cache-Control: public, max-age=31536000 Age: 426590 Last-Modified: Tue, 01 Oct 2024 15:41:49 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:23 UTC	569	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 01 b6 08 06 00 00 00 13 09 a3 70 00 00 19 9f 49 44 41 54 78 9c ed dd ef 71 1b 47 9a 07 e0 b7 af f6 bb 94 81 b8 11 48 17 81 b8 11 98 17 81 e1 08 ac 8d c0 70 04 96 eb 02 30 1c c0 d5 d2 11 18 8e e0 a4 08 96 8a e0 c4 08 fa 3e 4c c3 86 20 90 68 90 00 66 f0 e2 79 aa 50 12 c9 01 a6 09 0e e6 37 fd 77 4a ad 35 00 20 8b ff 18 bb 00 00 70 48 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 Data Ascii: PNGIHDRpIDATxqGHp0>L hfyP7wJ5 pHT6Rl"HE` @T6Rl"HE` @T6Rl"HE` @*T6Rl"HE
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 f2 b7 b1 0b 30 05 a5 94 3a 76 19 d6 fc 58 6b 9d 8f 5d 08 80 73 a5 c6 06 40 2a 82 0d 80 54 34 45 0e fe e8 d8 e6 2a 22 5e 1d 60 5f 1f 23 e2 f3 23 Data Ascii: 6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl0:vXk]s@T4E"^`_##
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 8e 1c ed c3 57 6b fd dc 4e 4e 3f 77 3e e5 45 0c 83 4b a6 5e 13 1e d3 fa 68 bc bb b1 0a 71 2a ad d6 3a 8b 21 e0 f6 b9 18 f9 a1 94 72 db 2e 56 9f e3 65 0c cd 90 ef c7 ae c1 3f 97 60 bb 5c bd cd 90 2b e7 d0 1c 39 ba 5a eb bb 18 9a 26 7b 2d 0f 39 9c fb a1 7d 1c f9 f5 8f 62 a3 76 b1 7c 60 b3 5e 77 cf 7c fe c9 b4 80 bb 8e a1 89 b2 b7 15 e2 9b 18 8e a5 47 c3 ed a1 cf 70 1d 86 fd bf 8b 21 d8 6e b7 1c 93 9b 5f 4f 9a 60 bb 40 ad 09 ec d5 13 9e 3a 3b 6c 49 0e 6e 12 cd 25 ad 69 72 d7 50 fc 95 17 31 34 ff b0 dd 77 31 34 8d 2d 9e f9 3a 77 cf 2e c9 89 b5 5a d3 55 f4 d7 de 5e c7 e3 e1 f6 31 76 f7 93 2d 62 38 26 6f 56 8b a1 b7 ef 5f c7 44 3e 5f 3d 04 db 65 9a 6d 7c dd fb c1 99 7a 73 e4 64 d6 72 ac b5 ce a3 bf cf ed ad c9 dc db d5 5a 17 b5 d6 9b 7a a1 2b b9 b4 26 ee eb e8 Data Ascii: WkNN?w>EK^hq*:!r.Ve?`\+9Z&{-9}bv\|`^w\|Gp!n_O`@:;lIn%irP14w14-:w.ZU^1v-b8&oV_D>_=em\|zsdrZz+&
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 8b 89 9b 18 46 84 ee 6a a6 8d 18 e6 04 ce 26 da a7 f6 e3 89 f6 73 dd fe 7d 19 fa d7 8e a2 75 1d 8c 5d 8c 51 09 b6 04 5a f3 df fa c0 8d 9e 5b d3 3c c5 22 76 07 db eb 52 ca 9b 89 9e bc 9f a5 bd cf 6f 62 38 39 df 44 ff 89 f9 3e 86 75 3a e7 c7 29 d9 f3 8d 55 b6 d6 74 fb d3 18 fb 26 2f c1 96 c3 bb f8 b2 f9 eb 28 35 a6 3d 06 91 cc 62 a2 f3 da da 00 9b c7 bc 89 2f 3b d6 af d6 1e 3d b5 b2 4d bf c6 30 f2 d1 fd d8 b6 a8 b5 be 6f e1 f6 94 f7 16 b6 12 6c 39 cc d6 fe bf cf ad 69 9e e2 7d ec be c2 9e c5 44 83 2d 22 7e 3f c1 3e 3e c5 50 bb dd e7 6e 0a 97 ec 2e 04 1b 07 64 f0 c8 99 db 32 21 fb d8 27 d3 9e e1 fc 2f 2e f0 be 5a 9f 22 e2 e7 88 f8 cf 5a eb 55 ad 75 2e d4 98 b0 bb b1 0b 70 4c 82 ed fc 6d d6 8c 16 c7 dc 59 5b 73 b2 e7 f6 2a 97 32 59 fb 9f 11 f1 f7 16 66 e9 27 Data Ascii: Fj&s}u]QZ[<"vRob89D>u:)Ut&/(5=b/;=M0ol9i}D-"~?>>Pn.d2!'/.Z"ZUu.pLmY[s*2Yf'
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: cf b6 13 fd f2 d4 85 78 ae 36 df ae e7 e4 73 73 e2 26 b8 ab 13 ee 2b 22 f6 1e 4c f2 ed 48 e1 f6 7a ca 83 79 36 42 2d e2 0c 3f 13 fb 2a a5 bc 6c c7 c2 63 b5 d3 fb 88 f8 2f a1 f6 25 c1 36 21 ed ca 6c f3 aa ec be 9d 18 cf 51 4f ad ed 45 9c b6 d6 76 75 c2 7d fd 69 cf c1 24 63 85 db 24 47 d2 b5 01 3f cb f8 72 fa cb f2 08 bb ba 3e c2 6b 3e 49 1b f9 f8 21 1e 5f 03 f2 63 44 5c 9f c1 a2 0d 27 27 d8 a6 65 be e5 7b e7 1a 6a 11 fd 27 9f 77 27 ac 2d 5c 9d 68 3f 5f 69 83 49 7a 56 26 89 18 27 dc 66 27 de df a3 5a 8d 65 1e c3 67 60 73 4e e7 31 4e e6 a3 37 45 96 52 ae 4a 29 cb 88 f8 3d be 5c 75 68 d3 cf 31 84 da 39 9f 1f 8e 46 b0 3d cf 55 e7 76 cb 5d 1b b4 2b b4 c7 0e e4 73 d4 7b f2 79 11 bb 6f bb 71 28 d7 27 da cf 43 6e a2 6f a4 64 44 0b b7 13 86 fe db 76 1c 8e aa 8d 7a Data Ascii: x6ss&+"LHzy6B-?*lc/%6!lQOEvu}i$c$G?r>k>I!_cD\''e{j'w'-\h?_iIzV&'f'Zeg`sN1N7ERJ)=\uh19F=Uv]+s{yoq('CnodDvz
2024-12-10 13:21:23 UTC	487	IN	Data Raw: 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 b0 01 90 8a 60 03 20 15 c1 06 40 2a 82 0d 80 54 04 1b 00 a9 08 36 00 52 11 6c 00 a4 22 d8 00 48 45 Data Ascii: @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE` @T6Rl"HE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.10	49902	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	848	OUT	GET /pixel/attr?d=AHNF13KNx6GPSuGcB-kt6053IRd9hGdjSDfFqLV90KxYNVaWtPhOFF2h6koV-kBODLbdlumqQ2W0jR0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:23 UTC	236	IN	HTTP/1.1 204 No Content Date: Tue, 10 Dec 2024 13:21:22 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.10	49904	52.19.235.127	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	776	OUT	GET /cookie-sync/adx?google_gid=CAESED34_s-fwhdATnOyfGyMuaQ&google_cver=1&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:22 UTC	538	IN	HTTP/1.1 303 See Other Date: Tue, 10 Dec 2024 13:21:22 GMT location: https://match.prod.bidr.io/cookie-sync/adx?google_gid=CAESED34_s-fwhdATnOyfGyMuaQ&google_cver=1&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Tue, 10 Dec 2024 13:31:22 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.10	49897	52.57.179.60	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:22 UTC	880	OUT	GET /ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:23 UTC	839	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 10 Dec 2024 13:21:22 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM Pragma: no-cache Server: PingMatch/v2.0.30-814-g4e6373a#rel-ec2-master i-00fef2d74d82f759c@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=qY7E4Feb1Tl0b05; Domain=.w55c.net; Expires=Fri, 09 Jan 2026 23:21:22 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.10	49914	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	405	OUT	GET /simgad/18426777046261427710/14763004658117789537?w=400&h=209&tw=1&q=75 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:23 UTC	824	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 195704 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 06 Dec 2024 13:05:50 GMT Expires: Sat, 06 Dec 2025 13:05:50 GMT Cache-Control: public, max-age=31536000 Age: 346533 Last-Modified: Wed, 30 Oct 2024 16:41:20 GMT Content-Type: image/jpeg Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:23 UTC	566	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 0a 0a 0a 08 0a 0a 0a 08 08 08 08 09 08 09 09 09 09 09 0d 07 07 07 08 11 0e 1f 1e 11 0e 1c 1c 20 24 2e 27 20 22 2c 23 10 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0d 0b 0d 0d 0d 0d 12 32 21 1c 21 32 32 32 32 32 32 32 26 32 32 32 32 32 26 26 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 26 32 32 32 32 32 32 32 32 32 26 26 32 26 26 26 ff c0 00 11 08 04 17 07 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 06 04 05 07 03 08 ff c4 00 62 10 00 01 02 03 04 07 06 05 01 03 07 08 08 02 01 15 01 00 02 03 04 11 05 21 31 f0 06 12 41 51 61 71 81 13 91 a1 b1 c1 e1 07 14 22 d1 f1 32 23 42 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!2222222&22222&&2222222222222222222&222222222&&2&&&b!1AQaq"2#B
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 05 a7 af 44 16 b9 de 82 13 44 14 14 02 7d 38 2a 8b 4f 45 15 51 0a ef e0 a8 a0 e7 aa 07 bf 50 81 53 8e 71 41 79 fd 90 3b fd 90 11 14 a0 b7 f4 41 71 40 cf 25 44 e7 f7 a8 50 5b f9 a2 15 ce e0 82 91 9d e5 15 89 1d 3c aa 88 a7 66 68 8a 0c fd 91 0a 52 88 2d 3c 33 54 54 25 03 82 21 9b d0 06 dd e8 a1 44 5e 28 a9 91 c1 02 99 bd 02 f4 13 97 df 14 14 1f 4e 88 07 3c 10 4e 48 2a 09 5c f1 45 07 dd 04 39 ee 41 2f f3 fc 20 a7 8f d9 04 ef 40 28 25 7d 38 28 28 07 3b d1 52 8a 87 b7 2e 6a 09 ef 44 0b f2 36 20 61 9a d0 20 11 9c 51 50 8e 9e 40 a2 21 fb 74 45 07 3c 7c d0 4a 52 99 bd 02 88 25 50 4e 08 a1 dd b1 07 d6 52 37 65 1a 04 6b ff 00 61 1a 14 51 4b c8 2c 75 7d 16 be 4c fd b3 a8 d9 c5 af ae f3 5e cd a4 da 3a 22 be 6a d1 95 6b 4b 27 a4 04 46 44 87 46 18 6f 2c fd 57 72 07 9a Data Ascii: DD}8OEQPSqAy;Aq@%DP[<fhR-<3TT%!D^(N<NH\E9A/ @(%}8((;R.jD6 a QP@!tE<\|JR%PNR7ekaQK,u}L^:"jkK'FDFo,Wr
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: e2 82 78 7d a8 80 69 4b bf 28 05 15 29 9c 50 0f 87 92 08 7d f8 92 50 38 e4 a0 9e dd e8 07 f2 82 9d a8 31 eb ee 50 14 0c ef 2a 87 3d b9 aa 07 51 b1 01 40 a2 08 8a 95 14 cd 0a 07 04 04 04 13 db 82 06 79 a0 94 ce c4 53 25 00 df b2 ef 44 12 8a 05 51 52 9d 7e c8 15 3d 3c d0 4f 3f 0a 6c 41 3d b6 d1 00 e7 9a 2a 67 92 01 a5 33 7a 08 82 53 38 de a0 20 9f 9d 88 a9 5a ed f7 40 cf 1a a0 87 aa 2a ef c8 28 3d 06 c6 d2 71 1e c5 93 92 8c d7 be 66 c8 b4 a5 63 4a 3e 9a cc 74 17 3c 02 ce e7 38 2f 27 e5 e6 e7 56 7e 2f 6f 5f e1 eb ef 99 fb 8d 8b 4b b4 56 6e d7 81 fc d6 28 96 85 0d ae 9d 98 a9 a0 89 11 ee 1d 90 ae cb 85 7a ae 4f 87 ff 00 a7 9f b6 a7 7f ff 00 77 57 c8 b6 df ac bf fe 47 61 62 ca c9 59 b0 22 3e 23 a0 ce da 12 91 1d 0a 5e 6e 23 83 e6 62 43 b8 bd 80 6c be b7 ee 34 Data Ascii: x}iK()P}P81P=Q@yS%DQR~=<O?lA=g3zS8 Z@*(=qfcJ>t<8/'V~/o_KVn(zOwWGabY">#^n#bCl4
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 80 a8 20 20 1f b7 34 04 04 04 04 0c ee 40 f6 40 40 40 40 cf 24 04 04 04 04 04 04 00 80 80 81 9e 08 26 79 a2 88 2a 20 7e e8 21 45 10 33 cd 41 15 04 42 be 9d c8 08 2a 02 0a 88 04 0a a0 a8 15 41 6e 55 0c f4 41 50 5c f0 44 3c 50 54 41 54 51 9c 50 5c f4 41 41 cf 04 45 cf 45 43 1b d0 5a a0 bb 73 7a 20 88 bd df 74 17 3c d5 45 ce e2 83 2b 90 4a e7 14 46 55 f4 54 29 9c 10 54 45 af 7a 00 28 2d 6f cd 51 19 57 1c 94 00 50 50 88 67 9a a2 83 9c 10 65 ad d7 cd 05 ae ef c5 c8 15 fb 6f 40 14 ce 28 19 e4 37 22 2e ed 95 af 54 19 57 d7 80 40 a1 e6 a8 0f 3f 04 17 c1 05 19 c4 d1 05 f6 ee 44 2b ed c1 06 5d de e8 15 af 40 6e df 9a 20 57 65 e8 2a 01 f0 f7 41 71 dd f7 40 3d 3b f1 41 7d b9 a0 b7 67 60 40 ae de 68 85 6e f5 dc 50 5a 7a f0 a2 06 ec d5 02 b8 e4 a0 67 6e 28 8c ab bb de Data Ascii: 4@@@@@$&y* ~!E3ABAnUAP\D<PTATQP\AAEECZsz t<E+JFUT)TEz(-oQWPPgeo@(7".TW@?D+]@n WeAq@=;A}g`@hnPZzgn(
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 05 7f 1b 54 10 8d bb fc 8a 0b e9 5e a8 a9 9e 48 07 1e fe 68 07 cf bd 06 39 dd b5 05 08 21 cf 34 50 8c ed 28 21 cf 34 10 8e f4 10 8e 1b 10 02 08 73 bd 00 0c 51 5c 79 99 26 4c 00 c7 10 0d 46 ab b0 2d 24 ad 7c 93 fa da dd c1 bb 9d 49 fb 6c d0 b4 76 d5 b2 9d 0a cf 7b e0 4c cb cf 4b 98 f2 b1 06 b3 84 38 6e 17 3e a2 f0 2f 35 5e 37 3e b8 ef f6 af 77 82 6a 7a 4b 02 d4 16 24 c4 28 f0 dc e8 f3 2d 89 04 b1 d0 23 35 d2 82 10 14 88 1d b4 d6 b8 2d d8 e0 e4 df 5b 93 a6 9e 6f 91 c5 8e f3 6f 6f 53 d3 78 12 56 c4 a5 98 5e 1a df e5 16 bb e4 66 4b 43 9d 29 31 ab 52 ca f4 37 70 2b 5e b7 ac 6b 3a 84 cc d6 75 2b c4 66 25 9f 02 2c 68 11 07 ed 65 e2 45 83 16 95 03 b4 63 a8 ef 25 ec 63 5f 6c cd 4f cb c5 e4 c7 d3 57 35 f1 23 6d de ab 26 0b cf f0 82 51 02 fc e0 81 ed cc 94 0c d7 a2 Data Ascii: T^Hh9!4P(!4sQ\y&LF-$\|Ilv{LK8n>/5^7>wjzK$(-#5-[oooSxV^fKC)1R7p+^k:u+f%,heEc%c_lOW5#m&Q
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: d1 97 11 ed fb 5a 19 35 64 7b 3a 45 d0 c9 ab c7 64 1b 79 0b c3 f9 3a 9f fa 7a af 73 86 59 34 f3 db 66 04 84 9c 1f e4 c8 92 f2 70 e6 1f 0d f1 a5 67 7b 4f db ea 0b 9a 5e ea e2 68 6e a2 ea cf ca e5 dd fb 67 d4 6b ff 00 a4 e0 cc eb 5e eb 2d 07 d1 18 91 e7 1b 16 71 af 83 06 55 f7 0a 54 4d 45 07 61 fe 11 bd 6f f9 5f 27 3f c7 24 f7 5c 7f 1b e3 d9 c9 75 7d 47 79 a7 36 83 1a e9 c9 86 bb f9 b9 63 6c f9 76 43 76 a3 63 34 32 94 14 d9 f5 38 ff 00 e5 5c 3c 18 fe 4e 4c cf d3 bb 9b 7f c7 c7 ab 7f 2f 2c ee f2 5e eb c2 4c f4 40 cf 25 04 af df 70 45 0a 08 6e c1 04 aa 28 7e e8 22 01 41 33 8a 05 06 17 a8 25 10 4a 67 60 45 33 c5 03 a7 76 28 31 a6 70 45 10 33 bd 04 28 19 e2 80 8a 20 88 19 de a0 94 54 0a 80 73 c5 03 3d 10 44 04 53 dd 01 04 41 50 44 02 82 14 15 04 45 10 10 10 54 Data Ascii: Z5d{:Edy:zsY4fpg{O^hngk^-qUTMEao_'?$\u}Gy6clvCvc428\<NL/,^L@%pEn(~"A3%Jg`E3v(1pE3( Ts=DSAPDET
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 14 01 5d 88 28 37 22 2e da 64 20 6f e9 cd 00 1c ec 41 90 c2 bc 7b 90 06 77 20 67 aa 06 f4 14 1f 4f ca 05 76 6d bd 11 97 aa 08 0a 0b 5a a0 1e ff 00 52 82 fb 71 aa 0a 49 bf 37 20 0c ef 55 43 9c 30 46 2a 33 c2 f4 54 1d 3c 82 0b bf 25 11 30 bf 24 20 c8 67 82 08 76 a0 04 0a 77 f9 a0 bc 50 50 71 cd c8 20 ce f4 16 be bf 84 01 9e 28 2d 73 8d c8 86 da 20 a3 86 3e 57 a0 0c 38 df ca 88 19 e4 10 29 79 e9 cd 00 1c f5 41 46 07 0f 40 81 cd 04 e8 80 10 4f 1f 00 80 7c d1 54 fd ae e2 82 7b 74 40 ad 73 72 06 7d 90 33 bf a2 05 78 6c 40 cf 34 03 f6 40 41 36 ec db c1 03 3b 94 13 3c d5 50 28 07 1c 3d 90 41 9e 08 1e 7e 68 27 a7 9d 10 2b 9c 28 8a c7 6e 49 40 28 20 cf 24 12 b9 e0 81 9e bb 51 4d a7 f0 82 0a 8a ef f2 44 64 c7 96 b9 ae 69 a3 9a 43 9a 45 c4 38 1c 56 3a 9d cb 19 67 5f Data Ascii: ](7".d oA{w gOvmZRqI7 UC0F*3T<%0$ gvwPPq (-s >W8)yAF@O\|T{t@sr}3xl@4@A6;<P(=A~h'+(nI@( $QMDdiCE8V:g_
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: e2 6b bc ed e3 76 84 84 69 48 d1 65 e6 61 ba 0c 78 2e 2d 7b 5d 73 81 aa f4 31 bf b4 9a 8f 2f 93 8f e9 ab 9a e1 9c 9d 85 6c 69 4c ef bd 04 d9 4b f6 ec da 80 3b aa 8a 1e a8 21 e6 81 9d 88 27 ba 06 08 26 dc 90 82 d2 e2 82 67 a2 01 fb 73 c1 04 37 8c 84 14 7a 77 a0 9b 3c d4 0c ed 08 17 f5 bd 02 be 88 21 fc a0 1c e2 8a 87 ed de 82 a0 94 41 89 d9 9b d0 5b f3 b2 88 a6 dc dc 82 1c f1 28 04 67 81 41 2f 50 07 dd 15 0e 42 0c 50 65 9e 88 21 c3 d7 d1 04 aa 28 77 5f f6 28 20 1d d8 20 e5 59 d2 11 27 26 65 e5 a1 7f 49 1e 23 61 83 88 68 fe 2e 8b 1d ea 66 5d 56 58 cd d5 99 8f 6c 16 64 a6 8e c0 31 25 a1 01 68 3a 11 6b 22 3a 8f 74 b4 2a 51 f1 79 92 57 89 cf cd ae ed be de e7 c7 e1 97 ac cf 4e ae ca b7 e4 0c a4 f4 68 a6 66 66 6a 2c 58 90 1b 19 ac d7 11 22 ea d4 8a e0 05 fc ca Data Ascii: kviHeax.-{]s1/liLK;!'&gs7zw<!A[(gA/PBPe!(w_( Y'&eI#ah.f]VXld1%h:k":t*QyWNhffj,X"
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 20 88 22 00 41 3b d4 50 e7 9a 09 dc 81 7a 06 78 a0 c4 a2 88 05 00 8c d5 04 40 3f 6e bc 11 44 12 99 de 82 20 10 81 45 01 04 45 10 0a 06 79 20 88 08 19 e8 82 20 a8 08 22 05 11 55 04 41 50 44 04 04 02 33 8a 02 02 0a 88 88 a2 02 02 02 06 79 20 20 05 01 50 28 14 ce f4 04 04 0c f3 40 28 19 e4 80 10 61 ee a3 20 22 05 01 01 05 a2 02 a8 7b a0 20 a8 15 41 73 cd 01 10 08 08 32 a2 02 20 33 cd 52 aa 02 22 ed 41 41 d8 aa 28 3c fe e8 14 df c5 05 f2 44 5c f3 41 51 03 9e 4a 8a 10 02 23 21 c1 02 b8 66 88 8a 80 aa 32 27 af 9a 0a d2 82 d7 3b d1 15 03 bb 3b 10 55 43 0c ed 44 65 f7 ea 81 c8 22 2d c8 28 37 20 7a e6 88 2f 9d fc 55 14 5d f7 44 41 f7 41 95 33 8a 0b 9e 08 03 3c d0 5c ef bd 03 8a 22 9c 77 a0 c8 1b e8 80 0f 3d 9c 90 00 fc 6f b9 51 73 c9 00 78 28 2e 78 a0 67 8a a0 10 Data Ascii: "A;Pzx@?nD EEy "UAPD3y P(@(a "{ As2 3R"AA(<D\AQJ#!f2';;UCDe"-(7 z/U]DAA3<\"w=oQsx(.xg
2024-12-10 13:21:23 UTC	1390	IN	Data Raw: 42 bb f6 78 f1 44 51 9d 80 84 14 74 a7 b2 00 ee 41 7c 7c 10 08 e6 80 33 76 08 32 a0 a1 aa 09 5e ef 14 42 99 d8 82 81 c6 b8 f5 41 31 41 6b c9 02 95 45 08 f5 ea 82 53 d3 a1 40 28 2e 69 b5 04 cf 8a 0b e7 dd 54 03 b6 a6 ef 24 10 11 54 0a 50 d2 f1 e4 50 2b de 81 b6 b8 fa 20 03 c3 d1 04 e9 8f 44 0e bb fb 90 29 cf ef c1 03 af e1 03 8f 2e a1 04 ce e2 a2 83 0e 37 a0 87 c4 f7 20 86 eb 8f e4 20 7b f2 28 a7 76 c4 13 3c 50 36 ed 3e 41 00 b5 04 40 a6 35 41 39 60 3b d0 62 42 2a 81 87 e0 72 50 4c 72 2f e2 aa 39 12 53 d1 a5 63 42 98 97 79 83 1e 0b b5 a1 bc 56 a0 ac 39 31 37 2c ad bc 5c 97 8f 53 51 ea b3 76 18 b7 ac 49 4b 6a 5c 09 6b 76 4c 46 9a 87 12 19 3f 54 cc 37 d6 23 39 1a 1a 74 5e 5d e3 fa dd 66 bd 8e 3e 5f bc cd 79 63 9e 27 23 4d 3e 30 06 04 f4 56 c6 8f 31 11 cd 6b Data Ascii: BxDQtA\|\|3v2^BA1AkES@(.iT$TPP+ D).7 {(v<P6>A@5A9`;bB*rPLr/9ScByV917,\SQvIKj\kvLF?T7#9t^]f>_yc'#M>0V1k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.10	49919	142.250.181.14	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	819	OUT	POST /el/AGSKWxVUNtbqQx3JWc4w-hEhWaci3DAEEhD21u4YSqlyq0iOdgW21nvbs0pzOFJU3pzvNVMmtHS6sX3UUGshtXLGuMz9iNEzv2iRID4_kyaa4cN_zs5j_NL18ucs0pLMZYrIOmLRVh1oEw== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://t.ly X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:23 UTC	247	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 33 33 38 33 36 38 38 30 37 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 5b 6e 75 6c 6c 2c 5b 22 49 44 3d 30 65 65 64 62 63 33 32 38 63 39 65 31 62 38 63 3a 54 3d 31 37 33 33 38 33 36 38 37 36 3a 52 54 3d 31 37 33 33 38 33 36 38 37 36 3a 53 3d 41 4c 4e 49 5f 4d 59 36 43 43 52 79 61 70 77 70 4d 70 30 61 74 7a 49 34 4e 71 49 5f 4c 6f 4c 71 4f 67 22 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1733836880700,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,[null,["ID=0eedbc328c9e1b8c:T=1733836876:RT=1733836876:S=ALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg"]]]
2024-12-10 13:21:24 UTC	1844	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://t.ly Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 10 Dec 2024 13:21:24 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-UHWMgQII7LaljA-ZYNzsfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorLoggingHttp/web-reports?context=eJzjktDikmLw0ZBicEqfwRoExAxfr7ByALEQN8eVhoe72AQ2XL2ZpOSSlF8Yn5yfV5KaV6KbmFKsC2IXZSaVluQXobBTy0AqcvLT0zPz0uONDIxMDI0MLPQMzOMLDAASUiZJ" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.10	49930	50.31.142.255	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	819	OUT	GET /usersync/googleadx/?google_cver=1&google_gid=CAESEHe7ZCKibi5CAEr3oKOy5YA&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=78_l5Zw6aUVtSW2Ox4O7
2024-12-10 13:21:24 UTC	731	IN	HTTP/1.1 302 Found content-type: text/html; charset=utf-8 content-length: 240 cache-control: no-cache, no-store, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&google_hm=NzhfbDVadzZhVVZ0U1cyT3g0Tzc= p3p: CP="We do not support P3P header." pragma: no-cache set-cookie: zuid=78_l5Zw6aUVtSW2Ox4O7; Path=/; Domain=zemanta.com; Expires=Wed, 10 Dec 2025 13:21:24 GMT; Max-Age=31536000; Secure; SameSite=None date: Tue, 10 Dec 2024 13:21:24 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload connection: close
2024-12-10 13:21:24 UTC	240	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 52 34 72 4d 5f 6a 34 32 51 53 52 2d 57 77 50 78 78 39 4b 38 78 63 48 55 63 45 63 32 79 5f 58 4c 34 6a 5a 65 38 41 39 4c 45 58 71 6c 66 42 50 38 39 74 7a 72 63 4c 54 6b 56 33 72 48 4d 37 6f 5a 59 4d 7a 4e 69 66 44 62 57 4e 64 4f 33 31 4c 46 35 77 35 39 53 39 51 36 50 38 31 38 50 43 5f 43 6b 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 4e 7a 68 66 62 44 56 61 64 7a 5a 68 56 56 5a 30 55 31 63 79 54 33 67 30 54 7a 63 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&google_hm=NzhfbDVadzZhVVZ0U1cyT3g0Tzc=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.10	49937	35.190.0.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	776	OUT	GET /google_pixel?google_gid=CAESEFYjuaqlRD6JjV2RcsrvwSw&google_cver=1&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE HTTP/1.1 Host: ads.travelaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:24 UTC	792	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Tue, 10 Dec 2024 13:21:24 GMT Content-Length: 0 Location: https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE Set-Cookie: _tracker=%7B%22UUID%22%3A%22521F23B3-5E25-4671-0E7E-512BFBB73E0C%22%7D; Path=/; Domain=travelaudience.com; Expires=Sat, 10 Jan 2026 13:21:24 GMT; Max-Age=34214399; Secure; SameSite=None X-Engine-Version: 0.0.0 X-Host: tde-deliveryengine-production-7b68cc5f9-v47rr P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR LAW CUR DEV PSA PSD IVA OUR BUS UNI COM NAV INT CNT LOC" Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.10	49936	34.96.105.8	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	777	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEC9z4HCoDXMXDWETqDAdwFs&google_cver=1&google_push=AXcoOmS_bHIT3yJg_6opmUBsguEa0oxkRHlT-qBnmqr5nMCJXmfeTrh0DqFbRBNa8g75EeTf4aFmhspWLzeGVVoCeSpf1AdAW7ibMQ HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:24 UTC	274	IN	HTTP/1.1 204 No Content Set-Cookie: b=67584054F20198B03277DC69_;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Tue, 10 Dec 2024 13:21:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.10	49921	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	2377	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=3422485851&adf=2440470065&pi=t.aa~a.2817859086~rp.4&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x280&nras=2&correlator=2977550825633&fr [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:24 UTC	575	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:24 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:24 UTC	443	IN	Data Raw: 31 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 27 7b 22 6d 73 67 5f 74 79 70 65 22 3a 22 72 65 73 69 7a 65 2d 6d 65 22 2c 22 6b 65 79 5f 76 61 6c 75 65 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 5f 6e 68 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 72 5f 69 66 72 22 2c 22 76 61 6c 75 65 22 3a 22 74 72 75 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 71 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 43 4e 57 78 32 64 79 6c 6e 59 6f 44 46 5a 35 78 51 51 49 64 55 31 34 48 4c 77 22 7d 5d 2c 22 67 6f 6f 67 4d 73 67 54 79 70 65 22 3a 22 73 74 68 22 7d 27 2c 20 27 2a 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 Data Ascii: 1b4<!DOCTYPE html><html><head><script>window.top.postMessage('{"msg_type":"resize-me","key_value":[{"key":"r_nh","value":"0"},{"key":"r_ifr","value":"true"},{"key":"qid","value":"CNWx2dylnYoDFZ5xQQIdU14HLw"}],"googMsgType":"sth"}', '*');</script><script
2024-12-10 13:21:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.10	49920	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	2384	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=899877383&adf=908843369&pi=t.aa~a.1108372886~rp.3&w=350&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=350x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x280%2C1110x280&nras=3&correlator=297755082 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:25 UTC	575	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:24 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:25 UTC	815	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 31 32 30 35 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 49 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 22 69 64 3d 22 61 76 69 63 5f 43 4f 65 69 32 64 79 6c 6e 59 6f 44 46 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20241205';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContainer"id="avic_COei2dylnYoDF
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 63 26 61 6d 70 3b 73 69 67 3d 43 67 30 41 72 4b 4a 53 7a 49 55 38 5f 74 58 42 5f 30 71 73 45 41 45 26 61 6d 70 3b 63 69 64 3d 43 41 51 53 4f 77 43 61 37 4c 37 64 79 34 47 51 65 31 39 65 71 50 34 38 2d 34 31 42 39 6f 43 54 6b 2d 53 35 54 5f 44 4a 63 5a 4a 63 71 52 6e 55 58 48 63 74 31 58 61 52 59 48 71 36 38 59 44 43 67 54 43 55 33 38 56 4a 48 73 39 65 4e 69 59 73 44 33 6a 4b 47 41 45 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 61 64 6b 3d 22 38 39 39 38 37 37 33 38 33 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 6d 65 74 61 64 61 74 61 3d 22 6c 61 3d 30 26 61 6d 70 3b 78 64 69 3d 30 26 61 6d 70 3b 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 75 66 73 2d 69 6e 74 65 67 72 61 74 6f 72 2d 6d 65 74 61 64 61 74 61 3d 22 43 6f 30 42 43 6b 46 74 62 32 Data Ascii: c&sig=Cg0ArKJSzIU8_tXB_0qsEAE&cid=CAQSOwCa7L7dy4GQe19eqP48-41B9oCTk-S5T_DJcZJcqRnUXHct1XaRYHq68YDCgTCU38VJHs9eNiYsD3jKGAE"data-google-av-adk="899877383"data-google-av-metadata="la=0&xdi=0&"data-google-av-ufs-integrator-metadata="Co0BCkFtb2
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 37 35 33 33 37 34 25 32 62 65 6a 76 66 2f 25 32 37 38 34 34 26 67 74 3b 26 23 33 39 3b 39 77 75 76 62 24 26 61 6d 70 3b 35 36 35 33 33 26 67 74 3b 21 3d 7c 76 71 63 29 21 32 37 33 37 39 34 26 61 6d 70 3b 26 6c 74 3b 71 71 76 62 2f 25 26 6c 74 3b 31 37 33 35 30 32 30 21 3d 6e 65 68 75 60 2f 21 33 36 34 3d 35 30 35 31 21 39 61 62 6b 7b 61 28 24 31 36 30 32 31 30 3a 33 26 61 6d 70 3b 26 6c 74 3b 63 62 6f 74 66 2b 2a 30 31 35 30 30 33 34 3a 25 32 62 65 6a 76 66 2f 25 37 32 3b 31 37 36 31 33 21 3d 65 66 64 77 61 2a 26 23 33 39 3b 37 36 34 36 33 3b 32 31 24 3f 65 62 6b 70 62 24 26 61 6d 70 3b 30 33 36 36 37 31 37 26 67 74 3b 2a 26 67 74 3b 62 67 69 70 66 2b 21 33 3d 37 31 32 33 36 33 25 39 61 69 68 77 63 29 21 37 32 30 Data Ascii: 9;9efotm(&753374%2bejvf/%27844>'9wuvb$&56533>!=\|vqc)!273794&<qqvb/%<1735020!=nehu`/!364=5051!9abk{a($160210:3&<cbotf+0150034:%2bejvf/%72;17613!=efdwa'76463;21$?ebkpb$&0366717>*>bgipf+!3=712363%9aihwc)!720
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 22 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 56 45 42 59 5a 2d 65 6f 45 73 58 6f 68 63 49 50 32 37 7a 4c 30 41 4d 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 73 65 74 41 Data Ascii: "position:absolute;"><script>if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_VEBYZ-eoEsXohcIP27zL0AM"\x3e');(function() {var m = document.createElement('meta');m.setA
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 7b 63 5b 66 5d 28 31 2c 65 29 7d 63 61 74 63 68 28 71 29 7b 7d 63 3d 7b 70 75 73 68 3a 66 3d 3e 7b 66 28 31 2c 65 29 7d 7d 7d 3b 62 2e 6f 6e 43 72 65 61 74 69 76 65 4c 6f 61 64 3d 65 3d 3e 7b 63 2e 70 75 73 68 28 65 29 7d 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 72 65 61 74 69 76 65 2d 6c 6f 61 64 2d 6c 69 73 74 65 6e 65 72 22 2c 22 22 29 3b 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 72 65 61 74 69 76 65 4c 6f 61 64 22 2c 65 3d 3e 7b 67 28 65 2e 64 65 74 61 69 6c 29 7d 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 65 3d 3e 7b 70 28 62 2c 67 2c 65 29 7d 29 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 20 63 6c 73 6e 28 22 67 63 63 5f 56 45 42 59 5a 2d 65 6f Data Ascii: {c[f](1,e)}catch(q){}c={push:f=>{f(1,e)}}};b.onCreativeLoad=e=>{c.push(e)};b.setAttribute("data-creative-load-listener","");b.addEventListener("creativeLoad",e=>{g(e.detail)});h.addEventListener("message",e=>{p(b,g,e)})}};}).call(this); clsn("gcc_VEBYZ-eo
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 44 41 6a 6e 34 75 76 43 30 72 47 77 35 7a 53 58 4b 49 44 41 58 6d 4e 6c 7a 5a 6b 46 56 4d 54 77 65 4d 47 45 47 5f 51 49 62 49 61 30 36 6e 57 34 63 52 59 4a 43 5a 4b 42 7a 37 78 53 70 30 35 51 47 63 38 75 7a 4e 69 56 51 52 35 39 69 2d 64 47 48 5a 6a 61 6f 6e 4c 56 41 78 51 50 46 48 4a 49 7a 72 57 68 73 6a 7a 78 4f 71 49 77 31 41 33 6d 78 6c 52 34 30 6c 79 64 68 37 39 71 6f 38 75 74 68 48 66 4d 51 5f 6e 59 6f 62 6a 4b 66 6e 59 48 55 68 61 37 67 68 4b 5a 7a 6d 6b 77 74 6a 66 6a 35 7a 45 71 36 56 72 6d 41 2d 6e 54 74 63 37 76 4d 79 4c 43 4f 49 30 69 43 6c 54 42 52 49 57 57 37 66 64 47 57 63 51 68 5f 51 4c 4b 52 48 78 6d 4a 58 79 58 55 75 77 6c 58 5f 7a 41 43 62 38 75 67 4f 78 58 63 68 69 74 2d 7a 6e 67 30 51 35 79 57 6f 42 38 59 70 71 4c 44 6d 43 54 67 77 4e Data Ascii: DAjn4uvC0rGw5zSXKIDAXmNlzZkFVMTweMGEG_QIbIa06nW4cRYJCZKBz7xSp05QGc8uzNiVQR59i-dGHZjaonLVAxQPFHJIzrWhsjzxOqIw1A3mxlR40lydh79qo8uthHfMQ_nYobjKfnYHUha7ghKZzmkwtjfj5zEq6VrmA-nTtc7vMyLCOI0iClTBRIWW7fdGWcQh_QLKRHxmJXyXUuwlX_zACb8ugOxXchit-zng0Q5yWoB8YpqLDmCTgwN
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 78 33 64 5c 78 32 32 37 34 5c 78 32 32 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 5c 78 33 64 5c 78 32 32 72 32 30 32 34 31 32 30 35 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 61 2d 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 4f 65 69 32 64 79 6c 6e 59 6f 44 46 55 56 30 51 51 49 64 57 39 34 53 4f 67 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 66 6f 72 2d 73 75 72 65 2d 6f 70 65 6e 2d 62 72 6f 77 73 65 72 5c 78 33 64 5c 78 32 32 66 61 6c 73 65 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 66 6f 72 2d 73 75 72 65 2d 6f 70 65 6e 2d 63 75 73 74 6f 6d 2d 74 61 62 73 5c 78 33 64 5c 78 32 32 66 61 6c 73 65 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 63 63 2d 6f 76 65 72 6c 61 79 5c 78 33 64 5c 78 32 32 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 63 63 Data Ascii: x3d\x2274\x22 data-jc-version\x3d\x22r20241205\x22 data-jcp-a-id\x3d\x22img_anch_COei2dylnYoDFUV0QQIdW94SOg\x22 data-jcp-for-sure-open-browser\x3d\x22false\x22 data-jcp-for-sure-open-custom-tabs\x3d\x22false\x22 data-jcp-cc-overlay\x3d\x22\x22 data-jcp-cc
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 4f 70 65 72 61 5c 78 32 32 29 29 3b 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 63 6f 6e 73 74 20 61 5c 78 33 64 45 72 72 6f 72 28 5c 78 32 32 69 6e 74 33 32 5c 78 32 32 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 7c 7c 28 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 5c 78 33 64 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 5c 78 33 64 5c 78 32 32 77 61 72 6e 69 6e 67 5c 78 32 32 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 46 5c 78 33 64 53 79 6d 62 6f 6c 28 29 3b 76 61 72 20 47 5c 78 33 64 7b 7d 2c 61 61 5c 78 33 64 7b 7d 3b 66 75 6e 63 Data Ascii: Opera\x22));function C(){const a\x3dError(\x22int32\x22);a.__closure__error__context__984382\|\|(a.__closure__error__context__984382\x3d{});a.__closure__error__context__984382.severity\x3d\x22warning\x22;return a};var F\x3dSymbol();var G\x3d{},aa\x3d{};func
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 5c 78 33 64 76 6f 69 64 20 30 2c 66 29 3b 65 6c 73 65 20 69 66 28 49 28 61 29 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 7b 7d 3b 66 6f 72 28 6c 65 74 20 65 20 69 6e 20 61 29 67 5b 65 5d 5c 78 33 64 4e 28 61 5b 65 5d 2c 62 2c 63 2c 64 2c 66 29 3b 61 5c 78 33 64 67 7d 65 6c 73 65 20 61 5c 78 33 64 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 28 61 2c 62 2c 63 2c 64 2c 66 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 64 7c 7c 63 3f 61 5b 46 5d 7c 30 3a 30 3b 64 5c 78 33 64 64 3f 21 21 28 67 5c 78 32 36 33 32 29 3a 76 6f 69 64 20 30 3b 61 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 65 5c 78 33 64 30 3b 65 5c 78 33 63 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b Data Ascii: \x3dvoid 0,f);else if(I(a)){const g\x3d{};for(let e in a)g[e]\x3dN(a[e],b,c,d,f);a\x3dg}else a\x3db(a,d);return a}}function P(a,b,c,d,f){const g\x3dd\|\|c?a[F]\|0:0;d\x3dd?!!(g\x2632):void 0;a\x3dArray.prototype.slice.call(a);for(let e\x3d0;e\x3ca.length;e++
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 78 32 32 70 76 74 6c 6d 74 5c 78 32 32 29 3b 63 5c 78 33 64 63 5c 78 32 36 2d 33 33 35 32 31 36 36 35 7c 28 62 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 35 7d 7d 61 5b 46 5d 5c 78 33 64 63 7d 74 68 69 73 2e 6a 5c 78 33 64 61 7d 74 6f 4a 53 4f 4e 28 29 7b 72 65 74 75 72 6e 20 55 28 74 68 69 73 29 7d 7d 3b 56 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 5c 78 33 64 47 3b 20 56 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 53 5c 78 33 64 21 30 2c 55 28 74 68 69 73 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 69 6e 61 6c 6c 79 7b 53 5c 78 33 64 21 31 7d 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 55 28 61 29 7b 61 5c 78 33 64 61 2e 6a 3b 61 5c 78 33 64 53 3f 61 3a 50 28 61 2c 65 Data Ascii: x22pvtlmt\x22);c\x3dc\x26-33521665\|(b\x261023)\x3c\x3c15}}a[F]\x3dc}this.j\x3da}toJSON(){return U(this)}};V.prototype.m\x3dG; V.prototype.toString\x3dfunction(){try{return S\x3d!0,U(this).toString()}finally{S\x3d!1}}; function U(a){a\x3da.j;a\x3dS?a:P(a,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.10	49940	51.89.9.251	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	780	OUT	GET /match/?int_id=19&redir=1&google_gid=CAESEIgJ0qSMj4TxmLZl5g1bDrg&google_cver=1&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:24 UTC	483	IN	HTTP/1.1 302 Found p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.10	49942	35.214.136.108	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:23 UTC	866	OUT	GET /ul_cb/sync?ssp=google&google_gid=CAESEImQHyRRkUYMNoxTatB-flo&google_cver=1&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe599ace-232e-44cc-ad08-afae4110058f; c=1733836882; tuuid_lu=1733836882
2024-12-10 13:21:24 UTC	796	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Tue, 10 Dec 2024 13:21:24 GMT Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=google&gdpr=&gdpr_consent= Set-Cookie: tuuid=fe599ace-232e-44cc-ad08-afae4110058f; path=/; expires=Wed, 10-Dec-2025 13:21:24 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1733836884; path=/; expires=Wed, 10-Dec-2025 13:21:24 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z; path=/; expires=Tue, 10-Dec-2024 13:26:24 GMT; domain=.bidswitch.net; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.10	49928	172.217.21.36	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	792	OUT	GET /ads/measurement/l?ebcid=ALh7CaRhsFwBJth0m0S3VSgNw0dqOzOEjlER-KHeyXgEvdYctCUmAMMkgxmod38bUx5HQKVTR26iRTY3t5vstjpvkZcKXTisqQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:24 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:24 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.10	49926	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	1060	OUT	GET /xbbe/pixel?d=CPfHxOMEEPPo2-oEGMfLnZkCMAE&v=APEucNWiFU0F_wbtzhx5H031BHMPBaYF11iZ7XdCkbfMq7Mg6GccxoMtglqtaD7Oest-LM9gBmfDrwTB0nePob92FFZ-aUufEw HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/html/r20241205/r20190131/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:24 UTC	546	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:24 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:24 UTC	631	IN	Data Raw: 32 37 30 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 73 70 5f 73 65 63 75 72 65 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 30 26 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 Data Ascii: 270<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclic
2024-12-10 13:21:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.10	49939	174.137.133.49	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	774	OUT	GET /sync?exchange=11&google_gid=CAESEGwHpV0csKajUGpgWTvQ1Ek&google_cver=1&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28 HTTP/1.1 Host: dsp.adkernel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:24 UTC	538	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 10 Dec 2024 13:21:24 GMT Content-Length: 0 Connection: close Set-Cookie: ADK_EX_11=1; Max-Age=1209600; Domain=.adkernel.com; Path=/; Secure; SameSite=None Set-Cookie: ADKUID=A2291539543527983471; Max-Age=2592000; Domain=.adkernel.com; Path=/; Secure; SameSite=None Location: https://cm.g.doubleclick.net/pixel?google_nid=adkernel&google_hm=QTIyOTE1Mzk1NDM1Mjc5ODM0NzE&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.10	49929	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	848	OUT	GET /pixel/attr?d=AHNF13JHDaVXl6hLjgcod5xTXVVrxkBUfG1KZ5ryGltsVAx-VMDQDecxzCDA2-BPjUSY5cgFFOy2YtA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:24 UTC	236	IN	HTTP/1.1 204 No Content Date: Tue, 10 Dec 2024 13:21:24 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.10	49933	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	861	OUT	GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW&google_hm=22210ca7d02b196e2njvxb00m4ihpoje HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:24 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:24 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.10	49934	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	549	OUT	GET /dcm/dcmads.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:24 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-dcm-tag Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-dcm-tag" Report-To: {"group":"ads-dcm-tag","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-dcm-tag"}]} Content-Length: 18178 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 10 Dec 2024 13:21:24 GMT Expires: Tue, 10 Dec 2024 14:21:24 GMT Cache-Control: public, max-age=3600 Last-Modified: Thu, 05 Dec 2024 18:26:02 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:24 UTC	591	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 Data Ascii: (function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.va
2024-12-10 13:21:24 UTC	1390	IN	Data Raw: 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 68 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 Data Ascii: );for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};h("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{c
2024-12-10 13:21:24 UTC	1390	IN	Data Raw: 3a 6e 75 6c 6c 7d 0a 76 61 72 20 6c 61 3d 68 61 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 66 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 6c 61 29 6c 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b Data Ascii: :null}var la=ha,ma=function(a,b){a.prototype=fa(b.prototype);a.prototype.constructor=a;if(la)la(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[
2024-12-10 13:21:24 UTC	1390	IN	Data Raw: 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 71 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 72 2c 74 3b 61 3a 7b 66 6f 72 28 76 61 72 20 70 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 75 3d 71 2c 71 61 3d 30 3b 71 61 3c 70 61 2e 6c 65 6e 67 74 68 3b 71 61 2b 2b 29 69 66 28 75 3d 75 5b 70 61 5b 71 61 5d 5d 2c 75 3d 3d 6e 75 6c 6c 29 7b 74 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 74 3d 75 7d 76 61 72 20 72 61 3d 74 26 26 74 5b 36 31 30 34 30 31 33 30 31 5d 3b 72 3d 72 61 21 3d 6e 75 6c 6c 3f 72 61 3a 21 31 3b 76 61 72 20 73 61 3d 74 79 70 65 6f 66 20 71 2e 42 69 67 49 6e 74 Data Ascii: Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var q=this\|\|self;var r,t;a:{for(var pa=["CLOSURE_FLAGS"],u=q,qa=0;qa<pa.length;qa++)if(u=u[pa[qa]],u==null){t=null;break a}t=u}var ra=t&&t[610401301];r=ra!=null?ra:!1;var sa=typeof q.BigInt
2024-12-10 13:21:24 UTC	1390	IN	Data Raw: 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 69 66 28 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 5b 65 5d 2c 65 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 41 61 28 29 3b 76 61 72 20 47 61 3d 79 28 29 3f 21 31 3a 78 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 78 28 22 4d 53 49 45 22 29 3b 78 28 22 45 64 67 65 22 29 3b 21 78 28 22 47 65 63 6b 6f 22 29 7c 7c 76 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 78 28 22 45 64 67 65 22 29 7c 7c 78 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 78 28 22 4d 53 49 45 22 29 7c 7c 78 28 22 45 64 67 65 22 29 3b 76 28 29 2e 74 6f 4c 6f Data Ascii: a==="string"?a.split(""):a,e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return!0;return!1};Aa();var Ga=y()?!1:x("Trident")\|\|x("MSIE");x("Edge");!x("Gecko")\|\|v().toLowerCase().indexOf("webkit")!=-1&&!x("Edge")\|\|x("Trident")\|\|x("MSIE")\|\|x("Edge");v().toLo
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 37 35 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 2c 62 29 7b 47 28 62 2c 28 61 7c 33 34 29 26 2d 33 30 39 34 31 29 7d 3b 76 61 72 20 4e 61 3d 7b 7d 2c 4f 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 61 2e 67 21 3d 3d 4f 61 29 7d 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 72 65 74 75 72 6e 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 Data Ascii: 75)}function Ma(a,b){G(b,(a\|34)&-30941)};var Na={},Oa={};function Pa(a){return!(!a\|\|typeof a!=="object"\|\|a.g!==Oa)}function Qa(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object}function H(a){return!Array.isArray(a)\|\|a.leng
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 61 3d 62 74 6f 61 28 62 29 7d 65 6c 73 65 7b 62 3d 3d 3d 76 6f 69 64 20 30 26 26 28 62 3d 30 29 3b 69 66 28 21 41 29 7b 41 3d 7b 7d 3b 63 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 2e 73 70 6c 69 74 28 22 22 29 3b 0a 64 3d 5b 22 2b 2f 3d 22 2c 22 2b 2f 22 2c 22 2d 5f 3d 22 2c 22 2d 5f 2e 22 2c 22 2d Data Ascii: ng.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);a=btoa(b)}else{b===void 0&&(b=0);if(!A){A={};c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split("");d=["+/=","+/","-_=","-_.","-
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 76 61 72 20 64 3d 45 28 61 29 3b 69 66 28 64 26 32 29 72 65 74 75 72 6e 20 61 3b 62 26 26 28 62 3d 64 3d 3d 3d 30 7c 7c 21 21 28 64 26 33 32 29 26 26 21 28 64 26 36 34 7c 7c 21 28 64 26 31 36 29 29 29 3b 72 65 74 75 72 6e 20 62 3f 28 47 28 61 2c 28 64 7c 33 34 29 26 2d 31 32 32 39 33 29 2c 61 29 3a 58 61 28 61 2c 5a 61 2c 64 26 34 3f 4d 61 3a 63 2c 21 30 2c 21 30 29 7d 61 2e 73 3d 3d 3d 4e 61 26 26 28 63 3d 61 2e 68 2c 64 3d 46 28 63 29 2c 61 3d 64 26 32 3f 61 3a 24 61 28 61 2c 63 2c 64 2c 21 30 29 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: :new Uint8Array(a);if(Array.isArray(a)){var d=E(a);if(d&2)return a;b&&(b=d===0\|\|!!(d&32)&&!(d&64\|\|!(d&16)));return b?(G(a,(d\|34)&-12293),a):Xa(a,Za,d&4?Ma:c,!0,!0)}a.s===Na&&(c=a.h,d=F(c),a=d&2?a:$a(a,c,d,!0));return a}}function $a(a,b,c,d){a=a.constructo
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 28 65 29 26 26 65 2e 73 69 7a 65 3d 3d 3d 30 29 26 26 28 65 3d 6e 75 6c 6c 29 2c 65 3d 3d 6e 75 6c 6c 26 26 28 6d 3d 21 30 29 2c 65 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 44 3d 76 6f 69 64 20 30 3b 28 28 44 3d 6c 29 21 3d 6e 75 6c 6c 3f 44 3a 6c 3d 7b 7d 29 5b 6e 5d 3d 65 7d 6d 7c 7c 28 6c 3d 67 29 3b 69 66 28 6c 29 66 6f 72 28 76 61 72 20 56 20 69 6e 20 6c 29 7b 6d 3d 6c 3b 62 72 65 61 6b 20 62 7d 6d 3d 6e 75 6c 6c 7d 67 3d 6d 3d 3d 6e 75 6c 6c 3f 64 21 3d 6e 75 6c 6c 3a 6d 21 3d 3d 64 7d 66 6f 72 28 3b 63 3e 30 3b 63 2d 2d 29 7b 6c 3d 66 5b 63 2d 31 5d 3b 69 66 28 21 28 6c 3d 3d 6e 75 6c 6c 7c 7c 48 28 6c 29 7c 7c 50 61 28 6c 29 26 26 6c 2e 73 69 7a 65 3d 3d 3d 30 29 29 62 72 65 61 6b 3b 76 61 72 20 70 3d 0a 21 30 7d 69 66 28 66 21 3d 3d 61 7c 7c 67 7c 7c Data Ascii: (e)&&e.size===0)&&(e=null),e==null&&(m=!0),e!=null){var D=void 0;((D=l)!=null?D:l={})[n]=e}m\|\|(l=g);if(l)for(var V in l){m=l;break b}m=null}g=m==null?d!=null:m!==d}for(;c>0;c--){l=f[c-1];if(!(l==null\|\|H(l)\|\|Pa(l)&&l.size===0))break;var p=!0}if(f!==a\|\|g\|\|
2024-12-10 13:21:25 UTC	1390	IN	Data Raw: 43 54 55 52 45 20 50 41 52 41 4d 20 54 52 41 43 4b 20 4d 41 50 20 54 41 42 4c 45 20 43 41 50 54 49 4f 4e 20 43 4f 4c 47 52 4f 55 50 20 43 4f 4c 20 54 42 4f 44 59 20 54 48 45 41 44 20 54 46 4f 4f 54 20 54 52 20 54 44 20 54 48 20 53 45 4c 45 43 54 20 44 41 54 41 4c 49 53 54 20 4f 50 54 47 52 4f 55 50 20 4f 50 54 49 4f 4e 20 4f 55 54 50 55 54 20 50 52 4f 47 52 45 53 53 20 4d 45 54 45 52 20 46 49 45 4c 44 53 45 54 20 4c 45 47 45 4e 44 20 44 45 54 41 49 4c 53 20 53 55 4d 4d 41 52 59 20 4d 45 4e 55 20 44 49 41 4c 4f 47 20 53 4c 4f 54 20 43 41 4e 56 41 53 20 46 4f 4e 54 20 43 45 4e 54 45 52 20 41 43 52 4f 4e 59 4d 20 42 41 53 45 46 4f 4e 54 20 42 49 47 20 44 49 52 20 48 47 52 4f 55 50 20 53 54 52 49 4b 45 20 54 54 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 63 6f 6e Data Ascii: CTURE PARAM TRACK MAP TABLE CAPTION COLGROUP COL TBODY THEAD TFOOT TR TD TH SELECT DATALIST OPTGROUP OPTION OUTPUT PROGRESS METER FIELDSET LEGEND DETAILS SUMMARY MENU DIALOG SLOT CANVAS FONT CENTER ACRONYM BASEFONT BIG DIR HGROUP STRIKE TT".split(" ").con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.10	49935	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	816	OUT	GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmTWzest5pHO4UQSyJUahOzu5qAREnxSNAwgaqrPipeQgTGAqOYjuceBhei7Orku45Lwl_wEGHDmS61jiIF6c5QbEhgpbTGhLHHE HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.10	49943	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	807	OUT	GET /pixel?google_nid=bt&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.10	49948	52.19.235.127	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	818	OUT	GET /cookie-sync/adx?google_gid=CAESED34_s-fwhdATnOyfGyMuaQ&google_cver=1&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-12-10 13:21:24 UTC	850	IN	HTTP/1.1 303 See Other Date: Tue, 10 Dec 2024 13:21:24 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AACFsU7OsIEAABcC-2-snQ; Domain=bidr.io; expires=Fri, 09 Jan 2026 08:21:24 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Fri, 09 Jan 2026 08:21:24 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.10	49951	52.57.179.60	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:24 UTC	922	OUT	GET /ping_match.gif?scc=1&ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=qY7E4Feb1Tl0b05
2024-12-10 13:21:25 UTC	885	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 10 Dec 2024 13:21:24 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmS_sI3Met2tfS7PHfkRs4b6uepQgv5mvBAo5TEpr8HOqOrKOQTRgABBKH8SSzUV7fNUtM8X6Iz2trb-LJiEzf6pCS54yJzp1SM Pragma: no-cache Server: PingMatch/v2.0.30-814-g4e6373a#rel-ec2-master i-00fef2d74d82f759c@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=qY7E4Feb1Tl0b05; Domain=.w55c.net; Expires=Sat, 10 Jan 2026 13:21:24 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchgoogle=5; Domain=.w55c.net; Expires=Thu, 09 Jan 2025 13:21:24 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.10	49961	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:25 UTC	815	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:26 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1 Date: Tue, 10 Dec 2024 13:21:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:26 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 47 79 73 6e 74 58 41 5a 33 63 4d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.10	49962	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:25 UTC	799	OUT	GET /pixel?google_nid=appnexus&google_cm&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:26 UTC	655	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&code=CAESEAucPc0n90JY6KGIBH5wU3E&google_cver=1 Date: Tue, 10 Dec 2024 13:21:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 290 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:26 UTC	290	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 31 30 31 26 61 6d 70 3b 63 6f 64 65 3d 43 41 45 53 45 41 75 63 50 63 30 6e 39 30 4a 59 36 4b 47 49 42 48 35 77 55 33 45 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ib.adnxs.com/setuid?entity=101&code=CAESEAucPc0n90JY6KGIBH5wU3E&google_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.10	49981	104.18.26.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	731	OUT	GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:26 UTC	1252	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 13:21:26 GMT Content-Length: 0 Connection: close Location: /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 CF-Ray: 8efd89bcee3a0c7c-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 13:21:26 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPS=483; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:26 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=483; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:26 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HOv5FVNUt22BqKxweB%2FtAZaGC30eNsK8GGQHeXWp%2FEb46AOJ8GGvbI6Fuxov668YA6G%2B%2Beb46dU0Mm6qXg%2Fc67qU45doKNL65eRGWmkeLlJekJIqownOBTT5xtMgZK8%2FYlompL9GCIZluw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.10	49969	172.217.21.36	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	792	OUT	GET /ads/measurement/l?ebcid=ALh7CaSBfOT9ulCK3PrA9y4EdQz9KAbtN8Hiv_1j_aaYfTZT_WOrK0YpVvvliUDQkMrbIRKU_lFSH3x0SKkO8YJ9-3fie92hzw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:26 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.10	49972	142.250.181.14	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	962	OUT	GET /f/AGSKWxVcGlQzfcKTB4L0bodyhNKeMXAxECbmSUhOByYuWLDO2sqBmNNkVd-Mb0uXw_0P_J3YzvsSCKsUJFqMFwUxBH8V2-3zneTQ-gA2tSv5WT4c64-pV6g7CdXY2TSrA4nFiSixPuO_kg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzMzODM2ODgwLDgwODAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly90Lmx5LyIsbnVsbCxbWzgsIng4S0pFcU5vUFdJIl0sWzksImVuLVVTIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	1944	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 10 Dec 2024 13:21:26 GMT Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-WzrL8dC2nrEqy4b34-6ESw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjytHikmLw1pBiUAzbySTx9SWTGhA7pc9gDQDi1pvnWCcDsdHa86wOQJz07zxrARAbKlxitQdix6JLrJ5ArNpzidUYiO-vu8T6HIhnnL_MugCIiySusDYAMcPXK6wcQCzEw3Gt4eEuNoEbW-bfYVbSSMovjE_OzyspykwqLckvSktOSy1OLSpLLYo3MjAyMTQysNAzMI4vMAAAvExCZg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:27 UTC	1944	IN	Data Raw: 62 31 36 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 62 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 78 28 62 45 2c 5f 2e Data Ascii: b16if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var bE=function(a){this.l=_.u(a)};_.x(bE,_.
2024-12-10 13:21:27 UTC	901	IN	Data Raw: 41 54 46 4e 47 56 43 4b 70 48 31 64 2d 78 75 2d 6e 58 47 67 35 58 68 48 54 5f 66 63 48 4c 5a 57 32 6f 4c 62 52 34 62 53 74 5a 53 68 75 33 55 68 72 53 6b 71 62 4b 76 2d 6c 53 4e 30 34 5f 64 36 5f 58 64 43 4d 74 6b 6b 76 63 58 33 47 4d 77 67 30 76 6d 67 4d 77 4a 49 69 42 6b 71 71 66 56 75 53 6b 45 78 71 49 51 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 78 32 32 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 5c 78 35 62 37 5c 78 35 64 5c 78 35 64 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 36 63 64 34 32 35 38 39 64 61 33 33 62 37 65 39 5c 5c 5c 78 32 32 2c 6e 75 6c 6c 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e Data Ascii: ATFNGVCKpH1d-xu-nXGg5XhHT_fcHLZW2oLbR4bStZShu3UhrSkqbKv-lSN04_d6_XdCMtkkvcX3GMwg0vmgMwJIiBkqqfVuSkExqIQ\\\\u003d\\\\u003d\\\x22\x5d,\x5bnull,\x5b7\x5d\x5d,null,null,null,null,null,\\\x226cd42589da33b7e9\\\x22,null,\x5bnull,null,null,\\\x22https:\/\/fundin
2024-12-10 13:21:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.10	49976	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	851	OUT	GET /pixel?google_nid=zemanta&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&google_hm=NzhfbDVadzZhVVZ0U1cyT3g0Tzc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.10	49979	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	839	OUT	GET /pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.10	49980	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	850	OUT	GET /pixel?google_nid=adkernel&google_hm=QTIyOTE1Mzk1NDM1Mjc5ODM0NzE&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.10	49984	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	2570	OUT	GET /xbbe/pixel?d=CJfRrNYFEPbY6t8FGPDFnaMCMAE&v=APEucNXfFZwzoOLiXEkNNNiNJY5P7KyF9R7DUKoAm8KzM3JqEmY0xRmkwb79hh6wcotQh2svA3CcUxXiacIj76_stVfAXUfwgYDX0R7MICgTyV51NAv8cbA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-5561763581314444&output=html&h=280&adk=899877383&adf=908843369&pi=t.aa~a.1108372886~rp.3&w=350&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&to=qs&pwprc=8670500221&format=350x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836880135&bpp=1&bdt=19503&idt=-M&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie=ID%3D0eedbc328c9e1b8c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_MY6CCRyapwpMp0atzI4NqI_LoLqOg&gpic=UID%3D00000fbb3eab27e6%3AT%3D1733836876%3ART%3D1733836876%3AS%3DALNI_Ma15gTzUKvC5eLbWCDbe6yPBKUgRg&eo_id_str=ID%3D6ca20a923ba8ba6c%3AT%3D1733836876%3ART%3D1733836876%3AS%3DAA-AfjY-TXleaekA-szal1s5nnqM&prev_fmts=0x0%2C1110x28 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	546	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:27 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:27 UTC	675	IN	Data Raw: 32 39 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 69 64 3d 39 63 61 31 36 35 61 39 2d 64 39 66 65 2d 32 66 66 36 2d 64 38 33 64 2d 64 31 34 35 61 38 30 62 30 64 33 37 26 67 64 70 72 3d 30 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 Data Ascii: 29c<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.d
2024-12-10 13:21:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.10	49985	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	860	OUT	GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmRUudNuwZWE_do6PVkcRHvSV-rRYMuoMjkVlHmunBoFZasRhg5nMFyWDKwC--tLznPlkhqOdoPz5t2kf-P6uiYTOu0np7Apmw3Z&google_hm=NDYzMDI0NDUyMDY5MDcwMDAyOQ== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.10	50000	35.190.0.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:26 UTC	856	OUT	GET /google_pixel?google_gid=CAESEFYjuaqlRD6JjV2RcsrvwSw&google_cver=1&google_push=AXcoOmSJrFy3UtQJ72UzESzWf4NxDCOosGlxBjqp9SrQd0bqlCXu8Q-p3Wf-rr5RpOlX__osjut54xd85hY0UtgFhSQI3_x79HKInkE HTTP/1.1 Host: ads.travelaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _tracker=%7B%22UUID%22%3A%22521F23B3-5E25-4671-0E7E-512BFBB73E0C%22%7D
2024-12-10 13:21:27 UTC	765	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Tue, 10 Dec 2024 13:21:27 GMT Content-Length: 0 Location: https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmSJrFy3UtQJ72UzESzWf4NxDCOosGlxBjqp9SrQd0bqlCXu8Q-p3Wf-rr5RpOlX__osjut54xd85hY0UtgFhSQI3_x79HKInkE Set-Cookie: _tracker=%7B%22UUID%22%3A%22521F23B3-5E25-4671-0E7E-512BFBB73E0C%22%7D; Path=/; Expires=Sat, 10 Jan 2026 13:21:27 GMT; Max-Age=34214399; Secure; SameSite=None X-Engine-Version: 0.0.0 X-Host: tde-deliveryengine-production-7b68cc5f9-lcq7g P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR LAW CUR DEV PSA PSD IVA OUR BUS UNI COM NAV INT CNT LOC" Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.10	50001	188.166.17.21	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	844	OUT	GET /adxcookie?id=&google_gid=CAESELqoJB2ILVOLH5_tSMp0hks&google_cver=1&google_push=AXcoOmQZ9AdKlnbeJTyLIQOgeg_irgSNHpembbXdwR5hZTKgt71EH1K5sVztA2LZNcTwLbpA7hv1EF7GFHEe6T8OoaTYsETXYxkiBIE HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __kuid=3e7b9369-0658-4550-b77a-a6f2d90c239b.503050882
2024-12-10 13:21:27 UTC	515	IN	HTTP/1.1 302 302 Date: Tue, 10 Dec 2024 13:21:27 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=3e7b9369-0658-4550-b77a-a6f2d90c239b.503050887; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://cm.g.doubleclick.net/pixel?google_nid=bt&google_push=AXcoOmQZ9AdKlnbeJTyLIQOgeg_irgSNHpembbXdwR5hZTKgt71EH1K5sVztA2LZNcTwLbpA7hv1EF7GFHEe6T8OoaTYsETXYxkiBIE Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.10	49990	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	652	OUT	GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmTWzest5pHO4UQSyJUahOzu5qAREnxSNAwgaqrPipeQgTGAqOYjuceBhei7Orku45Lwl_wEGHDmS61jiIF6c5QbEhgpbTGhLHHE HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.10	49988	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	697	OUT	GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmRFEjslpgI0oFXHAXY0LiKbTyg5yIGVWbOLgVlORbwKFzLWzHagieEMCHDiKAs6h9yF7ylEhtHgmpPMAWa9tqvwVEky4UGq5SFW&google_hm=22210ca7d02b196e2njvxb00m4ihpoje HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.10	49989	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	643	OUT	GET /pixel?google_nid=bt&google_push=AXcoOmTShAhdEcTarxC4vnQSsYDvfno8IIvHJPTHyC596g4o5Lz2sik1u-zGA4lfuVbcatFDvAe9ozp0IBYdiRDPy8T-XldSSywc0ihf HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.10	49999	52.57.179.60	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	931	OUT	GET /ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmT6jjqhi0BrUuVNWpGVnr43MSt4bBfR9inK9Bh4wxCeM2-kcmSX4Sy4cMsg1OuvLKC9ls-o6x6rIv5BD-6D15OwP3ckElsKUFQ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=qY7E4Feb1Tl0b05; matchgoogle=5
2024-12-10 13:21:27 UTC	885	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 10 Dec 2024 13:21:26 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=cVk3RTRGZWIxVGwwYjA1&google_gid=CAESEAYJ0NMivPPK6wAxCgJBXUA&google_cver=1&google_push=AXcoOmT6jjqhi0BrUuVNWpGVnr43MSt4bBfR9inK9Bh4wxCeM2-kcmSX4Sy4cMsg1OuvLKC9ls-o6x6rIv5BD-6D15OwP3ckElsKUFQ Pragma: no-cache Server: PingMatch/v2.0.30-814-g4e6373a#rel-ec2-master i-04374aed1e7345acc@eu-central-1a@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=qY7E4Feb1Tl0b05; Domain=.w55c.net; Expires=Sat, 10 Jan 2026 13:21:27 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchgoogle=5; Domain=.w55c.net; Expires=Thu, 09 Jan 2025 13:21:27 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.10	49991	172.217.17.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	362	OUT	GET /dcm/dcmads.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-dcm-tag Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-dcm-tag" Report-To: {"group":"ads-dcm-tag","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-dcm-tag"}]} Content-Length: 18178 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 10 Dec 2024 13:21:24 GMT Expires: Tue, 10 Dec 2024 14:21:24 GMT Cache-Control: public, max-age=3600 Age: 3 Last-Modified: Thu, 05 Dec 2024 18:26:02 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	591	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 Data Ascii: (function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.va
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 68 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 Data Ascii: );for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};h("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{c
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 3a 6e 75 6c 6c 7d 0a 76 61 72 20 6c 61 3d 68 61 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 66 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 6c 61 29 6c 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b Data Ascii: :null}var la=ha,ma=function(a,b){a.prototype=fa(b.prototype);a.prototype.constructor=a;if(la)la(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 71 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 72 2c 74 3b 61 3a 7b 66 6f 72 28 76 61 72 20 70 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 75 3d 71 2c 71 61 3d 30 3b 71 61 3c 70 61 2e 6c 65 6e 67 74 68 3b 71 61 2b 2b 29 69 66 28 75 3d 75 5b 70 61 5b 71 61 5d 5d 2c 75 3d 3d 6e 75 6c 6c 29 7b 74 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 74 3d 75 7d 76 61 72 20 72 61 3d 74 26 26 74 5b 36 31 30 34 30 31 33 30 31 5d 3b 72 3d 72 61 21 3d 6e 75 6c 6c 3f 72 61 3a 21 31 3b 76 61 72 20 73 61 3d 74 79 70 65 6f 66 20 71 2e 42 69 67 49 6e 74 Data Ascii: Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var q=this\|\|self;var r,t;a:{for(var pa=["CLOSURE_FLAGS"],u=q,qa=0;qa<pa.length;qa++)if(u=u[pa[qa]],u==null){t=null;break a}t=u}var ra=t&&t[610401301];r=ra!=null?ra:!1;var sa=typeof q.BigInt
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 69 66 28 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 5b 65 5d 2c 65 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 41 61 28 29 3b 76 61 72 20 47 61 3d 79 28 29 3f 21 31 3a 78 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 78 28 22 4d 53 49 45 22 29 3b 78 28 22 45 64 67 65 22 29 3b 21 78 28 22 47 65 63 6b 6f 22 29 7c 7c 76 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 78 28 22 45 64 67 65 22 29 7c 7c 78 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 78 28 22 4d 53 49 45 22 29 7c 7c 78 28 22 45 64 67 65 22 29 3b 76 28 29 2e 74 6f 4c 6f Data Ascii: a==="string"?a.split(""):a,e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return!0;return!1};Aa();var Ga=y()?!1:x("Trident")\|\|x("MSIE");x("Edge");!x("Gecko")\|\|v().toLowerCase().indexOf("webkit")!=-1&&!x("Edge")\|\|x("Trident")\|\|x("MSIE")\|\|x("Edge");v().toLo
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 37 35 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 2c 62 29 7b 47 28 62 2c 28 61 7c 33 34 29 26 2d 33 30 39 34 31 29 7d 3b 76 61 72 20 4e 61 3d 7b 7d 2c 4f 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 61 2e 67 21 3d 3d 4f 61 29 7d 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 72 65 74 75 72 6e 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 Data Ascii: 75)}function Ma(a,b){G(b,(a\|34)&-30941)};var Na={},Oa={};function Pa(a){return!(!a\|\|typeof a!=="object"\|\|a.g!==Oa)}function Qa(a){return a!==null&&typeof a==="object"&&!Array.isArray(a)&&a.constructor===Object}function H(a){return!Array.isArray(a)\|\|a.leng
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 61 3d 62 74 6f 61 28 62 29 7d 65 6c 73 65 7b 62 3d 3d 3d 76 6f 69 64 20 30 26 26 28 62 3d 30 29 3b 69 66 28 21 41 29 7b 41 3d 7b 7d 3b 63 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 2e 73 70 6c 69 74 28 22 22 29 3b 0a 64 3d 5b 22 2b 2f 3d 22 2c 22 2b 2f 22 2c 22 2d 5f 3d 22 2c 22 2d 5f 2e 22 2c 22 2d Data Ascii: ng.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);a=btoa(b)}else{b===void 0&&(b=0);if(!A){A={};c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split("");d=["+/=","+/","-_=","-_.","-
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 76 61 72 20 64 3d 45 28 61 29 3b 69 66 28 64 26 32 29 72 65 74 75 72 6e 20 61 3b 62 26 26 28 62 3d 64 3d 3d 3d 30 7c 7c 21 21 28 64 26 33 32 29 26 26 21 28 64 26 36 34 7c 7c 21 28 64 26 31 36 29 29 29 3b 72 65 74 75 72 6e 20 62 3f 28 47 28 61 2c 28 64 7c 33 34 29 26 2d 31 32 32 39 33 29 2c 61 29 3a 58 61 28 61 2c 5a 61 2c 64 26 34 3f 4d 61 3a 63 2c 21 30 2c 21 30 29 7d 61 2e 73 3d 3d 3d 4e 61 26 26 28 63 3d 61 2e 68 2c 64 3d 46 28 63 29 2c 61 3d 64 26 32 3f 61 3a 24 61 28 61 2c 63 2c 64 2c 21 30 29 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: :new Uint8Array(a);if(Array.isArray(a)){var d=E(a);if(d&2)return a;b&&(b=d===0\|\|!!(d&32)&&!(d&64\|\|!(d&16)));return b?(G(a,(d\|34)&-12293),a):Xa(a,Za,d&4?Ma:c,!0,!0)}a.s===Na&&(c=a.h,d=F(c),a=d&2?a:$a(a,c,d,!0));return a}}function $a(a,b,c,d){a=a.constructo
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 28 65 29 26 26 65 2e 73 69 7a 65 3d 3d 3d 30 29 26 26 28 65 3d 6e 75 6c 6c 29 2c 65 3d 3d 6e 75 6c 6c 26 26 28 6d 3d 21 30 29 2c 65 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 44 3d 76 6f 69 64 20 30 3b 28 28 44 3d 6c 29 21 3d 6e 75 6c 6c 3f 44 3a 6c 3d 7b 7d 29 5b 6e 5d 3d 65 7d 6d 7c 7c 28 6c 3d 67 29 3b 69 66 28 6c 29 66 6f 72 28 76 61 72 20 56 20 69 6e 20 6c 29 7b 6d 3d 6c 3b 62 72 65 61 6b 20 62 7d 6d 3d 6e 75 6c 6c 7d 67 3d 6d 3d 3d 6e 75 6c 6c 3f 64 21 3d 6e 75 6c 6c 3a 6d 21 3d 3d 64 7d 66 6f 72 28 3b 63 3e 30 3b 63 2d 2d 29 7b 6c 3d 66 5b 63 2d 31 5d 3b 69 66 28 21 28 6c 3d 3d 6e 75 6c 6c 7c 7c 48 28 6c 29 7c 7c 50 61 28 6c 29 26 26 6c 2e 73 69 7a 65 3d 3d 3d 30 29 29 62 72 65 61 6b 3b 76 61 72 20 70 3d 0a 21 30 7d 69 66 28 66 21 3d 3d 61 7c 7c 67 7c 7c Data Ascii: (e)&&e.size===0)&&(e=null),e==null&&(m=!0),e!=null){var D=void 0;((D=l)!=null?D:l={})[n]=e}m\|\|(l=g);if(l)for(var V in l){m=l;break b}m=null}g=m==null?d!=null:m!==d}for(;c>0;c--){l=f[c-1];if(!(l==null\|\|H(l)\|\|Pa(l)&&l.size===0))break;var p=!0}if(f!==a\|\|g\|\|
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 43 54 55 52 45 20 50 41 52 41 4d 20 54 52 41 43 4b 20 4d 41 50 20 54 41 42 4c 45 20 43 41 50 54 49 4f 4e 20 43 4f 4c 47 52 4f 55 50 20 43 4f 4c 20 54 42 4f 44 59 20 54 48 45 41 44 20 54 46 4f 4f 54 20 54 52 20 54 44 20 54 48 20 53 45 4c 45 43 54 20 44 41 54 41 4c 49 53 54 20 4f 50 54 47 52 4f 55 50 20 4f 50 54 49 4f 4e 20 4f 55 54 50 55 54 20 50 52 4f 47 52 45 53 53 20 4d 45 54 45 52 20 46 49 45 4c 44 53 45 54 20 4c 45 47 45 4e 44 20 44 45 54 41 49 4c 53 20 53 55 4d 4d 41 52 59 20 4d 45 4e 55 20 44 49 41 4c 4f 47 20 53 4c 4f 54 20 43 41 4e 56 41 53 20 46 4f 4e 54 20 43 45 4e 54 45 52 20 41 43 52 4f 4e 59 4d 20 42 41 53 45 46 4f 4e 54 20 42 49 47 20 44 49 52 20 48 47 52 4f 55 50 20 53 54 52 49 4b 45 20 54 54 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 63 6f 6e Data Ascii: CTURE PARAM TRACK MAP TABLE CAPTION COLGROUP COL TBODY THEAD TFOOT TR TD TH SELECT DATALIST OPTGROUP OPTION OUTPUT PROGRESS METER FIELDSET LEGEND DETAILS SUMMARY MENU DIALOG SLOT CANVAS FONT CENTER ACRONYM BASEFONT BIG DIR HGROUP STRIKE TT".split(" ").con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.10	49994	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	5148	OUT	GET /dbm/ad?dbm_c=AKAmf-AUEgyA_Sss1Uu1TgBySXtVgHFL5J5traaVxQpRWrVEJkKloqBxIj4ZGJPPENvUec8lGUl7aAjdtcY1qJsNcXvN_TdcforqV7max7OFda6r3a7Ro0GLJioENKzK__mC_rVCbRF3jhJ0Ugo0Z8B4r49D5RXpZ2JKmjCoFpR4xExQQ8brf_ld_xSQFyo2ox_AZv4ghTXbF5eggjqRY_3Mk8dO1uhOXMFzJarXTS693QYX6xlSBtk&cry=1&dbm_d=AKAmf-BjT_SJ1rePRZwIwtLZjOVTfBSd7xaAsxIyWgUBNeZfunBAt-iF2jYEqNLQAYc2rdhqZhD_oFP7ENCBbNiMhTW2LrVTe1x0VSDQDSL0s5mGEbzJPqL8aYpbN3ghnMdR0sCbXVDTbQ7uWMaNMtdJUizthvS-Nzrfyms9bgxRvtZWOXkYLFTap1F9T98q9fWd4wCgWnR7Am_6-Ab9iMfTGvAQRu-ZGW2zFKEO8UMw5Kx9YHXCRm3u_bfzkA9bl_wLNt0CNJKDfp4nmIbLHx4Jjvie50cIibPLmgXkBx6XeWOzSPBLhZAvA2Vf1DqI2psJn6Eo0OLoiPzXFgXNfRZGbZajdFQxznCEJO0dy739A6oHRFWj_y3hSmuWX_p5iibI59Ly8zo3t76AmBoAIP_pDpFA_56bp5C9Clnj89MIYUp7vMoIuVh20eS31LDdO7zv3NVc0ZS5GnDEl0vrPw0LOKpFiJZz42m7Zaqv4ty8SdpOgrEKvtRqMOkupdgimSZWkzSMBxaekqWxQnKANRhE14T3hJAHllta2C6Z-eo83qMeT3VaAqWq-XIXue10nmTuvBWQGAuHGMQIHcTo-i6LjPQo4G8Joc3i7NJB4y_Hkco4FLeBFYERHGgKCa4D9JXmfPcVM7u0t-tQ-zxkXXqcI_uAG-uRpFtaI4JS5yMUQlKf0R_5ZU4-c66aIRYUbi81--b0W5ipc112qHEPrASTGAj89ClJictpiIracd [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/pagead/html/r20241205/r20190131/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:27 UTC	882	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; expires=Sun, 08-Jun-2025 13:21:27 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:27 UTC	508	IN	Data Raw: 36 64 32 64 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 64 69 76 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 61 62 67 63 70 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 72 69 67 68 74 3a 30 70 78 3b 74 6f 70 3a 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 33 Data Ascii: 6d2dif (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:9px;right:0px;top:0px;position:absolute;width:3
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 63 62 62 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 36 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 3b 7d 2e 63 62 62 20 73 76 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 73 74 72 6f 6b 65 3a 23 30 30 61 65 63 64 3b 66 69 6c 6c 3a 23 30 30 61 65 63 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 3b 7d 2e 61 62 67 62 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 36 70 78 Data Ascii: or:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 2e 36 35 2c 37 2e 37 35 61 30 2e 36 35 2c 30 2e 36 35 2c 30 2c 31 2c 30 2c 2d 31 2e 33 2c 30 4c 35 2e 33 35 2c 31 30 2e 37 35 61 30 2e 39 2c 30 2e 39 2c 30 2c 30 2c 30 2c 31 2e 33 2c 30 2e 38 4c 31 32 2e 37 2c 38 2e 32 51 31 33 2e 37 2c 37 2e 35 2c 31 32 2e 37 2c 36 2e 37 4c 33 2e 33 2c 31 2e 36 51 32 2e 32 2c 31 2e 33 2c 31 2e 38 2c 32 2e 35 4c 31 2e 38 2c 31 32 2e 35 51 32 2e 32 2c 31 33 2e 39 2c 33 2e 33 2c 31 33 2e 33 4c 34 2e 38 2c 31 32 2e 35 41 30 2e 33 2c 30 2e 33 2c 30 2c 31 2c 30 2c 34 2e 32 2c 31 31 2e 33 5a 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 70 61 74 68 5c 78 33 65 5c 78 33 63 2f 73 76 67 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c Data Ascii: .65,7.75a0.65,0.65,0,1,0,-1.3,0L5.35,10.75a0.9,0.9,0,0,0,1.3,0.8L12.7,8.2Q13.7,7.5,12.7,6.7L3.3,1.6Q2.2,1.3,1.8,2.5L1.8,12.5Q2.2,13.9,3.3,13.3L4.8,12.5A0.3,0.3,0,1,0,4.2,11.3Z\x22\x3e\x3c/path\x3e\x3c/svg\x3e\x3c/div\x3e\x3c/div\x3e\x3c/div\x3e\x3cdiv id\
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 50 63 74 55 69 4d 77 45 4f 4f 5a 75 50 42 5f 33 63 4f 4f 5a 6f 78 45 30 69 67 41 4b 34 32 37 2d 4b 37 42 77 6c 2d 32 34 71 70 74 6a 78 36 34 33 62 2d 57 74 6a 51 49 4a 5a 52 4f 70 69 5f 64 39 51 45 43 52 6f 70 78 50 4d 67 44 61 4a 76 42 5f 35 77 53 51 33 79 73 68 39 79 43 36 64 79 65 6b 5a 58 49 47 39 70 79 79 58 57 4e 38 48 52 31 4a 71 77 66 58 77 46 75 59 41 71 42 6e 35 43 31 4b 39 31 39 79 7a 69 4f 48 35 46 54 68 4d 43 45 67 51 38 37 63 56 50 34 6e 76 32 38 62 4f 46 4f 6e 44 73 66 75 6c 39 31 44 6b 31 74 62 55 71 38 4f 78 5f 77 67 41 64 31 54 57 72 79 69 30 50 46 71 41 6a 7a 53 43 77 72 32 4b 55 4b 4f 69 78 4d 56 2d 77 39 76 6a 78 76 6d 48 75 75 49 4e 4d 6b 50 4b 5f 5a 6f 74 41 5f 78 33 66 57 6c 61 50 74 39 48 45 56 37 42 32 61 70 6f 4f 51 44 74 6d 46 Data Ascii: PctUiMwEOOZuPB_3cOOZoxE0igAK427-K7Bwl-24qptjx643b-WtjQIJZROpi_d9QECRopxPMgDaJvB_5wSQ3ysh9yC6dyekZXIG9pyyXWN8HR1JqwfXwFuYAqBn5C1K919yziOH5FThMCEgQ87cVP4nv28bOFOnDsful91Dk1tbUq8Ox_wgAd1TWryi0PFqAjzSCwr2KUKOixMV-w9vjxvmHuuINMkPK_ZotA_x3fWlaPt9HEV7B2apoOQDtmF
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 6d 6c 73 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6d 6c 73 6b 66 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 68 65 69 67 68 74 3a 35 30 25 3b 77 69 64 74 68 3a 35 30 25 3b 7d 2e 6d 6c 73 64 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 2c 31 38 39 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6d 6c 73 64 6b 66 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 6c 73 6b 66 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 6c 73 64 6b 66 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 Data Ascii: gn-items:center;}.mls{animation:mlskf 2s linear infinite;height:50%;width:50%;}.mlsd{stroke-dasharray:1,189;stroke-dashoffset:0;animation:mlsdkf 1.4s ease-in-out infinite;}@keyframes mlskf{100%{transform:rotate(360deg);}}@keyframes mlsdkf{0%{stroke-dashar
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 69 6d 30 41 61 71 39 38 79 6c 65 62 62 74 68 59 61 44 45 32 51 51 41 53 43 35 6e 63 6b 50 59 4d 6b 47 6f 41 47 62 31 74 50 64 4b 63 67 42 43 61 67 44 41 63 67 44 6d 77 53 71 42 4e 38 42 54 39 44 47 30 64 75 56 4b 74 58 64 51 59 69 55 41 62 6a 71 47 50 31 75 63 6c 6b 79 4c 69 33 30 48 78 50 51 30 66 52 2d 4d 47 5f 59 54 71 6a 53 58 48 4c 77 4f 5a 72 67 72 74 61 38 49 4c 69 32 59 70 31 53 39 4e 38 5f 43 5a 64 4f 5f 75 53 44 46 72 6c 56 31 57 44 38 4d 59 59 5a 67 69 76 70 79 4e 32 58 48 65 5a 6a 36 30 6e 79 5a 56 50 48 56 4a 54 51 53 4c 41 65 43 6e 72 47 35 4a 30 42 4c 73 77 63 37 4d 66 34 67 73 77 46 44 78 38 53 76 63 51 69 73 7a 48 45 47 65 56 41 73 74 47 4f 6d 5f 64 65 75 6d 31 45 41 78 52 62 55 4d 39 73 65 43 4b 79 75 6e 64 48 31 7a 47 71 37 31 52 79 2d Data Ascii: im0Aaq98ylebbthYaDE2QQASC5nckPYMkGoAGb1tPdKcgBCagDAcgDmwSqBN8BT9DG0duVKtXdQYiUAbjqGP1uclkyLi30HxPQ0fR-MG_YTqjSXHLwOZrgrta8ILi2Yp1S9N8_CZdO_uSDFrlV1WD8MYYZgivpyN2XHeZj60nyZVPHVJTQSLAeCnrG5J0BLswc7Mf4gswFDx8SvcQiszHEGeVAstGOm_deum1EAxRbUM9seCKyundH1zGq71Ry-
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 7b 5c 5c 5c 78 32 36 71 75 6f 74 3b 6d 73 67 5f 74 79 70 65 5c 5c 5c 78 32 36 71 75 6f 74 3b 3a 5c 5c 5c 78 32 36 71 75 6f 74 3b 64 69 73 6d 69 73 73 5c 5c 5c 78 32 36 71 75 6f 74 3b 2c 5c 5c 5c 78 32 36 71 75 6f 74 3b 6b 65 79 5f 76 61 6c 75 65 5c 5c 5c 78 32 36 71 75 6f 74 3b 3a 5b 5d 2c 5c 5c 5c 78 32 36 71 75 6f 74 3b 67 6f 6f 67 4d 73 67 54 79 70 65 5c 5c 5c 78 32 36 71 75 6f 74 3b 3a 5c 5c 5c 78 32 36 71 75 6f 74 3b 73 74 68 5c 5c 5c 78 32 36 71 75 6f 74 3b 7d 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 43 6c 6f 73 69 6e 67 20 61 64 3a 20 25 31 24 64 5c 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 67 6f 6f Data Ascii: x26quot;,null,null,\x26quot;{\\\x26quot;msg_type\\\x26quot;:\\\x26quot;dismiss\\\x26quot;,\\\x26quot;key_value\\\x26quot;:[],\\\x26quot;googMsgType\\\x26quot;:\\\x26quot;sth\\\x26quot;}\x26quot;,\x26quot;Closing ad: %1$d\x26quot;,null,\x26quot;https://goo
2024-12-10 13:21:28 UTC	1390	IN	Data Raw: 74 3b 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 64 61 72 6b 5f 63 6f 6c 6f 72 5f 38 34 78 32 38 64 70 2e 70 6e 67 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 53 65 6e 64 20 66 65 65 64 62 61 63 6b 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 54 68 61 6e 6b 73 2e 20 46 65 65 64 62 61 63 6b 20 69 6d 70 72 6f 76 65 73 20 47 6f 6f 67 6c 65 20 61 64 73 5c 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 53 65 65 20 6d 79 20 47 6f 6f 67 6c 65 20 61 Data Ascii: t;,null,\x26quot;https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x26quot;,\x26quot;Send feedback\x26quot;,\x26quot;Thanks. Feedback improves Google ads\x26quot;,null,null,null,null,null,null,\x26quot;See my Google a
2024-12-10 13:21:28 UTC	1390	IN	Data Raw: 46 42 52 31 52 5a 51 55 68 74 4e 44 5a 72 64 6c 46 54 62 30 49 35 57 45 70 48 4e 6d 64 49 4d 6d 4a 68 65 45 46 78 5a 30 68 77 63 6a 52 69 63 55 46 6c 54 33 70 6f 64 57 39 43 4e 56 42 5a 52 7a 5a 6e 53 44 64 77 59 58 68 42 63 57 64 49 58 33 41 32 65 45 46 78 5a 30 68 79 4e 7a 5a 34 51 58 46 6e 53 47 31 6e 59 57 39 43 58 31 42 53 52 7a 5a 6e 53 47 78 30 5a 32 4a 78 51 57 56 78 62 54 64 46 51 33 46 42 5a 55 52 79 59 6b 56 44 63 55 46 6d 5a 33 5a 69 52 55 4e 78 51 57 5a 66 62 6e 4a 46 51 33 46 42 5a 6d 5a 75 4e 30 56 44 63 55 46 6d 4e 48 64 79 52 55 4e 78 51 57 59 33 64 33 4a 46 51 7a 4a 42 59 30 45 77 5a 32 64 74 51 30 6c 43 61 45 56 42 52 56 6c 49 65 6b 6c 44 61 57 64 4a 4e 6b 4d 30 51 6b 46 6e 54 55 4e 42 5a 30 6c 44 5a 33 46 4a 51 55 4e 54 54 44 4d 35 64 Data Ascii: FBR1RZQUhtNDZrdlFTb0I5WEpHNmdIMmJheEFxZ0hwcjRicUFlT3podW9CNVBZRzZnSDdwYXhBcWdIX3A2eEFxZ0hyNzZ4QXFnSG1nYW9CX1BSRzZnSGx0Z2JxQWVxbTdFQ3FBZURyYkVDcUFmZ3ZiRUNxQWZfbnJFQ3FBZmZuN0VDcUFmNHdyRUNxQWY3d3JFQzJBY0EwZ2dtQ0lCaEVBRVlIeklDaWdJNkM0QkFnTUNBZ0lDZ3FJQUNTTDM5d
2024-12-10 13:21:28 UTC	1390	IN	Data Raw: 61 50 74 56 4a 74 79 4c 38 66 5f 72 52 4e 33 6a 65 76 44 34 43 46 53 67 65 70 55 35 64 52 6b 4d 4c 75 47 64 33 31 4f 57 42 69 6b 55 6b 68 50 71 63 67 43 45 78 63 62 47 58 41 61 39 58 5a 6d 4f 6e 73 36 4f 5a 43 70 39 42 56 38 53 73 36 4b 50 2d 58 71 51 41 34 71 51 61 33 5a 43 38 6b 49 75 4f 66 72 70 70 4e 6c 76 34 71 45 56 4f 33 62 42 38 76 39 72 75 57 79 54 6d 48 64 79 6c 74 50 74 55 70 35 35 34 74 4d 73 57 65 39 66 43 4c 47 34 4a 73 42 42 4c 54 75 4f 63 61 61 75 6d 4f 31 43 2c 64 53 5a 63 56 55 46 69 42 72 6d 78 79 52 62 53 49 35 39 63 67 51 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 61 64 73 73 65 74 74 69 6e 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 77 68 79 74 68 69 73 61 64 3f 73 6f 75 72 63 65 5c 78 33 64 64 69 Data Ascii: aPtVJtyL8f_rRN3jevD4CFSgepU5dRkMLuGd31OWBikUkhPqcgCExcbGXAa9XZmOns6OZCp9BV8Ss6KP-XqQA4qQa3ZC8kIuOfrppNlv4qEVO3bB8v9ruWyTmHdyltPtUp554tMsWe9fCLG4JsBBLTuOcaaumO1C,dSZcVUFiBrmxyRbSI59cgQ\x26quot;,\x26quot;https://adssettings.google.com/whythisad?source\x3ddi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.10	49998	172.217.19.230	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	671	OUT	GET /simgad/17489467864391934481?sqp=uqWu0g0ICPoBEKwCQGQ&rs=AOga4qlk3o5v-ImXl8o4CcATd_f-DPcAsA HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	749	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 63464 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 05 Dec 2024 15:53:56 GMT Expires: Fri, 05 Dec 2025 15:53:56 GMT Cache-Control: public, max-age=31536000 Age: 422851 Last-Modified: Wed, 13 Nov 2024 20:33:43 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	641	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 fa 08 02 00 00 00 94 0f ed a4 00 00 20 00 49 44 41 54 78 9c ec 9d 75 78 1c c7 f9 f8 67 16 8e 41 77 92 ee 4e cc cc 92 49 06 99 31 a6 38 86 d8 01 07 ec 36 e8 06 9b a4 69 e3 42 9a 36 6e d2 3a 50 87 9d 86 1c 63 6c c7 cc 96 41 68 a1 c5 2c 9d e0 74 3a d2 f1 2d fe fe d8 64 7f aa 64 cb 0e f5 f9 fe 71 9f c7 8f 9f d9 b9 d9 d9 99 d9 79 77 de 79 e7 9d 11 00 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fe 0b 86 61 dc 6e 37 41 10 2c cb 12 04 e1 76 bb dd 6e 37 49 92 0c c3 f8 7c 3e 8f c7 63 30 18 2e 5d ba 44 51 94 c7 e3 e1 7e e5 c2 00 80 ed db b7 13 04 e1 f3 f9 f8 bb b8 78 bb dd ce b2 Data Ascii: PNGIHDR, IDATxuxgAwNI186iB6n:PclAh,t:-ddqywy~?~?~?~?~?~?~an7A,vn7I\|>c0.]DQ~x
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 8b 79 ed b5 d7 c6 e6 c3 61 36 9b dd 6e f7 a8 ba 98 4c a6 b1 d9 6e db b6 ed 66 99 f0 54 57 57 73 09 3a 3b 3b 6f 96 66 14 cf 3f ff 3c cb b2 b5 b5 b5 dc a5 4e a7 f3 78 3c c3 c3 c3 1d 1d 1d e0 fb e6 2a 2b 2b 03 37 69 d8 d6 d6 56 ee c6 73 e7 ce 71 bf 56 55 55 01 00 62 62 62 f8 26 fd f7 bf ff 3d f2 89 ad ad ad 23 f3 01 00 a4 a6 a6 76 75 75 8d ac da eb af bf ce 5d f6 f7 f7 f3 37 ee dd bb 97 8b 3c 7e fc f8 89 13 27 b8 f0 c6 8d 1b 45 22 11 17 36 1a 8d 00 80 4f 3e f9 84 bb fc cb 5f fe 32 4e c5 8b 8a 8a b8 64 d5 d5 d5 23 e3 7d 3e df d0 d0 10 17 7e e8 a1 87 58 96 e5 bf 8f 1c fc 5b 88 88 88 18 19 5f 56 56 66 b1 58 f8 4b 93 c9 34 52 8c 9f 7d f6 59 a7 d3 c9 b2 2c 9f f9 d8 0c 47 c5 93 24 79 fa f4 e9 51 91 8f 3f fe f8 d8 32 73 1c 3d 7a 94 cb 67 60 60 60 9c 8a ff 20 90 1f Data Ascii: ya6nLnfTWWs:;;of?<Nx<*++7iVsqVUUbbb&=#vuu]7<~'E"6O>_2Nd#}>~X[_VVfXK4R}Y,G$yQ?2s=zg```
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: f5 a3 c4 69 7c c6 31 9e 71 f0 4a ca 4f 41 24 12 71 81 f7 de 7b 8f 8f 84 10 0e 0c 0c f0 d5 79 e7 9d 77 6e 76 fb 9a 35 6b 6a 6a 6a b8 e1 f4 86 b6 99 9f 9d 1f 20 84 23 75 bc 1b c2 6b d2 3f 91 94 94 14 5e 81 9c 37 6f de cd 92 f1 6a 55 50 50 10 17 b8 f3 ce 3b c7 26 4b 4b 4b 1b d9 f5 17 2d 5a 34 3c 3c 6c b3 d9 b8 cb b1 b6 99 5f 02 7e b2 ba 66 cd 9a 91 e3 61 52 52 12 18 b7 8e 1c 37 9c db f0 cc 9c 39 93 0b dc d0 ce cc c3 0f 59 e3 3c 0e 45 51 ae f3 bd f7 de 7b 77 dd 75 d7 9d 77 de 39 d6 72 38 92 97 5f 7e f9 be fb ee 1b 27 c1 28 f8 ef c5 2f 4a 5e 5e 1e 00 a0 bf bf 7f ec 04 98 5f b0 e1 ec 9f 37 24 22 22 e2 e8 d1 a3 2d 2d 2d bf 5c 09 47 f1 b3 cd 09 6f 88 cf e7 1b 79 39 fe dc 86 67 e2 c4 89 a3 26 ee 37 84 b7 cd 44 45 45 71 01 de e2 02 46 4c a9 31 0c 1b b9 16 1c 18 18 Data Ascii: i\|1qJOA$q{ywnv5kjjj #uk?^7ojUPP;&KKK-Z4<<l_~faRR79Y<EQ{wuw9r8_~'(/J^^_7$""---\Goy9g&7DEEqFL1
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: a8 9b ad 00 ad 5d bb 96 db 87 29 16 8b 79 1b d2 ed b3 68 d1 22 86 61 36 6d da 74 b3 b9 ee ce 9d 3b b9 c0 cd f4 d2 51 56 b4 9f c2 f8 cb 21 7f ff fb df 6f f6 53 5d 5d 5d 73 73 73 63 63 e3 c4 89 13 b9 98 db b4 cd fc 68 df ee 9f df 25 fc 67 64 d9 b2 65 b7 5c 5a ec ee ee e6 bc f2 fb fa fa b8 98 91 fb 2c f9 55 72 9e 97 5e 7a 49 a7 d3 b1 2c cb 30 0c e7 a9 78 9b b6 19 99 4c 76 cb 49 42 78 78 f8 d8 48 9a a6 53 53 53 c7 c6 eb f5 fa a4 a4 a4 5f d4 10 72 43 82 83 83 6f b9 18 38 6f de bc 1f 31 23 e2 37 f8 f2 33 b4 b1 98 cd e6 c0 c0 40 7e 03 1a 07 2f 93 a3 f6 1f fd 08 78 1d 6a 7c bd fa f0 e1 c3 43 43 43 a3 9c 87 ff f3 9f ff f4 f5 f5 6d dc b8 31 3c 3c 9c a2 a8 b0 b0 30 6e 7f f0 6d da 66 7e 9c 5d 17 fc df 1c 09 79 16 2c 58 70 4b 21 e4 6d 33 23 df 1f af 91 72 db 88 38 de Data Ascii: ])yh"a6mt;QV!oS]]]ssscch%gde\Z,Ur^zI,0xLvIBxxHSSS_rCo8o1#73@~/xj\|CCCm1<<0nmf~]y,XpK!m3#r8
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 35 8b 2f 24 8e e3 38 8e b3 2c cb 15 92 61 18 81 40 90 96 96 d6 d9 d9 c9 1d 82 c6 e5 c6 57 96 20 08 ae b2 45 45 45 8f 3c f2 08 57 36 a3 d1 c8 27 06 00 48 a5 d2 ba ba ba 1b 2a 96 00 80 67 9f 7d f6 f1 c7 1f 8f 8e 8e 1e 1a 1a ea e8 e8 d8 ba 75 eb d8 93 94 00 00 7b f6 ec 99 35 6b 96 5c 2e ef ec ec 7c e6 99 67 6e b8 7a b1 65 cb 96 87 1f 7e 38 2e 2e 4e 2a 95 da ed f6 e2 e2 62 fe 70 8a c3 87 0f 4f 9c 38 91 ef 51 dc 9b 8d 8b 8b 73 38 1c 41 41 41 25 25 25 1a 8d a6 b3 b3 33 2b 2b eb d4 a9 53 d1 d1 d1 6e b7 5b 24 12 11 04 31 ca ca d2 d0 d0 f0 c4 13 4f fc f3 9f ff 14 0a 85 5e af 57 2c 16 9b cd e6 69 d3 a6 3d f5 d4 53 5b b6 6c 71 3a 9d 5c 33 72 fd 01 42 48 92 24 37 45 c2 30 8c 1b e7 19 86 21 08 82 61 18 a1 50 c8 59 e0 0e 1f 3e bc 73 e7 4e fe c4 03 3f 7e fc f8 f1 e3 c7 Data Ascii: 5/$8,a@W EEE<W6'Hg}u{5k\.\|gnze~8..NbpO8Qs8AAA%%%3++Sn[$1O^W,i=S[lq:\3rBH$7E0!aPY>sN?~
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 1b 1a 1a 5c 53 37 f8 d4 e6 7b ee 7f f1 b7 a1 a2 40 93 d7 3e 25 31 27 32 40 fd 65 d9 c9 a7 e2 67 96 21 8e 47 1f 79 c2 6c 34 6b 03 7c 17 2e 56 aa 63 d2 87 7d 43 a5 25 c5 e9 13 b2 4b ce 9e 0f 4f 88 0c 16 68 e3 93 73 d5 aa a0 7f be fa 12 14 a1 d2 00 f5 f0 50 bf 9b 74 3d f4 e0 13 7b 77 1f 8c 0d 0b 4e 9b 3c a9 b5 5d df 50 59 bc f1 c1 4d 55 c5 95 31 89 11 1f ec ff f4 ee 45 77 95 15 97 c9 55 aa 29 53 a6 7e bc fb fd 20 4c 06 18 c8 b2 00 43 c0 ac 79 0b f6 9c 3a 10 23 50 27 e6 a5 18 cc 44 57 4b b5 05 50 b9 89 19 72 a9 b2 b6 aa 58 88 cb 18 86 34 d1 ae 5f 6d 78 f4 fd 5d ef 05 03 09 00 08 d7 c1 29 8a 51 05 04 98 6d 66 a1 40 aa 0d 09 b4 7b 59 db 60 b7 05 dc ee 21 3d 3f 60 24 c4 c6 95 58 06 30 c8 f7 5b 84 21 80 08 00 10 22 00 83 00 01 80 93 5e 08 58 c0 02 80 00 c0 00 08 Data Ascii: \S7{@>%1'2@eg!Gyl4k\|.Vc}C%KOhsPt={wN<]PYMU1EwU)S~ LCy:#P'DWKPrX4_mx])Qmf@{Y`!=?`$X0[!"^X
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: 49 51 49 a9 99 b9 95 15 97 57 4c cc ab ac ab 0b 92 89 ec 1e 77 70 48 40 7a 98 d4 42 58 9d 4e 3b 3d 60 7e f5 d3 2f a0 5c 57 79 fc 44 64 5a 82 cb ee 74 7b 88 c4 84 88 77 76 ef 4a 08 8b d5 eb 8d 56 ab 2d 43 13 99 1f 13 bc 32 27 37 2b 31 eb a5 cf 3e 28 ad 2d 5d 33 ff 6e a7 cd d2 ad 6f ab af ad 95 4b 61 79 4b dd fb 6f 7c 26 67 98 ca 9e c1 fc bc 29 41 0a cd de 8b e7 82 a1 14 22 08 60 00 0b 21 c3 42 14 32 97 3a db 82 80 d4 0b 10 a9 40 2a 85 18 8e 08 4c 16 7b 57 73 13 e5 75 3c 78 f7 23 03 7d d6 5e 93 31 2c 38 24 27 33 35 05 0a 8a cd 06 11 80 38 8d 20 10 19 26 c9 60 4c 36 67 62 9e d9 38 7c b5 b3 fd a1 07 1f d1 0f 0c b8 87 87 7b cd 66 1c a0 66 e0 79 f4 9e 2d ef 7d f1 6f 09 02 01 0b 7d c0 53 30 79 56 7b 5f 2b 0e 30 1c c7 45 0c 72 a1 ad 59 05 44 62 91 d8 4e de e0 18 Data Ascii: IQIWLwpH@zBXN;=`~/\WyDdZt{wvJV-C2'7+1>(-]3noKayKo\|&g)A"`!B2:@*L{Wsu<x#}^1,8$'358 &`L6gb8\|{ffy-}o}S0yV{_+0ErYDbN
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: cb 49 89 e8 6b 31 78 35 3a b1 32 22 54 1b 10 2a 17 d8 2c 26 4d 60 60 67 87 3e 22 3a 62 d6 ac fc f8 b8 18 55 56 72 5a 6a 52 6d 5d 55 57 47 ef c7 07 be ec d4 f7 d3 00 44 ab c3 ba 07 0c 66 d2 a5 88 9c b0 71 e6 f4 77 3f f8 dc 0b 60 db 95 ca 33 45 97 34 31 e1 d9 69 89 6f 7f f0 f5 de 0f 3e aa ef e9 92 2b a5 14 49 45 87 eb c4 00 6d 74 f4 4f d0 c5 e6 67 87 2b 14 2a 8d 8b 14 18 3c c5 c3 1d db 1f 7d c4 53 db d8 82 e2 42 04 1a 29 67 5b 55 2d 09 3c 69 b1 f1 fa 1e 23 4b b3 0c a0 48 40 e7 e6 66 38 6d 36 92 62 01 00 0c 4b e1 a8 48 c0 c2 de 21 9b 4c ad 20 dc d4 84 bc bc b3 df 96 7a 00 a9 93 a8 66 2c 5c 74 f9 7a 91 14 08 84 b8 98 26 5d de c0 98 2f 9b 8a 16 a5 66 c7 26 25 0d f6 e8 ab db fa 54 a8 a4 ce a8 7f fc be c7 0b 6b 8a 12 15 3a 01 44 17 6b 54 16 95 6e d8 3a b0 60 c6 Data Ascii: Ik1x5:2"T,&M``g>":bUVrZjRm]UWGDfqw?`3E41io>+IEmtOg+<}SB)g[U-<i#KH@f8m6bKH!L zf,\tz&]/f&%Tk:DkTn:`
2024-12-10 13:21:27 UTC	1390	IN	Data Raw: b6 6e 7b 6a f3 fd 41 08 be ef 9b 7d c6 61 77 71 59 65 77 5b 77 8b d1 90 9c 18 37 75 f6 22 4d 60 e8 e3 4f 3e 3e 6f d9 7c b3 d9 a2 0a 50 45 e6 c7 18 7a 86 be dc bb c7 d0 d7 12 1e ac 0d 09 0e 86 2e 52 84 0a 24 12 49 6b 73 bb d1 63 5c bd f2 ee ac 84 8c 27 b6 fd f5 8d 57 3f 48 c8 c9 70 78 bd 76 8b 99 62 84 ed 8d 2d 0d f5 1d 96 fe e1 aa da 32 37 c5 b6 f4 98 9e 7c f9 3d 01 e6 0a 90 49 05 42 01 45 f9 0c 6e eb 9b 1b 37 f7 5e 29 eb 24 3d 00 60 49 31 f2 df 6f 79 51 2d 60 53 22 75 c7 ca 1a 93 54 12 88 7a a7 64 65 2f cd cb da 7e f8 d8 7b 2f 3d 7d f7 aa 65 27 8e 16 de 95 96 9e 3e 65 c6 ee 0b e7 37 2f 58 5c 43 50 df 1e 3a 32 e0 f2 ae 58 bd b0 dc a9 0e 97 8b 4c dd 7d 4d f6 a1 17 66 4d ee 6e ef af 6c eb c1 51 bc ad b3 9e 06 ac 08 13 b4 9a 07 fe b0 7e ee 91 b2 3a 31 10 7a Data Ascii: n{jA}awqYew[w7u"M`O>>o\|PEz.R$Iksc\'W?Hpxvb-27\|=IBEn7^)$=`I1oyQ-`S"uTzde/~{/=}e'>e7/X\CP:2XL}MfMnlQ~:1z
2024-12-10 13:21:28 UTC	1390	IN	Data Raw: ba ff 21 fd e7 bb ef 3f 74 ee ea a6 3b 73 b7 7d 80 85 aa f4 e5 25 7b 4f 9c 2d f5 58 ca ba 5b c5 a8 34 33 29 b8 a1 b8 7a cd 63 9b 2e fd 69 fb fd 6f 6e 6d d9 ff 45 94 58 83 59 cd a5 0e 0f 4a 12 04 0b 30 c0 22 08 2e 16 88 68 9a 1c 34 5b 1f 79 f0 d1 0d f7 de ff d8 fd 8f 66 ad 9b 47 d0 2a b1 0a 0b 92 09 a7 4c 4c 6f 6c 6a a0 69 1f e1 f5 f9 bc 2e 8f c3 aa d3 46 45 c5 e8 0c 26 53 7d 6d ad 54 a2 20 ec 06 13 d3 71 bd 97 0c 0b d5 f4 ea db 45 62 a9 d7 4b 4d cc 49 7c f7 d0 05 63 ef d0 e9 cb 97 de fa 60 4f 6b 5b 7d 59 5d 49 6f 6f 7d a0 2a 44 25 95 cb 85 12 5c 28 c4 04 28 64 18 9f 8f 08 56 aa a6 4f 9d 27 91 90 1d 8d d7 27 4c 99 6d b1 51 b4 cb a5 4e 4d 0e 95 05 ce 9b 35 41 c3 0a ff f6 f5 6e 9d 2f 20 38 39 76 4e 56 66 7a 64 54 a7 be a5 af b9 06 a0 10 c3 71 bb c3 4d 41 a4 Data Ascii: !?t;s}%{O-X[43)zc.ionmEXYJ0".h4[yfGLLolji.FE&S}mT qEbKMI\|c`Ok[}Y]Ioo}D%\((dVO''LmQNM5An/ 89vNVfzdTqMA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.10	49982	37.252.171.85	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	672	OUT	GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	1516	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 13:21:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D AN-X-Request-Uuid: e574cf36-c4da-4030-94a6-a43c6b88e925 Set-Cookie: XANDR_PANID=Ubyvrw02Q4tEIu9TqokRdFVkG9JDP0rXuxTzKcL15KlPArfLNdlqKfWfILtrKaEy5WrQcVVLjNQ7laeWWYsPnk3DWfSoeVgRt2IVUQJWEzA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:27 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 13:21:27 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4930685024747777157; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:27 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.10	50006	35.208.249.213	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	775	OUT	GET /ju/cs/google?google_gid=CAESECwokNfvS_HaxfSCpn49VFI&google_cver=1&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0 HTTP/1.1 Host: gtracenep.admaster.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	695	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://cm.g.doubleclick.net/pixel?google_nid=admaster&google_push=AXcoOmSgfWNXBWrWy8tM2b8QWb14UT8fSzy2MLPcrh-SS5pfFHtAnM_NVrldNEul7wHTxmJZVT20zIGzzvim56hLzkY38bkrqwurlj0&google_hm=22210ca7aca1932b2gdr4400m4ihpsjo Set-Cookie: __mguid_=22210ca7aca1932b2gdr4400m4ihpsjo; Path=/; Domain=admaster.cc; Max-Age=31536000; Secure; SameSite=None Date: Tue, 10 Dec 2024 13:21:27 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:27 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.10	50004	35.186.193.173	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	781	OUT	GET /int/cm?exc=1&acc=crimtan&google_gid=CAESEAmuOBd5VupWHSGnq2gpvYk&google_cver=1&google_push=AXcoOmQyRyNnUHFSVQHWv_-SRaTpyGhjTOUfztvh-5nR1folSWXH0ud88FM0djavSC3GeLbxCM9BcH0Yx8q_eMXgB48YgVJihFMf94Y HTTP/1.1 Host: gcm.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	893	IN	HTTP/1.1 302 Found P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_92b91de825ed4b9c86460658d02c2edf=1; path=/; domain=.ctnsnet.com; expires=Wed, 10 Dec 2025 13:21:27 GMT; Secure; SameSite=None; Set-Cookie: gid_CAESEAmuOBd5VupWHSGnq2gpvYk=1; path=/; domain=.ctnsnet.com; expires=Wed, 10 Dec 2025 13:21:27 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT x-xss-protection: 1; mode=block Status: 302 Location: https://cm.g.doubleclick.net/pixel?google_nid=crimtan&google_push=AXcoOmQyRyNnUHFSVQHWv_-SRaTpyGhjTOUfztvh-5nR1folSWXH0ud88FM0djavSC3GeLbxCM9BcH0Yx8q_eMXgB48YgVJihFMf94Y&google_hm=krkd6CXtS5yGRgZY0Cwu368 Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Tue, 10 Dec 2024 13:21:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.10	50005	178.250.1.9	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	907	OUT	GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:27 UTC	574	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 10 Dec 2024 13:21:27 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1 server-processing-duration-in-ticks: 87003 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.10	50002	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	2805	OUT	GET /pcs/view?xai=AKAOjsudpx28gO1C-F3gobRoocpe3L0ro5EBxRzZfRocLaK9njUnEsy_y27kG8a8pI2L33raToO5ddLwqIKSKLcWPOV_MVub2uLhkpQxuDGM_YXt4BhPSfjxfwBkrBIeBOcFu-zNPCROqAE-n5g16ruOWFgOKfo5bGaST_Vl3T6eQQ_mkV_Metw8wVyFJSH9FGoPO6gdpibJxaHfNR_zcLUCGEO7ZqOt-zPzuW_Zkcm9U4rx66Hi8yblYNWLgSvEskkD8PaWOYPjU0TATKMBeK6-jdo1lSOu8JykutGOiY8vGldmlXurZyqyKh2ZNdwNC8NmY0QF-QLQJR6prq5A5pJNcBy__oGxbdgmfbgVPOZA2AUw1Smob4bgSSTmZbb7YiGjWuEX2YHX4-ADWzRQ6uvZ_Cn24jjuHuzA7mXXNNpoJr2CoDl1lNk6ORMD-8nvVwmVtppvageM0sIPLIsLYW7ZyPtIF3uqAsOWZC-Y5cIzo2foQ3MjcTm7-IjE5zriIFaVzt0ZrF5JGtzHBblKCMm4QDTCzLer_fHLB5fzJakjAljOiN5lg4gWciB6k2QmoiT_I8OiuZqm_YIxnHZYByOUXK7GZnxCVvQfElZywMc5DL5Wz-54XEfQayjOSug0ku2cxX3t_E6O_Blu03XaZbj4LEs5tc7te_3zqW2r_VytVaiBxsOOxZ5om1JlxXUfF4ztwEHjP5WWVFtcIus95ILpxs95ts2oKTP_DkHw34I6-PaZYh9TQeQX2hkrET8dXlcam2GbXDlyzyUU_pjD8_6LJYg9JKAn9OPihh_NR9UXwqhgBIxdRMrUsvlAg03t03rnO26o-Ni_2FRBC3Hjo2-xxDnws9XnxwuZSMdd_aZNF5tcOaiVSKrj7fbBLsIFy0gbA_S24iBPBMeGyqwdRef8k442NxQXpjSuri9MEMXg8WDfsRT4Yig6B39EcZAf_rqCxqD7_8hxBusb6MN8WxJnPR-iTQoV_lzcIxlf7tsVe3 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source, not-navigation-source=trigger Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:28 UTC	1731	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"642854252":"0x22003b02c068c4340000000000000000","642854253":"0x9baa9074179e16990000000000000000","642854254":"0x45ea3f62b62c7d300000000000000000","642854255":"0xe9cce2c2f34bcd7a0000000000000000"},"debug_key":"2523735555206236769","debug_reporting":true,"destination":["https://wsj.com","https://marketwatch.com","https://barrons.com"],"event_report_windows":{"end_times":[86400,345600]},"expiry":"172800","filter_data":{"14":["38292484"],"21":[],"23":[],"24":[],"25":[],"26":[],"27":[],"28":[],"29":[],"8":["13961696"]},"max_event_level_reports":2,"priority":"0","source_event_id":"10857920486726756655"} X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Thu, 09-Jan-2025 13:21:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Tue, 10 Dec 2024 13:21:27 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.10	50018	104.18.26.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	670	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:28 UTC	1189	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 13:21:28 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1&C=1 CF-Ray: 8efd89c71ee943b9-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hAWNHM66QAABZXA6erCwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 13:21:28 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPS=1322; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:28 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1322; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:28 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BPeOx%2FIvDrfzohIcSJECoZGH6NzXmwvwC1o7CkIy1OjLc6I3zOfGXJiYuIiJu%2FfptmEYqwPjgEgVVPLZYnoVw6hQPYnJp49ix%2Brvc2qRyyXYte%2FfviVtHDNhNcDNR3CkZNYH9T4AZPJeuQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.10	50016	35.214.136.108	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	858	OUT	GET /sync?dsp_id=119&user_id=1974054405561860756&expires=30&ssp=google HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=fe599ace-232e-44cc-ad08-afae4110058f; c=1733836882; tuuid_lu=1733836884; google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z
2024-12-10 13:21:28 UTC	693	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Tue, 10 Dec 2024 13:21:28 GMT Location: //cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmT-oR2zDZwLKykw4qJTufQNdWjgE0e9qD5cMHOLTAI9xa3jUQwZOK7rky_gp-4Ijz7Q8wPxDrQ9w5UrgdmWwbt6rRhlqnJw560Z&google_hm=_lmaziMuRMytCK-uQRAFjw==&gdpr=&gdpr_consent= Set-Cookie: google_push=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.10	50019	104.18.26.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:27 UTC	795	OUT	GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; CMPS=483; CMPRO=483
2024-12-10 13:21:28 UTC	1085	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 13:21:28 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Z1hAVtHM6CMAAD2aAX0B-QAA CF-Ray: 8efd89c77f0041db-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 13:21:28 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=483; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:28 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2FTTv9iwpB2SORRLlYufMJtSNqrqzJZjcRE72Vd2AFaRP9d%2FDHvyl8sy8Jnew7gRoOZKuGpdhnV9zFGWTArR6nNiKwcu0Nx2HLD3n7Tys4OEuMEHeZMUMjoXFk9iKD9D3ZH0Jdlspa6Rcw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.10	50017	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:28 UTC	803	OUT	GET /pixel?google_nid=openx&google_cm&google_dbm&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:29 UTC	667	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0 Date: Tue, 10 Dec 2024 13:21:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 306 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:29 UTC	306	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 43 38 36 68 4b 48 53 4f 63 2d 6c 71 59 74 55 58 5a 6a 57 48 38 6f 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.10	50020	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:28 UTC	809	OUT	GET /pixel?google_nid=teadstv_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:29 UTC	653	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://sync.teads.tv/um?eid=3&uid=CAESEEVhoixz10_dlxzZ4UuL4cI&google_cver=1&gdpr=0 Date: Tue, 10 Dec 2024 13:21:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 292 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:29 UTC	292	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 74 65 61 64 73 2e 74 76 2f 75 6d 3f 65 69 64 3d 33 26 61 6d 70 3b 75 69 64 3d 43 41 45 53 45 45 56 68 6f 69 78 7a 31 30 5f 64 6c 78 7a 5a 34 55 75 4c 34 63 49 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://sync.teads.tv/um?eid=3&uid=CAESEEVhoixz10_dlxzZ4UuL4cI&google_cver=1&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.10	50021	37.252.171.85	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:28 UTC	647	OUT	GET /setuid?entity=101&code=CAESEAucPc0n90JY6KGIBH5wU3E&google_cver=1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:28 UTC	1407	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 13:21:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEAucPc0n90JY6KGIBH5wU3E%26google_cver%3D1 AN-X-Request-Uuid: d56665c6-e3e9-42c0-bc77-a4707f0db8d0 Set-Cookie: XANDR_PANID=Y7hTAPrn2ELIQ6YJbzrkE4hENPh7UtHMQuhi-eizxunHsAjuUNMaSAdcME5MTykXIu71tvWzXWJFYOk3V54OaErFvVyN1td8cViT5Y_zOCU.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:28 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 13:21:28 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3306488306757890960; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:28 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.10	50045	35.244.159.8	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:28 UTC	744	OUT	GET /w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:29 UTC	606	IN	HTTP/1.1 302 Found Server: OXGW/0.0.0 Date: Tue, 10 Dec 2024 13:21:29 GMT Content-Length: 0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D Set-Cookie: i=b15d8a59-f58c-4441-bec4-2831dcde48e9\|1733836889; Version=1; Expires=Wed, 10-Dec-2025 13:21:29 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.10	50047	74.119.117.16	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	913	OUT	GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1 HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:29 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Tue, 10 Dec 2024 13:21:28 GMT server: Kestrel cache-control: no-cache expires: Tue, 10 Dec 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 302764 strict-transport-security: max-age=31536000; preload; connection: close
2024-12-10 13:21:29 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.10	50044	37.252.171.85	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	893	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=Ubyvrw02Q4tEIu9TqokRdFVkG9JDP0rXuxTzKcL15KlPArfLNdlqKfWfILtrKaEy5WrQcVVLjNQ7laeWWYsPnk3DWfSoeVgRt2IVUQJWEzA.; receive-cookie-deprecation=1; uuid2=4930685024747777157
2024-12-10 13:21:29 UTC	1463	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 13:21:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NDkzMDY4NTAyNDc0Nzc3NzE1Nw%3D%3D AN-X-Request-Uuid: 4f684c20-2202-4ee6-bfdc-92c731668474 Set-Cookie: XANDR_PANID=Ubyvrw02Q4tEIu9TqokRdFVkG9JDP0rXuxTzKcL15KlPArfLNdlqKfWfILtrKaEy5WrQcVVLjNQ7laeWWYsPnk3DWfSoeVgRt2IVUQJWEzA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:29 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 13:21:29 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4930685024747777157; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.10	50031	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	827	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Z1hAVtHM6CMAAD2aAX0B-QAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
2024-12-10 13:21:29 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1 Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:29 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 47 79 73 6e 74 58 41 5a 33 63 4d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.10	50032	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	822	OUT	GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmRqALpjmMpmUTSdHq4vOFRjJSOVxVv_jCSi4QU6nvdJkB7EmT6L16EvkvhBNDFVSdw3py0u9I35BMfeJCfZWvNrTumDb97-_Co HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.10	50033	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	935	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFDRnNVN09zSUVBQUJjQy0yLXNuUQ&google_push=AXcoOmTnBCRrbGJGlA7alFxzME_rP3FXRUkZ3E770z4RJFkHo_rIhosNNOejsEJqFiP8qIu1pTEEBzxiNoWMK2FbLX589pvoLl6h4mRy&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.10	50034	142.250.181.66	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	6645	OUT	GET /dbm/ad?dbm_c=AKAmf-AayAvaTe3fzhj33RFvp441GKpdS15hyl5_uhK4wF_f0ucLRwkbKOwLFZJA4lIA7O1hyjUzl2ttwXwUj7VuEgVp9JCo5INfeIRLTmyvK4_mUY_qliNzUgdze7L_aEt7sdCZLQUg15WjiFtVegW6XHSSkzYQuiJeLR9Sf--oXyzX6mjFv3UaqFfDPFwT3OKZxr5bnx8yJm8_mldSZR9y70IsXGKFrQ&dbm_d=AKAmf-D0wKsFF8bQI1KYDUJw3ZFs6exo_TNSnp9fNbQGzKJhmjHGOep3Ioftv25MVK-pWeUPYza2Bm291q-FeLm5nNARJxeLPxQt1-HxmTG537qI7UP2IiGF51SI6ikLcrR1VtSMRa1XsWvUUxdtQD8UAVNIGKGPA5GHb1oeQBvgtWITFkxWJNkRq0JGTsB9uzZyA_CrnyT-BH9Ll8OlcE8l0RMg_1zouuz2D6KrrfRCK4nEy8oglelPO2-e8zJez4SioZRqRA8b89ukWQNBDKd71gi9Z3KpAlZTeupASswamWc3b764XeS5gA31UZg63zhXhyXyno06E3M1IZ0Q2T600i-OwmHtPovi8CBwn-zDwnljcGVjHXG2HZyb1i3cpb-ikqW2M2ygfFd1unSq9M1jEXAXbmBuKiZtZahldUBXQKYzKy0CGB66VNwyHNfdQQEFXnMMAEU1-QS0w5O9xvkmzi15J0edNLL7cR5C_wCB3fq6wVLV_jGY7WGliaKEYVYL7blgaTnVbflA30C8q_IvO0nb5qaV1JqdLj2CSMHEpspdbwfMcvBnxi9u23Fhz1Orw9P_OqphFenA8FZlJPsVVK6cv7eTFVPTeoxKfesbzYuVlaXfE90XE4T8pjny2G5cqhvtpRT3j45yccldKbqANaLLik8SgaY4BYikOfqinvdtjmNOyYmkD4VpbCdZM4MBv5FX99kMMB1qBdHUdXvna4GNZCGOoBliLjP_D2jNrnxEm9JN08yxYiRiyGIbFrqAG [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5561763581314444&output=html&h=280&slotname=2321115505&adk=348108860&adf=4181732005&pi=t.ma~as.2321115505&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836867004&bpp=3&bdt=6372&idt=6062&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=77&ady=312&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C128 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	758	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA; expires=Sun, 08-Jun-2025 13:21:29 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.10	50038	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	873	OUT	GET /pixel?google_nid=teadstv_ab&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My&google_push=AXcoOmSX-XkZULzWEXRVPIAMqGYOL4W1I9M5f4gWA_ax3Q9BcNEjyd7kLnvD-o6n_uR53aVpdSryP550aR0GAnr9Fq9cJudz-LPaO6Y HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	463	IN	HTTP/1.1 302 Found Location: https://sync.teads.tv/um/report?eid=3&google_nid=teadstv_ab Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 260 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	260	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 74 65 61 64 73 2e 74 76 2f 75 6d 2f 72 65 70 6f 72 74 3f 65 69 64 3d 33 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 6e 69 64 3d 74 65 61 64 73 74 76 5f 61 62 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://sync.teads.tv/um/report?eid=3&google_nid=teadstv_ab">here</A>.</BODY></HT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.10	50040	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	687	OUT	GET /pixel?google_nid=zemanta&google_push=AXcoOmTR4rM_j42QSR-WwPxx9K8xcHUcEc2y_XL4jZe8A9LEXqlfBP89tzrcLTkV3rHM7oZYMzNifDbWNdO31LF5w59S9Q6P818PC_Ck&google_hm=NzhfbDVadzZhVVZ0U1cyT3g0Tzc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.10	50042	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	675	OUT	GET /pixel?google_nid=ta&google_hm=Uh8js14lRnEOflEr-7c-DA&google_push=AXcoOmRGI2kmA3vunLkJq9hQgzTL8W7Z2P0aLPheyEgPkEAMpQ5j7ZPeEvAcqU4Y1FMeXe1lPdxy6T7_wsqMh_vG9f6TG4-UqOvmavE HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.10	50041	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	686	OUT	GET /pixel?google_nid=adkernel&google_hm=QTIyOTE1Mzk1NDM1Mjc5ODM0NzE&google_push=AXcoOmRaCrjzw0Y2DtahENpSIaPNA9SML3N4DmcT8YxEKVwXdgJNjrx_vccTYDGmQrMCqrbK5EE3zJVzNRoTvcuJf_jPvcvwKn5Ts28 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.10	50046	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	696	OUT	GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmRUudNuwZWE_do6PVkcRHvSV-rRYMuoMjkVlHmunBoFZasRhg5nMFyWDKwC--tLznPlkhqOdoPz5t2kf-P6uiYTOu0np7Apmw3Z&google_hm=NDYzMDI0NDUyMDY5MDcwMDAyOQ== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U
2024-12-10 13:21:30 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.10	50059	104.18.26.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	736	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Z1hAWNHM66QAABZXA6erCwAA; CMPS=1322; CMPRO=1322
2024-12-10 13:21:30 UTC	990	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8efd89d1ea66423d-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hAWNHM66QAABZXA6erCwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 13:21:29 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=1322; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:29 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xV9%2FM46IBy8l8aPLtg3qVNR4NmQ4tYW%2FkyJB%2Fn98OacSdC4v6Jr4974BvJQSZ6dn7fjKRG1mbsx%2FZgEoS%2FW4MkCa4H9eL5fwbWJt2NrjigjhlXtVnzTJuHbap60VLaG7SA8Cza%2BrGB7Q6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.10	50053	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	3114	OUT	GET /pcs/view?xai=AKAOjsudpx28gO1C-F3gobRoocpe3L0ro5EBxRzZfRocLaK9njUnEsy_y27kG8a8pI2L33raToO5ddLwqIKSKLcWPOV_MVub2uLhkpQxuDGM_YXt4BhPSfjxfwBkrBIeBOcFu-zNPCROqAE-n5g16ruOWFgOKfo5bGaST_Vl3T6eQQ_mkV_Metw8wVyFJSH9FGoPO6gdpibJxaHfNR_zcLUCGEO7ZqOt-zPzuW_Zkcm9U4rx66Hi8yblYNWLgSvEskkD8PaWOYPjU0TATKMBeK6-jdo1lSOu8JykutGOiY8vGldmlXurZyqyKh2ZNdwNC8NmY0QF-QLQJR6prq5A5pJNcBy__oGxbdgmfbgVPOZA2AUw1Smob4bgSSTmZbb7YiGjWuEX2YHX4-ADWzRQ6uvZ_Cn24jjuHuzA7mXXNNpoJr2CoDl1lNk6ORMD-8nvVwmVtppvageM0sIPLIsLYW7ZyPtIF3uqAsOWZC-Y5cIzo2foQ3MjcTm7-IjE5zriIFaVzt0ZrF5JGtzHBblKCMm4QDTCzLer_fHLB5fzJakjAljOiN5lg4gWciB6k2QmoiT_I8OiuZqm_YIxnHZYByOUXK7GZnxCVvQfElZywMc5DL5Wz-54XEfQayjOSug0ku2cxX3t_E6O_Blu03XaZbj4LEs5tc7te_3zqW2r_VytVaiBxsOOxZ5om1JlxXUfF4ztwEHjP5WWVFtcIus95ILpxs95ts2oKTP_DkHw34I6-PaZYh9TQeQX2hkrET8dXlcam2GbXDlyzyUU_pjD8_6LJYg9JKAn9OPihh_NR9UXwqhgBIxdRMrUsvlAg03t03rnO26o-Ni_2FRBC3Hjo2-xxDnws9XnxwuZSMdd_aZNF5tcOaiVSKrj7fbBLsIFy0gbA_S24iBPBMeGyqwdRef8k442NxQXpjSuri9MEMXg8WDfsRT4Yig6B39EcZAf_rqCxqD7_8hxBusb6MN8WxJnPR-iTQoV_lzcIxlf7tsVe3 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source;navigation-source, not-trigger Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
2024-12-10 13:21:30 UTC	1627	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"642854252":"0x22003b02c068c4340000000000000000","642854253":"0x9baa9074179e16990000000000000000","642854254":"0x45ea3f62b62c7d300000000000000000","642854255":"0xe9cce2c2f34bcd7a0000000000000000"},"debug_key":"4729322680027363148","debug_reporting":true,"destination":["https://wsj.com","https://marketwatch.com","https://barrons.com"],"event_report_windows":{"end_times":[86400,345600]},"expiry":"172800","filter_data":{"14":["38292484"],"21":[],"23":[],"24":[],"25":[],"26":[],"27":[],"28":[],"29":[],"8":["13961696"]},"max_event_level_reports":2,"priority":"0","source_event_id":"6927556401436704683"} X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Thu, 09-Jan-2025 13:21:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Tue, 10 Dec 2024 13:21:30 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.10	50054	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	552	OUT	GET /dcm/impl_v103.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:30 UTC	808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-dcm-tag Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-dcm-tag" Report-To: {"group":"ads-dcm-tag","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-dcm-tag"}]} Content-Length: 64580 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 05 Dec 2024 10:39:06 GMT Expires: Fri, 05 Dec 2025 10:39:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 03 Dec 2024 14:12:10 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 441744 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	582	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 Data Ascii: (function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.va
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 71 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 74 68 69 73 2e 67 3d 67 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 Data Ascii: lit(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};q("Symbol",function(a){if(a)return a;var b=function(g,f){this.g=g;ba(this,"descript
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 0a 76 61 72 20 6c 61 3d 68 61 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 66 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 6c 61 29 6c 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b Data Ascii: urn a}:null}var la=ha,u=function(a,b){a.prototype=fa(b.prototype);a.prototype.constructor=a;if(la)la(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 66 28 74 68 69 73 2e 48 29 2c 72 65 6a 65 63 74 3a 66 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 4a 28 66 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 Data Ascii: urn function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:f(this.H),reject:f(this.o)}};e.prototype.H=function(f){if(f===this)this.o(new TypeError("A Promise cannot resolve to itself"));else if(f instanceof e)this.J(f);else{a:switch(typeof f){c
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 61 72 20 68 3d 74 68 69 73 2e 6d 28 29 3b 66 2e 57 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6d 28 29 3b 74 72 79 7b 66 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 43 29 7b 74 72 79 7b 6c 28 6e 28 43 29 29 7d 63 61 74 63 68 28 44 29 7b 6d 28 44 29 7d 7d 3a 74 7d Data Ascii: ar h=this.m();f.W(h.resolve,h.reject)};e.prototype.L=function(f,h){var k=this.m();try{f.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.then=function(f,h){function k(n,t){return typeof n=="function"?function(C){try{l(n(C))}catch(D){m(D)}}:t}
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 63 3c 30 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 63 5d 3b 69 66 28 67 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 67 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 29 3b 76 61 72 20 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d Data Ascii: is;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(c<0&&(c=Math.max(c+e,0));c<e;c++){var g=d[c];if(g===b\|\|Object.is(g,b))return!0}return!1}});var qa=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" m
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 7c 7c 62 3d 3d 3d 2d 49 6e 66 69 6e 69 74 79 7c 7c 62 3d 3d 3d 30 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 62 29 29 3b 72 65 74 75 72 6e 20 62 3c 30 3f 2d 63 3a 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 Data Ascii: \|\|b===-Infinity\|\|b===0)return b;var c=Math.floor(Math.abs(b));return b<0?-c:c}});q("Array.prototype.keys",function(a){return a?a:function(){return ua(this,function(b){return b})}});q("Array.prototype.values",function(a){return a?a:function(){return ua(thi
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 29 7b 72 65 74 75 72 6e 20 7a 61 3f 7a 3f 7a 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 72 65 74 75 72 6e 20 42 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 29 7b 72 65 74 75 72 6e 20 7a 61 3f 21 21 7a 26 26 7a 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 45 61 28 29 7b 72 65 74 75 72 6e 20 45 28 29 3f 21 31 3a 41 28 22 4f 70 65 72 61 22 29 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 29 7b 72 65 74 75 72 Data Ascii: ull:null;function Da(a){return za?z?z.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function A(a){return Ba().indexOf(a)!=-1};function E(){return za?!!z&&z.brands.length>0:!1}function Ea(){return E()?!1:A("Opera")}function Fa(){retur
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 69 66 28 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 0a 64 5b 65 5d 2c 65 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 62 5b 63 5d 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 Data Ascii: unction(a,b){return Array.prototype.some.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=typeof a==="string"?a.split(""):a,e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return!0;return!1};function Xa(a){for(var b=[],c=0;c<a;c++)b[c]="";return b};va
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 2e 70 75 73 68 28 63 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 65 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 6b 29 7b 66 6f 72 28 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6c 3d 61 2e 63 68 61 72 41 74 28 64 2b 2b 29 2c 0a 6d 3d 62 62 5b 6c 5d 3b 69 66 28 6d 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6d 3b 69 66 28 21 2f 5e 5b 5c 73 5c 78 61 30 5d 2a 24 2f 2e 74 65 73 74 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 62 61 73 65 36 34 20 65 6e 63 6f 64 69 6e 67 20 61 74 20 63 68 61 72 3a 20 22 2b 6c 29 3b 7d 72 65 74 75 72 6e 20 6b 7d 63 62 28 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 3b 29 7b 76 61 72 20 65 3d 63 28 2d 31 29 2c 67 3d 63 28 30 29 2c 66 3d 63 28 36 34 29 2c 68 3d Data Ascii: .push(c)});return b},eb=function(a,b){function c(k){for(;d<a.length;){var l=a.charAt(d++),m=bb[l];if(m!=null)return m;if(!/^[\s\xa0]*$/.test(l))throw Error("Unknown base64 encoding at char: "+l);}return k}cb();for(var d=0;;){var e=c(-1),g=c(0),f=c(64),h=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.10	50055	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:29 UTC	4918	OUT	GET /dbm/ad?dbm_c=AKAmf-AUEgyA_Sss1Uu1TgBySXtVgHFL5J5traaVxQpRWrVEJkKloqBxIj4ZGJPPENvUec8lGUl7aAjdtcY1qJsNcXvN_TdcforqV7max7OFda6r3a7Ro0GLJioENKzK__mC_rVCbRF3jhJ0Ugo0Z8B4r49D5RXpZ2JKmjCoFpR4xExQQ8brf_ld_xSQFyo2ox_AZv4ghTXbF5eggjqRY_3Mk8dO1uhOXMFzJarXTS693QYX6xlSBtk&cry=1&dbm_d=AKAmf-BjT_SJ1rePRZwIwtLZjOVTfBSd7xaAsxIyWgUBNeZfunBAt-iF2jYEqNLQAYc2rdhqZhD_oFP7ENCBbNiMhTW2LrVTe1x0VSDQDSL0s5mGEbzJPqL8aYpbN3ghnMdR0sCbXVDTbQ7uWMaNMtdJUizthvS-Nzrfyms9bgxRvtZWOXkYLFTap1F9T98q9fWd4wCgWnR7Am_6-Ab9iMfTGvAQRu-ZGW2zFKEO8UMw5Kx9YHXCRm3u_bfzkA9bl_wLNt0CNJKDfp4nmIbLHx4Jjvie50cIibPLmgXkBx6XeWOzSPBLhZAvA2Vf1DqI2psJn6Eo0OLoiPzXFgXNfRZGbZajdFQxznCEJO0dy739A6oHRFWj_y3hSmuWX_p5iibI59Ly8zo3t76AmBoAIP_pDpFA_56bp5C9Clnj89MIYUp7vMoIuVh20eS31LDdO7zv3NVc0ZS5GnDEl0vrPw0LOKpFiJZz42m7Zaqv4ty8SdpOgrEKvtRqMOkupdgimSZWkzSMBxaekqWxQnKANRhE14T3hJAHllta2C6Z-eo83qMeT3VaAqWq-XIXue10nmTuvBWQGAuHGMQIHcTo-i6LjPQo4G8Joc3i7NJB4y_Hkco4FLeBFYERHGgKCa4D9JXmfPcVM7u0t-tQ-zxkXXqcI_uAG-uRpFtaI4JS5yMUQlKf0R_5ZU4-c66aIRYUbi81--b0W5ipc112qHEPrASTGAj89ClJictpiIracd [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1
2024-12-10 13:21:30 UTC	882	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi7t6G2LJzt6x_ZUP46RQGN-2we08hntItSUGv4rvq3BGXdymQ; expires=Sun, 08-Jun-2025 13:21:30 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:30 UTC	508	IN	Data Raw: 36 64 31 63 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 64 69 76 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 61 62 67 63 70 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 72 69 67 68 74 3a 30 70 78 3b 74 6f 70 3a 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 33 Data Ascii: 6d1cif (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:9px;right:0px;top:0px;position:absolute;width:3
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 63 62 62 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 36 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 3b 7d 2e 63 62 62 20 73 76 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 73 74 72 6f 6b 65 3a 23 30 30 61 65 63 64 3b 66 69 6c 6c 3a 23 30 30 61 65 63 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 3b 7d 2e 61 62 67 62 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 36 70 78 Data Ascii: or:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 2e 36 35 2c 37 2e 37 35 61 30 2e 36 35 2c 30 2e 36 35 2c 30 2c 31 2c 30 2c 2d 31 2e 33 2c 30 4c 35 2e 33 35 2c 31 30 2e 37 35 61 30 2e 39 2c 30 2e 39 2c 30 2c 30 2c 30 2c 31 2e 33 2c 30 2e 38 4c 31 32 2e 37 2c 38 2e 32 51 31 33 2e 37 2c 37 2e 35 2c 31 32 2e 37 2c 36 2e 37 4c 33 2e 33 2c 31 2e 36 51 32 2e 32 2c 31 2e 33 2c 31 2e 38 2c 32 2e 35 4c 31 2e 38 2c 31 32 2e 35 51 32 2e 32 2c 31 33 2e 39 2c 33 2e 33 2c 31 33 2e 33 4c 34 2e 38 2c 31 32 2e 35 41 30 2e 33 2c 30 2e 33 2c 30 2c 31 2c 30 2c 34 2e 32 2c 31 31 2e 33 5a 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 70 61 74 68 5c 78 33 65 5c 78 33 63 2f 73 76 67 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c Data Ascii: .65,7.75a0.65,0.65,0,1,0,-1.3,0L5.35,10.75a0.9,0.9,0,0,0,1.3,0.8L12.7,8.2Q13.7,7.5,12.7,6.7L3.3,1.6Q2.2,1.3,1.8,2.5L1.8,12.5Q2.2,13.9,3.3,13.3L4.8,12.5A0.3,0.3,0,1,0,4.2,11.3Z\x22\x3e\x3c/path\x3e\x3c/svg\x3e\x3c/div\x3e\x3c/div\x3e\x3c/div\x3e\x3cdiv id\
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 49 54 67 69 71 7a 34 68 61 6a 71 6e 41 63 42 76 78 74 61 75 62 55 54 71 31 72 6d 52 6a 4b 72 6a 6c 30 57 49 6e 6b 50 74 67 74 46 77 6b 4e 51 51 5a 4b 6d 71 48 71 5a 39 4e 4c 57 2d 56 4b 38 31 78 5a 53 32 5f 39 63 66 71 38 58 53 51 4e 5f 39 53 70 35 35 67 65 6c 36 72 79 42 6d 2d 54 46 4b 47 62 55 79 74 78 36 75 77 45 30 33 34 54 69 70 49 35 30 51 6a 4b 4b 6d 6e 4a 6e 75 35 6c 43 51 4b 73 78 34 78 33 6e 78 61 34 31 4f 34 65 43 35 57 34 50 6d 4f 35 46 64 37 73 63 65 41 5a 69 62 49 6e 52 4e 44 6a 46 47 48 4f 41 4f 38 78 43 65 5a 75 6b 2d 4d 36 78 2d 70 39 62 43 64 47 78 6a 53 5f 7a 35 4e 6d 68 54 51 70 6d 75 39 6f 66 79 70 31 30 53 4a 38 76 56 50 43 35 4e 4a 33 4f 79 42 58 47 4b 6f 37 47 36 53 77 6d 39 57 42 49 59 39 30 33 57 65 33 75 6c 4a 39 65 71 32 6d 64 Data Ascii: ITgiqz4hajqnAcBvxtaubUTq1rmRjKrjl0WInkPtgtFwkNQQZKmqHqZ9NLW-VK81xZS2_9cfq8XSQN_9Sp55gel6ryBm-TFKGbUytx6uwE034TipI50QjKKmnJnu5lCQKsx4x3nxa41O4eC5W4PmO5Fd7sceAZibInRNDjFGHOAO8xCeZuk-M6x-p9bCdGxjS_z5NmhTQpmu9ofyp10SJ8vVPC5NJ3OyBXGKo7G6Swm9WBIY903We3ulJ9eq2md
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 6d 6c 73 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6d 6c 73 6b 66 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 68 65 69 67 68 74 3a 35 30 25 3b 77 69 64 74 68 3a 35 30 25 3b 7d 2e 6d 6c 73 64 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 2c 31 38 39 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6d 6c 73 64 6b 66 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 6c 73 6b 66 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 6c 73 64 6b 66 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 Data Ascii: gn-items:center;}.mls{animation:mlskf 2s linear infinite;height:50%;width:50%;}.mlsd{stroke-dasharray:1,189;stroke-dashoffset:0;animation:mlsdkf 1.4s ease-in-out infinite;}@keyframes mlskf{100%{transform:rotate(360deg);}}@keyframes mlsdkf{0%{stroke-dashar
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 69 6d 30 41 61 71 39 38 79 6c 65 62 62 74 68 59 61 44 45 32 51 51 41 53 43 35 6e 63 6b 50 59 4d 6b 47 6f 41 47 62 31 74 50 64 4b 63 67 42 43 61 67 44 41 63 67 44 6d 77 53 71 42 4e 38 42 54 39 44 47 30 64 75 56 4b 74 58 64 51 59 69 55 41 62 6a 71 47 50 31 75 63 6c 6b 79 4c 69 33 30 48 78 50 51 30 66 52 2d 4d 47 5f 59 54 71 6a 53 58 48 4c 77 4f 5a 72 67 72 74 61 38 49 4c 69 32 59 70 31 53 39 4e 38 5f 43 5a 64 4f 5f 75 53 44 46 72 6c 56 31 57 44 38 4d 59 59 5a 67 69 76 70 79 4e 32 58 48 65 5a 6a 36 30 6e 79 5a 56 50 48 56 4a 54 51 53 4c 41 65 43 6e 72 47 35 4a 30 42 4c 73 77 63 37 4d 66 34 67 73 77 46 44 78 38 53 76 63 51 69 73 7a 48 45 47 65 56 41 73 74 47 4f 6d 5f 64 65 75 6d 31 45 41 78 52 62 55 4d 39 73 65 43 4b 79 75 6e 64 48 31 7a 47 71 37 31 52 79 2d Data Ascii: im0Aaq98ylebbthYaDE2QQASC5nckPYMkGoAGb1tPdKcgBCagDAcgDmwSqBN8BT9DG0duVKtXdQYiUAbjqGP1uclkyLi30HxPQ0fR-MG_YTqjSXHLwOZrgrta8ILi2Yp1S9N8_CZdO_uSDFrlV1WD8MYYZgivpyN2XHeZj60nyZVPHVJTQSLAeCnrG5J0BLswc7Mf4gswFDx8SvcQiszHEGeVAstGOm_deum1EAxRbUM9seCKyundH1zGq71Ry-
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 7b 5c 5c 5c 78 32 36 71 75 6f 74 3b 6d 73 67 5f 74 79 70 65 5c 5c 5c 78 32 36 71 75 6f 74 3b 3a 5c 5c 5c 78 32 36 71 75 6f 74 3b 64 69 73 6d 69 73 73 5c 5c 5c 78 32 36 71 75 6f 74 3b 2c 5c 5c 5c 78 32 36 71 75 6f 74 3b 6b 65 79 5f 76 61 6c 75 65 5c 5c 5c 78 32 36 71 75 6f 74 3b 3a 5b 5d 2c 5c 5c 5c 78 32 36 71 75 6f 74 3b 67 6f 6f 67 4d 73 67 54 79 70 65 5c 5c 5c 78 32 36 71 75 6f 74 3b 3a 5c 5c 5c 78 32 36 71 75 6f 74 3b 73 74 68 5c 5c 5c 78 32 36 71 75 6f 74 3b 7d 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 43 6c 6f 73 69 6e 67 20 61 64 3a 20 25 31 24 64 5c 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 67 6f 6f Data Ascii: x26quot;,null,null,\x26quot;{\\\x26quot;msg_type\\\x26quot;:\\\x26quot;dismiss\\\x26quot;,\\\x26quot;key_value\\\x26quot;:[],\\\x26quot;googMsgType\\\x26quot;:\\\x26quot;sth\\\x26quot;}\x26quot;,\x26quot;Closing ad: %1$d\x26quot;,null,\x26quot;https://goo
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 74 3b 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 64 61 72 6b 5f 63 6f 6c 6f 72 5f 38 34 78 32 38 64 70 2e 70 6e 67 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 53 65 6e 64 20 66 65 65 64 62 61 63 6b 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 54 68 61 6e 6b 73 2e 20 46 65 65 64 62 61 63 6b 20 69 6d 70 72 6f 76 65 73 20 47 6f 6f 67 6c 65 20 61 64 73 5c 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 53 65 65 20 6d 79 20 47 6f 6f 67 6c 65 20 61 Data Ascii: t;,null,\x26quot;https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x26quot;,\x26quot;Send feedback\x26quot;,\x26quot;Thanks. Feedback improves Google ads\x26quot;,null,null,null,null,null,null,\x26quot;See my Google a
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 46 42 52 31 52 5a 51 55 68 74 4e 44 5a 72 64 6c 46 54 62 30 49 35 57 45 70 48 4e 6d 64 49 4d 6d 4a 68 65 45 46 78 5a 30 68 77 63 6a 52 69 63 55 46 6c 54 33 70 6f 64 57 39 43 4e 56 42 5a 52 7a 5a 6e 53 44 64 77 59 58 68 42 63 57 64 49 58 33 41 32 65 45 46 78 5a 30 68 79 4e 7a 5a 34 51 58 46 6e 53 47 31 6e 59 57 39 43 58 31 42 53 52 7a 5a 6e 53 47 78 30 5a 32 4a 78 51 57 56 78 62 54 64 46 51 33 46 42 5a 55 52 79 59 6b 56 44 63 55 46 6d 5a 33 5a 69 52 55 4e 78 51 57 5a 66 62 6e 4a 46 51 33 46 42 5a 6d 5a 75 4e 30 56 44 63 55 46 6d 4e 48 64 79 52 55 4e 78 51 57 59 33 64 33 4a 46 51 7a 4a 42 59 30 45 77 5a 32 64 74 51 30 6c 43 61 45 56 42 52 56 6c 49 65 6b 6c 44 61 57 64 4a 4e 6b 4d 30 51 6b 46 6e 54 55 4e 42 5a 30 6c 44 5a 33 46 4a 51 55 4e 54 54 44 4d 35 64 Data Ascii: FBR1RZQUhtNDZrdlFTb0I5WEpHNmdIMmJheEFxZ0hwcjRicUFlT3podW9CNVBZRzZnSDdwYXhBcWdIX3A2eEFxZ0hyNzZ4QXFnSG1nYW9CX1BSRzZnSGx0Z2JxQWVxbTdFQ3FBZURyYkVDcUFmZ3ZiRUNxQWZfbnJFQ3FBZmZuN0VDcUFmNHdyRUNxQWY3d3JFQzJBY0EwZ2dtQ0lCaEVBRVlIeklDaWdJNkM0QkFnTUNBZ0lDZ3FJQUNTTDM5d
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 38 62 69 6d 44 37 52 39 77 59 54 78 66 77 6f 42 54 6c 59 79 63 6b 33 5a 59 47 59 7a 52 63 49 56 4b 53 73 77 5a 35 58 70 68 30 64 2d 5f 61 52 4c 37 78 55 52 51 4b 68 36 62 74 30 7a 6c 51 39 73 67 6a 6c 78 30 30 7a 36 33 66 44 6b 67 31 58 6e 56 32 6a 42 73 33 41 59 69 45 6a 67 6e 6c 41 73 36 43 5f 50 63 47 37 69 4d 49 74 5f 65 6d 65 7a 62 51 4f 55 46 74 4f 5a 4f 45 6e 32 79 38 61 66 6f 52 51 79 56 5f 36 34 61 65 68 71 76 5f 30 52 41 79 48 7a 36 6d 56 42 6e 79 78 71 62 32 43 4a 2c 61 6a 34 62 76 4c 2d 34 7a 55 44 45 55 35 6f 58 6c 58 64 71 32 51 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 61 64 73 73 65 74 74 69 6e 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 77 68 79 74 68 69 73 61 64 3f 73 6f 75 72 63 65 5c 78 33 64 64 69 Data Ascii: 8bimD7R9wYTxfwoBTlYyck3ZYGYzRcIVKSswZ5Xph0d-_aRL7xURQKh6bt0zlQ9sgjlx00z63fDkg1XnV2jBs3AYiEjgnlAs6C_PcG7iMIt_emezbQOUFtOZOEn2y8afoRQyV_64aehqv_0RAyHz6mVBnyxqb2CJ,aj4bvL-4zUDEU5oXlXdq2Q\x26quot;,\x26quot;https://adssettings.google.com/whythisad?source\x3ddi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.10	50056	172.217.21.36	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	792	OUT	GET /ads/measurement/l?ebcid=ALh7CaSJVtxsEBjenWZY09JBi7pI5-ljXSWytq0RzRC9rE-l5sPo1hVL3CJ8KgsvZP1GOK8bEMVTyoQxklSmrK0nwb7GK-Vvew HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:30 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:30 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.10	50057	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	4732	OUT	GET /ddm/activity/attribution_src_register;crd=cXVlcnlfZXZlbnRfaWQgewogIHRpbWVfdXNlYzogMTczMzgzNjg4NzYxNzc4NwogIHNlcnZlcl9pcDogMTUyOTEzODE5CiAgcHJvY2Vzc19pZDogMjkyMjc3MDEzMgp9CmZsb29kbGlnaHRfY29uZmlnX2lkOiA2MTk0NzE3CmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly9qYXJlZC5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBWSUVXCmltcHJlc3Npb25fcHJpb3JpdHk6IDAKaW1wcmVzc2lvbl9leHBpcnlfaW5fZGF5czogMzAKZXZlbnRfaW1wcmVzc2lvbl9pZDogMTM5NzI5MjU0NTM1MTc4NzQ3NDAKZGVidWdfa2V5OiAxNjMxNjAxODEwMzI5MDQ0OTkzNgppbXByZXNzaW9uX21lYXN1cmVtZW50X2RpbWVuc2lvbnNfZGF0YSB7CiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uOiBJTVBSRVNTSU9OX0RJTUVOU0lPTl9QUk9EVUNUX1RZUEUKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgaW50NjRfdmFsdWU6IDIKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fSU5URVJBQ1RJT05fVFlQRQogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBpbnQ2NF92YWx1ZTogMwogIH0KfQppbXByZXNzaW9uX21lYXN1cmVtZW50X2RpbWVuc2lvbnNfZGF0YSB7CiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uOiBJTVBSRVNTSU9OX0RJTUVOU [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
2024-12-10 13:21:30 UTC	1416	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x98d1f6b60d6744f30000000000000000","13":"0x5a7c16f239a151190000000000000000","14":"0x17a32ab49152e0d00000000000000000","15":"0x4a67ea5e0bc2b90e0000000000000000"},"debug_key":"16316018103290449936","debug_reporting":true,"destination":["https://jared.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_windows":{"end_times":[86400,345600]},"expiry":"2592000","filter_data":{"14":["4477914","6287556"],"21":[],"23":[],"24":[],"25":[],"26":[],"27":[],"28":[],"29":[],"8":["6194717"]},"max_event_level_reports":2,"priority":"0","source_event_id":"13972925453517874740"} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Thu, 09-Jan-2025 13:21:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.10	50058	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	424	OUT	GET /simgad/17489467864391934481?sqp=uqWu0g0ICPoBEKwCQGQ&rs=AOga4qlk3o5v-ImXl8o4CcATd_f-DPcAsA HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:30 UTC	749	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 63464 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 05 Dec 2024 15:53:56 GMT Expires: Fri, 05 Dec 2025 15:53:56 GMT Cache-Control: public, max-age=31536000 Age: 422854 Last-Modified: Wed, 13 Nov 2024 20:33:43 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:30 UTC	641	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 fa 08 02 00 00 00 94 0f ed a4 00 00 20 00 49 44 41 54 78 9c ec 9d 75 78 1c c7 f9 f8 67 16 8e 41 77 92 ee 4e cc cc 92 49 06 99 31 a6 38 86 d8 01 07 ec 36 e8 06 9b a4 69 e3 42 9a 36 6e d2 3a 50 87 9d 86 1c 63 6c c7 cc 96 41 68 a1 c5 2c 9d e0 74 3a d2 f1 2d fe fe d8 64 7f aa 64 cb 0e f5 f9 fe 71 9f c7 8f 9f d9 b9 d9 d9 99 d9 79 77 de 79 e7 9d 11 00 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fc f8 f1 e3 c7 8f 1f 3f 7e fe 0b 86 61 dc 6e 37 41 10 2c cb 12 04 e1 76 bb dd 6e 37 49 92 0c c3 f8 7c 3e 8f c7 63 30 18 2e 5d ba 44 51 94 c7 e3 e1 7e e5 c2 00 80 ed db b7 13 04 e1 f3 f9 f8 bb b8 78 bb dd ce b2 Data Ascii: PNGIHDR, IDATxuxgAwNI186iB6n:PclAh,t:-ddqywy~?~?~?~?~?~?~an7A,vn7I\|>c0.]DQ~x
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 8b 79 ed b5 d7 c6 e6 c3 61 36 9b dd 6e f7 a8 ba 98 4c a6 b1 d9 6e db b6 ed 66 99 f0 54 57 57 73 09 3a 3b 3b 6f 96 66 14 cf 3f ff 3c cb b2 b5 b5 b5 dc a5 4e a7 f3 78 3c c3 c3 c3 1d 1d 1d e0 fb e6 2a 2b 2b 03 37 69 d8 d6 d6 56 ee c6 73 e7 ce 71 bf 56 55 55 01 00 62 62 62 f8 26 fd f7 bf ff 3d f2 89 ad ad ad 23 f3 01 00 a4 a6 a6 76 75 75 8d ac da eb af bf ce 5d f6 f7 f7 f3 37 ee dd bb 97 8b 3c 7e fc f8 89 13 27 b8 f0 c6 8d 1b 45 22 11 17 36 1a 8d 00 80 4f 3e f9 84 bb fc cb 5f fe 32 4e c5 8b 8a 8a b8 64 d5 d5 d5 23 e3 7d 3e df d0 d0 10 17 7e e8 a1 87 58 96 e5 bf 8f 1c fc 5b 88 88 88 18 19 5f 56 56 66 b1 58 f8 4b 93 c9 34 52 8c 9f 7d f6 59 a7 d3 c9 b2 2c 9f f9 d8 0c 47 c5 93 24 79 fa f4 e9 51 91 8f 3f fe f8 d8 32 73 1c 3d 7a 94 cb 67 60 60 60 9c 8a ff 20 90 1f Data Ascii: ya6nLnfTWWs:;;of?<Nx<*++7iVsqVUUbbb&=#vuu]7<~'E"6O>_2Nd#}>~X[_VVfXK4R}Y,G$yQ?2s=zg```
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: f5 a3 c4 69 7c c6 31 9e 71 f0 4a ca 4f 41 24 12 71 81 f7 de 7b 8f 8f 84 10 0e 0c 0c f0 d5 79 e7 9d 77 6e 76 fb 9a 35 6b 6a 6a 6a b8 e1 f4 86 b6 99 9f 9d 1f 20 84 23 75 bc 1b c2 6b d2 3f 91 94 94 14 5e 81 9c 37 6f de cd 92 f1 6a 55 50 50 10 17 b8 f3 ce 3b c7 26 4b 4b 4b 1b d9 f5 17 2d 5a 34 3c 3c 6c b3 d9 b8 cb b1 b6 99 5f 02 7e b2 ba 66 cd 9a 91 e3 61 52 52 12 18 b7 8e 1c 37 9c db f0 cc 9c 39 93 0b dc d0 ce cc c3 0f 59 e3 3c 0e 45 51 ae f3 bd f7 de 7b 77 dd 75 d7 9d 77 de 39 d6 72 38 92 97 5f 7e f9 be fb ee 1b 27 c1 28 f8 ef c5 2f 4a 5e 5e 1e 00 a0 bf bf 7f ec 04 98 5f b0 e1 ec 9f 37 24 22 22 e2 e8 d1 a3 2d 2d 2d bf 5c 09 47 f1 b3 cd 09 6f 88 cf e7 1b 79 39 fe dc 86 67 e2 c4 89 a3 26 ee 37 84 b7 cd 44 45 45 71 01 de e2 02 46 4c a9 31 0c 1b b9 16 1c 18 18 Data Ascii: i\|1qJOA$q{ywnv5kjjj #uk?^7ojUPP;&KKK-Z4<<l_~faRR79Y<EQ{wuw9r8_~'(/J^^_7$""---\Goy9g&7DEEqFL1
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: a8 9b ad 00 ad 5d bb 96 db 87 29 16 8b 79 1b d2 ed b3 68 d1 22 86 61 36 6d da 74 b3 b9 ee ce 9d 3b b9 c0 cd f4 d2 51 56 b4 9f c2 f8 cb 21 7f ff fb df 6f f6 53 5d 5d 5d 73 73 73 63 63 e3 c4 89 13 b9 98 db b4 cd fc 68 df ee 9f df 25 fc 67 64 d9 b2 65 b7 5c 5a ec ee ee e6 bc f2 fb fa fa b8 98 91 fb 2c f9 55 72 9e 97 5e 7a 49 a7 d3 b1 2c cb 30 0c e7 a9 78 9b b6 19 99 4c 76 cb 49 42 78 78 f8 d8 48 9a a6 53 53 53 c7 c6 eb f5 fa a4 a4 a4 5f d4 10 72 43 82 83 83 6f b9 18 38 6f de bc 1f 31 23 e2 37 f8 f2 33 b4 b1 98 cd e6 c0 c0 40 7e 03 1a 07 2f 93 a3 f6 1f fd 08 78 1d 6a 7c bd fa f0 e1 c3 43 43 43 a3 9c 87 ff f3 9f ff f4 f5 f5 6d dc b8 31 3c 3c 9c a2 a8 b0 b0 30 6e 7f f0 6d da 66 7e 9c 5d 17 fc df 1c 09 79 16 2c 58 70 4b 21 e4 6d 33 23 df 1f af 91 72 db 88 38 de Data Ascii: ])yh"a6mt;QV!oS]]]ssscch%gde\Z,Ur^zI,0xLvIBxxHSSS_rCo8o1#73@~/xj\|CCCm1<<0nmf~]y,XpK!m3#r8
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 35 8b 2f 24 8e e3 38 8e b3 2c cb 15 92 61 18 81 40 90 96 96 d6 d9 d9 c9 1d 82 c6 e5 c6 57 96 20 08 ae b2 45 45 45 8f 3c f2 08 57 36 a3 d1 c8 27 06 00 48 a5 d2 ba ba ba 1b 2a 96 00 80 67 9f 7d f6 f1 c7 1f 8f 8e 8e 1e 1a 1a ea e8 e8 d8 ba 75 eb d8 93 94 00 00 7b f6 ec 99 35 6b 96 5c 2e ef ec ec 7c e6 99 67 6e b8 7a b1 65 cb 96 87 1f 7e 38 2e 2e 4e 2a 95 da ed f6 e2 e2 62 fe 70 8a c3 87 0f 4f 9c 38 91 ef 51 dc 9b 8d 8b 8b 73 38 1c 41 41 41 25 25 25 1a 8d a6 b3 b3 33 2b 2b eb d4 a9 53 d1 d1 d1 6e b7 5b 24 12 11 04 31 ca ca d2 d0 d0 f0 c4 13 4f fc f3 9f ff 14 0a 85 5e af 57 2c 16 9b cd e6 69 d3 a6 3d f5 d4 53 5b b6 6c 71 3a 9d 5c 33 72 fd 01 42 48 92 24 37 45 c2 30 8c 1b e7 19 86 21 08 82 61 18 a1 50 c8 59 e0 0e 1f 3e bc 73 e7 4e fe c4 03 3f 7e fc f8 f1 e3 c7 Data Ascii: 5/$8,a@W EEE<W6'Hg}u{5k\.\|gnze~8..NbpO8Qs8AAA%%%3++Sn[$1O^W,i=S[lq:\3rBH$7E0!aPY>sN?~
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 1b 1a 1a 5c 53 37 f8 d4 e6 7b ee 7f f1 b7 a1 a2 40 93 d7 3e 25 31 27 32 40 fd 65 d9 c9 a7 e2 67 96 21 8e 47 1f 79 c2 6c 34 6b 03 7c 17 2e 56 aa 63 d2 87 7d 43 a5 25 c5 e9 13 b2 4b ce 9e 0f 4f 88 0c 16 68 e3 93 73 d5 aa a0 7f be fa 12 14 a1 d2 00 f5 f0 50 bf 9b 74 3d f4 e0 13 7b 77 1f 8c 0d 0b 4e 9b 3c a9 b5 5d df 50 59 bc f1 c1 4d 55 c5 95 31 89 11 1f ec ff f4 ee 45 77 95 15 97 c9 55 aa 29 53 a6 7e bc fb fd 20 4c 06 18 c8 b2 00 43 c0 ac 79 0b f6 9c 3a 10 23 50 27 e6 a5 18 cc 44 57 4b b5 05 50 b9 89 19 72 a9 b2 b6 aa 58 88 cb 18 86 34 d1 ae 5f 6d 78 f4 fd 5d ef 05 03 09 00 08 d7 c1 29 8a 51 05 04 98 6d 66 a1 40 aa 0d 09 b4 7b 59 db 60 b7 05 dc ee 21 3d 3f 60 24 c4 c6 95 58 06 30 c8 f7 5b 84 21 80 08 00 10 22 00 83 00 01 80 93 5e 08 58 c0 02 80 00 c0 00 08 Data Ascii: \S7{@>%1'2@eg!Gyl4k\|.Vc}C%KOhsPt={wN<]PYMU1EwU)S~ LCy:#P'DWKPrX4_mx])Qmf@{Y`!=?`$X0[!"^X
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: 49 51 49 a9 99 b9 95 15 97 57 4c cc ab ac ab 0b 92 89 ec 1e 77 70 48 40 7a 98 d4 42 58 9d 4e 3b 3d 60 7e f5 d3 2f a0 5c 57 79 fc 44 64 5a 82 cb ee 74 7b 88 c4 84 88 77 76 ef 4a 08 8b d5 eb 8d 56 ab 2d 43 13 99 1f 13 bc 32 27 37 2b 31 eb a5 cf 3e 28 ad 2d 5d 33 ff 6e a7 cd d2 ad 6f ab af ad 95 4b 61 79 4b dd fb 6f 7c 26 67 98 ca 9e c1 fc bc 29 41 0a cd de 8b e7 82 a1 14 22 08 60 00 0b 21 c3 42 14 32 97 3a db 82 80 d4 0b 10 a9 40 2a 85 18 8e 08 4c 16 7b 57 73 13 e5 75 3c 78 f7 23 03 7d d6 5e 93 31 2c 38 24 27 33 35 05 0a 8a cd 06 11 80 38 8d 20 10 19 26 c9 60 4c 36 67 62 9e d9 38 7c b5 b3 fd a1 07 1f d1 0f 0c b8 87 87 7b cd 66 1c a0 66 e0 79 f4 9e 2d ef 7d f1 6f 09 02 01 0b 7d c0 53 30 79 56 7b 5f 2b 0e 30 1c c7 45 0c 72 a1 ad 59 05 44 62 91 d8 4e de e0 18 Data Ascii: IQIWLwpH@zBXN;=`~/\WyDdZt{wvJV-C2'7+1>(-]3noKayKo\|&g)A"`!B2:@*L{Wsu<x#}^1,8$'358 &`L6gb8\|{ffy-}o}S0yV{_+0ErYDbN
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: cb 49 89 e8 6b 31 78 35 3a b1 32 22 54 1b 10 2a 17 d8 2c 26 4d 60 60 67 87 3e 22 3a 62 d6 ac fc f8 b8 18 55 56 72 5a 6a 52 6d 5d 55 57 47 ef c7 07 be ec d4 f7 d3 00 44 ab c3 ba 07 0c 66 d2 a5 88 9c b0 71 e6 f4 77 3f f8 dc 0b 60 db 95 ca 33 45 97 34 31 e1 d9 69 89 6f 7f f0 f5 de 0f 3e aa ef e9 92 2b a5 14 49 45 87 eb c4 00 6d 74 f4 4f d0 c5 e6 67 87 2b 14 2a 8d 8b 14 18 3c c5 c3 1d db 1f 7d c4 53 db d8 82 e2 42 04 1a 29 67 5b 55 2d 09 3c 69 b1 f1 fa 1e 23 4b b3 0c a0 48 40 e7 e6 66 38 6d 36 92 62 01 00 0c 4b e1 a8 48 c0 c2 de 21 9b 4c ad 20 dc d4 84 bc bc b3 df 96 7a 00 a9 93 a8 66 2c 5c 74 f9 7a 91 14 08 84 b8 98 26 5d de c0 98 2f 9b 8a 16 a5 66 c7 26 25 0d f6 e8 ab db fa 54 a8 a4 ce a8 7f fc be c7 0b 6b 8a 12 15 3a 01 44 17 6b 54 16 95 6e d8 3a b0 60 c6 Data Ascii: Ik1x5:2"T,&M``g>":bUVrZjRm]UWGDfqw?`3E41io>+IEmtOg+<}SB)g[U-<i#KH@f8m6bKH!L zf,\tz&]/f&%Tk:DkTn:`
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: b6 6e 7b 6a f3 fd 41 08 be ef 9b 7d c6 61 77 71 59 65 77 5b 77 8b d1 90 9c 18 37 75 f6 22 4d 60 e8 e3 4f 3e 3e 6f d9 7c b3 d9 a2 0a 50 45 e6 c7 18 7a 86 be dc bb c7 d0 d7 12 1e ac 0d 09 0e 86 2e 52 84 0a 24 12 49 6b 73 bb d1 63 5c bd f2 ee ac 84 8c 27 b6 fd f5 8d 57 3f 48 c8 c9 70 78 bd 76 8b 99 62 84 ed 8d 2d 0d f5 1d 96 fe e1 aa da 32 37 c5 b6 f4 98 9e 7c f9 3d 01 e6 0a 90 49 05 42 01 45 f9 0c 6e eb 9b 1b 37 f7 5e 29 eb 24 3d 00 60 49 31 f2 df 6f 79 51 2d 60 53 22 75 c7 ca 1a 93 54 12 88 7a a7 64 65 2f cd cb da 7e f8 d8 7b 2f 3d 7d f7 aa 65 27 8e 16 de 95 96 9e 3e 65 c6 ee 0b e7 37 2f 58 5c 43 50 df 1e 3a 32 e0 f2 ae 58 bd b0 dc a9 0e 97 8b 4c dd 7d 4d f6 a1 17 66 4d ee 6e ef af 6c eb c1 51 bc ad b3 9e 06 ac 08 13 b4 9a 07 fe b0 7e ee 91 b2 3a 31 10 7a Data Ascii: n{jA}awqYew[w7u"M`O>>o\|PEz.R$Iksc\'W?Hpxvb-27\|=IBEn7^)$=`I1oyQ-`S"uTzde/~{/=}e'>e7/X\CP:2XL}MfMnlQ~:1z
2024-12-10 13:21:30 UTC	1390	IN	Data Raw: ba ff 21 fd e7 bb ef 3f 74 ee ea a6 3b 73 b7 7d 80 85 aa f4 e5 25 7b 4f 9c 2d f5 58 ca ba 5b c5 a8 34 33 29 b8 a1 b8 7a cd 63 9b 2e fd 69 fb fd 6f 6e 6d d9 ff 45 94 58 83 59 cd a5 0e 0f 4a 12 04 0b 30 c0 22 08 2e 16 88 68 9a 1c 34 5b 1f 79 f0 d1 0d f7 de ff d8 fd 8f 66 ad 9b 47 d0 2a b1 0a 0b 92 09 a7 4c 4c 6f 6c 6a a0 69 1f e1 f5 f9 bc 2e 8f c3 aa d3 46 45 c5 e8 0c 26 53 7d 6d ad 54 a2 20 ec 06 13 d3 71 bd 97 0c 0b d5 f4 ea db 45 62 a9 d7 4b 4d cc 49 7c f7 d0 05 63 ef d0 e9 cb 97 de fa 60 4f 6b 5b 7d 59 5d 49 6f 6f 7d a0 2a 44 25 95 cb 85 12 5c 28 c4 04 28 64 18 9f 8f 08 56 aa a6 4f 9d 27 91 90 1d 8d d7 27 4c 99 6d b1 51 b4 cb a5 4e 4d 0e 95 05 ce 9b 35 41 c3 0a ff f6 f5 6e 9d 2f 20 38 39 76 4e 56 66 7a 64 54 a7 be a5 af b9 06 a0 10 c3 71 bb c3 4d 41 a4 Data Ascii: !?t;s}%{O-X[43)zc.ionmEXYJ0".h4[yfGLLolji.FE&S}mT qEbKMI\|c`Ok[}Y]Ioo}D%\((dVO''LmQNM5An/ 89vNVfzdTqMA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.10	50062	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 241 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:30 UTC	241	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 62 61 72 72 6f 6e 73 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 65 74 77 61 74 63 68 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 73 6a 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 32 35 32 33 37 33 35 35 35 35 32 30 36 32 33 36 37 36 39 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 30 38 35 37 39 32 30 34 38 36 37 32 36 37 35 36 36 35 35 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 2e 6c 79 22 7d 2c 22 74 79 70 65 22 3a 22 73 6f 75 72 63 65 2d 73 75 63 63 65 73 73 22 7d 5d Data Ascii: [{"body":{"attribution_destination":["https://barrons.com","https://marketwatch.com","https://wsj.com"],"source_debug_key":"2523735555206236769","source_event_id":"10857920486726756655","source_site":"https://t.ly"},"type":"source-success"}]
2024-12-10 13:21:30 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.10	50063	172.217.17.70	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	2555	OUT	GET /pcs/view?xai=AKAOjsudpx28gO1C-F3gobRoocpe3L0ro5EBxRzZfRocLaK9njUnEsy_y27kG8a8pI2L33raToO5ddLwqIKSKLcWPOV_MVub2uLhkpQxuDGM_YXt4BhPSfjxfwBkrBIeBOcFu-zNPCROqAE-n5g16ruOWFgOKfo5bGaST_Vl3T6eQQ_mkV_Metw8wVyFJSH9FGoPO6gdpibJxaHfNR_zcLUCGEO7ZqOt-zPzuW_Zkcm9U4rx66Hi8yblYNWLgSvEskkD8PaWOYPjU0TATKMBeK6-jdo1lSOu8JykutGOiY8vGldmlXurZyqyKh2ZNdwNC8NmY0QF-QLQJR6prq5A5pJNcBy__oGxbdgmfbgVPOZA2AUw1Smob4bgSSTmZbb7YiGjWuEX2YHX4-ADWzRQ6uvZ_Cn24jjuHuzA7mXXNNpoJr2CoDl1lNk6ORMD-8nvVwmVtppvageM0sIPLIsLYW7ZyPtIF3uqAsOWZC-Y5cIzo2foQ3MjcTm7-IjE5zriIFaVzt0ZrF5JGtzHBblKCMm4QDTCzLer_fHLB5fzJakjAljOiN5lg4gWciB6k2QmoiT_I8OiuZqm_YIxnHZYByOUXK7GZnxCVvQfElZywMc5DL5Wz-54XEfQayjOSug0ku2cxX3t_E6O_Blu03XaZbj4LEs5tc7te_3zqW2r_VytVaiBxsOOxZ5om1JlxXUfF4ztwEHjP5WWVFtcIus95ILpxs95ts2oKTP_DkHw34I6-PaZYh9TQeQX2hkrET8dXlcam2GbXDlyzyUU_pjD8_6LJYg9JKAn9OPihh_NR9UXwqhgBIxdRMrUsvlAg03t03rnO26o-Ni_2FRBC3Hjo2-xxDnws9XnxwuZSMdd_aZNF5tcOaiVSKrj7fbBLsIFy0gbA_S24iBPBMeGyqwdRef8k442NxQXpjSuri9MEMXg8WDfsRT4Yig6B39EcZAf_rqCxqD7_8hxBusb6MN8WxJnPR-iTQoV_lzcIxlf7tsVe3 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1
2024-12-10 13:21:30 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.10	50074	37.252.171.85	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	856	OUT	GET /bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEAucPc0n90JY6KGIBH5wU3E%26google_cver%3D1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=Y7hTAPrn2ELIQ6YJbzrkE4hENPh7UtHMQuhi-eizxunHsAjuUNMaSAdcME5MTykXIu71tvWzXWJFYOk3V54OaErFvVyN1td8cViT5Y_zOCU.; uuid2=3306488306757890960
2024-12-10 13:21:30 UTC	1581	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 13:21:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1cd9a273-b848-4a7f-993a-d31ab7080e33 Set-Cookie: XANDR_PANID=Y7hTAPrn2ELIQ6YJbzrkE4hENPh7UtHMQuhi-eizxunHsAjuUNMaSAdcME5MTykXIu71tvWzXWJFYOk3V54OaErFvVyN1td8cViT5Y_zOCU.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:30 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M41.D>6NRF']wIg2GUbscB^!@wnfH8K6pQK`!5=E<L5?%Lf4h_b6.SEOS2*5^wm>)Oe_tqoo@X%tvdi1)p%nugO%v4VB%nmcX)r3OZ; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:30 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 13:21:30 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3306488306757890960; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 13:21:30 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-12-10 13:21:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.10	50076	35.244.159.8	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	659	OUT	GET /w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:30 UTC	537	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 13:21:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 X-Forwarded-For: 8.46.123.175 Vary: Origin Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC86hKHSOc-lqYtUXZjWH8o&google_cver=1&gdpr=0&cc=1 P3p: CP="CUR ADM OUR NOR STA NID" Set-Cookie: i=f446cf2f-ade2-472a-87e5-bc41c2514140\|1733836890; max-age=31536000; domain=.openx.net; path=/; secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.10	50068	172.217.19.226	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	4290	OUT	GET /dbm/clk?sa=L&ai=CNReRTEBYZ7m_IenFmLAPupG2yQ2vhKWgecPlv7O8E5Peg4vvQxABILmdyQ9gyQagAZvW090pyAEJqAMBqgTfAU_QWaI6AlJ3XzB7VKh8PJxS79kKHbVpynr754lS0Y8Bi9-3RSUJrfD95D1x231m2FZgJ3VNYl01AvWnyDmc1tPecR4vduXHEqaiPO6uacxaHoOw_FDZ7GLRxjfwa_-s7SBqQrwH6sBSK0f7krGEbW8AvEp-dydSKBnESFxFI0sJlXq_e9SJ5ZaFTs_5xemkjhwFYrX6qyVPev9YjijlF8iyVpA17KU6Jo3uCTzj7nZbzftOSbtRUV4QZFlALdRjOXM06xOOi6pFQacuoWVjhiYQdcUuWuNQTW9TaXk_cdPABLukh6rmBOAEA4gFm5ekjFCQBgGgBi6AB5uOpL0EqAfVyRuoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WLX4_9ilnYoDgAoBmAsByAsBgAwBqg0CVVOwE9-KsRq4E-QD2BMNiBQB2BQB0BUBmBYB-BYBgBcBshcCGAKyGAkSArtPGC4iAQA&ae=1&num=1&cid=CAQSOwCa7L7dS-YOXk-96uWTT8tWY2TcAGO55FFq5hGnIo9EA9rYFa33ZK3Et4Lp7btte4fg3w_vGhJEiz0XGAE&sig=AOD64_0AXGpWxuecfG-j0LKabeph_xd8wQ&client=ca-pub-5561763581314444&dbm_c=AKAmf-Cl0ywYV_PZuf4GBGN7ib6ZiMM3K_T9Vu49_adTIt2JzV28iwgs2S7QJzD8rgsVcz9T9n77pENYMR6QA8IbMHxYGec-AUqClbaHG9A5Nw3vJiszqEK [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCNy9zQEIucrNAQi/0M0BCMbRzQEIutTNAQjK1s0BCKfYzQEI+cDUFRjymM0BGLnSzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5561763581314444&output=html&h=280&slotname=2321115505&adk=348108860&adf=4181732005&pi=t.ma~as.2321115505&w=1110&abgtt=6&fwrn=4&fwrnh=100&lmt=1733836861&rafmt=1&format=1110x280&url=https%3A%2F%2Ft.ly%2F%3Fref%3Dexpired%26url%3Dhttps%3A%2F%2Ft.ly%2F8cSDx&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1733836867004&bpp=3&bdt=6372&idt=6062&shv=r20241205&mjsv=m202412040102&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=2977550825633&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=77&ady=312&biw=1263&bih=907&scr_x=0&scr_y=0&eid=31089330%2C95347445%2C95345967&oid=2&pvsid=2276850004632465&tmod=636762244&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C128 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1
2024-12-10 13:21:31 UTC	1628	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 10 Dec 2024 13:21:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://tpt.dotomi.com/event/etc/click?vndr_id=2096&vndr_name=DCM&comp_id=62059&campaign_id=101342&dvc_id=&ggl_play_id=&idfa=&ad_id=599677993&audience=&client_campaign_id=32425113&creative_id=224470660&placement_id=400452569&s_id=8900278&site_name=N5949.4624185PMPRECISION-DV360&rdct_url=https://www.jared.com/jewelry/all-collections/le-vian/c/7000000685?cid=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113-0-%ECid&utm_source=DV360&utm_medium=DIS&utm_content=Prospecting&utm_campaign=DIS-Jared-DV360-Gifting-Prospecting-Corp-TRF-FY25_1103_J_LV_NovDecLeVian_GFT_MF_NoPromo_DIS_Static_GM_2000x1047-Evergreen-CollectPg-32425113&gclid=*&gclid=EAIaIQobChMIuZWA2aWdigMV6SIGAB26iC3ZEAEYASAAEgJnRfD_BwE&_=32425113_=400452569_=224470660 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: FLC=CLadnwQQ2df5vgEYqbj5nQIghM2EayidjPoCMNuA4boGcAHauAQaMhg6FgoUKDCYF739wTqaGwYIzIDhugagGwE; expires=Tue, 10-Dec-2024 13:21:41 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.10	50080	35.244.159.8	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	808	OUT	GET /w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&gdpr=0&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=b15d8a59-f58c-4441-bec4-2831dcde48e9\|1733836889
2024-12-10 13:21:31 UTC	585	IN	HTTP/1.1 302 Found Server: OXGW/0.0.0 Date: Tue, 10 Dec 2024 13:21:30 GMT Content-Type: image/gif Content-Length: 0 Vary: Accept, Accept-Encoding P3P: CP="CUR ADM OUR NOR STA NID" Location: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=NGU5ZTY2Y2EtOTU3Yy0yNTEyLWYxZjItYmE2MDcyMWJiNTc0 Set-Cookie: i=b15d8a59-f58c-4441-bec4-2831dcde48e9\|1733836889; Version=1; Expires=Wed, 10-Dec-2025 13:21:31 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.10	50075	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:30 UTC	828	OUT	GET /pixel?google_nid=teadstv_dbm&google_hm=YzJhYTUwZTAtYWVjNS00M2Q4LWFhYzQtYTJjOGIxOTZlY2My HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
2024-12-10 13:21:31 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:31 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.10	50077	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:31 UTC	809	OUT	GET /pixel?google_nid=appnexus&google_hm=NDkzMDY4NTAyNDc0Nzc3NzE1Nw%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; APC=AfxxVi41Ur0C7EvYVStHQuKEMXY_BA-jTo8EBy_bV0c-I8uNq1zYrQ; ar_debug=1
2024-12-10 13:21:31 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:31 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.10	50089	104.18.26.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:31 UTC	731	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMPS=1322; CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; CMPRO=483
2024-12-10 13:21:31 UTC	991	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8efd89db7a624337-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hAVtHM6CMAAD2aAX0B-QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 13:21:31 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=483; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:31 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hDI2qPj3%2FOHWPwakQ%2FZmRIt5FRDLwaZH3MmKImbYWLpAEfB8%2B8%2FWYJ7pk4%2BImBLLm3sNBT%2BruLEEqEEVNzcuCEbN5iDzBgWWCt6UzJSsYjczm0XBYpUOw7C%2Bu3LBIRrpCuB7lprrUBDyCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.10	50096	74.119.117.16	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:31 UTC	664	OUT	GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTFumo5kjOpUJ3hXqQNslBSIz60h6laBIgm8D64hRShh0MNQ6HCmxbmAfP_Hu-0VQLqhbscT62xXpaQt_gvO94YmnsrOeWugDk&google_gid=CAESEB8BCZpsFSgb-QX-y-1aB-M&google_cver=1 HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:31 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Tue, 10 Dec 2024 13:21:31 GMT server: Kestrel cache-control: no-cache expires: Tue, 10 Dec 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 226385 strict-transport-security: max-age=31536000; preload; connection: close
2024-12-10 13:21:31 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.10	50099	104.18.27.193	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:31 UTC	489	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEGysntXAZ3cMm1Z8I1o1zvg&google_cver=1&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMPS=1322; CMID=Z1hAWNHM66QAABZXA6erCwAA; CMPRO=1322
2024-12-10 13:21:31 UTC	988	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 13:21:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8efd89dd6f1a0f39-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hAWNHM66QAABZXA6erCwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 13:21:31 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=1322; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 13:21:31 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I3crgBOx7kf%2FRov%2BIDpt6Muy3byxC4Tz8a5%2FPDwhY6qeCtRBg9nQRVC687bbS7i8JWPg8ytpaLmZu5mq1DsCBMDHKTpQhdpzog9Wd5qtJxxT4QtiexK%2BNYMlWX%2F1709Th1rxeZeSDPDvXw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-12-10 13:21:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.10	50082	142.250.181.14	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:31 UTC	988	OUT	GET /f/AGSKWxVLi3OjIL6YVRpVpOH82daPeNkU1wjvm4ZifdEGaqG1CZrC-iGTFl7ZH2MKWKljMmeb7PMWc-dnNsYV0yAMFgXbZ23bZ5MqhK1-3JtAPQQFZSLl9eqCWV3MQc4bibUyBAddF_hJ4w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzMzODM2ODg2LDEwOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuIl0sImh0dHBzOi8vdC5seS8iLG51bGwsW1s4LCJ4OEtKRXFOb1BXSSJdLFs5LCJlbi1VUyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlKHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:32 UTC	1936	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 10 Dec 2024 13:21:32 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-JKoOq6eRI67ATr0Y25XbJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjytDikmJw1pBikPj6kkkNiJ3SZ7AGAHHrzXOsk4HYaO15VgcgTvp3nrUAiA0VLrHaA7Fj0SVWTyBW7bnEagzE99ddYn0OxDPOX2ZdAMRFEldYG4CY4esVVg4gFuLmuNPwcBebwIl5HYpKGkn5hfHJ-XklRZlJpSX5RWnJaanFqUVlqUXxRgZGJoZGBhZ6BsbxBQYAmntAMg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 13:21:32 UTC	1936	IN	Data Raw: 32 38 38 66 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 44 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 5f 2e 6c Data Ascii: 288fif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Dp=function(a){if(!a)return null;a=_.l
2024-12-10 13:21:32 UTC	1936	IN	Data Raw: 6c 6c 3f 5f 2e 4c 28 61 2c 32 29 3a 6e 75 6c 6c 29 26 26 0a 61 3d 3d 3d 31 26 26 5f 2e 72 6f 28 63 2c 31 30 2c 21 30 29 3b 62 28 63 29 7d 3b 76 61 72 20 55 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 3d 5b 5d 7d 3b 55 70 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 62 5d 2e 63 6f 6e 63 61 74 28 5f 2e 70 61 28 5f 2e 42 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 29 7d 3b 55 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 42 63 2e 61 70 70 6c 79 28 30 2c 61 72 Data Ascii: ll?_.L(a,2):null)&&a===1&&_.ro(c,10,!0);b(c)};var Up=function(){this.i=[]};Up.prototype.addEventListener=function(a,b){this.i.push(function(){a.call.apply(a,[b].concat(_.pa(_.Bc.apply(0,arguments))))})};Up.prototype.g=function(){for(var a=_.Bc.apply(0,ar
2024-12-10 13:21:32 UTC	1936	IN	Data Raw: 70 28 61 2c 31 29 3b 47 70 28 62 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 59 70 28 61 2c 30 29 3b 47 70 28 62 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 59 70 28 61 2c 32 29 7d 29 7d 3b 0a 76 61 72 20 68 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 6f 3b 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 62 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 30 30 30 30 70 78 22 3b 62 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 Data Ascii: p(a,1);Gp(b)},function(){Yp(a,0);Gp(b)})},function(){Yp(a,2)})};var hq=function(a){var b=document.createElement("div");b.className=a.o;b.style.width="1px";b.style.height="1px";b.style.position="absolute";b.style.left="-10000px";b.style.top="-"+Math.floor
2024-12-10 13:21:32 UTC	1936	IN	Data Raw: 61 72 28 74 68 69 73 2e 6f 2c 74 68 69 73 2e 6a 29 2c 62 72 28 74 68 69 73 2c 61 29 29 7d 3b 76 61 72 20 62 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 54 70 28 61 2e 44 2c 61 2e 41 2c 61 2e 43 2c 61 2e 42 29 3b 63 71 28 61 2e 75 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 74 61 72 74 28 65 2c 62 29 7d 29 3b 76 61 72 20 64 3d 24 71 28 61 29 3b 62 71 28 61 2e 75 2c 64 2e 65 63 29 3b 64 2e 48 63 28 29 7d 3b 76 61 72 20 63 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 78 28 63 72 2c 5f 2e 48 29 3b 76 61 72 20 64 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 75 28 61 29 7d 3b 5f 2e 78 28 64 72 2c 5f 2e 48 29 3b 76 61 72 20 65 72 3d 66 75 6e 63 74 69 6f Data Ascii: ar(this.o,this.j),br(this,a))};var br=function(a,b){var c=new Tp(a.D,a.A,a.C,a.B);cq(a.u,function(e){c.start(e,b)});var d=$q(a);bq(a.u,d.ec);d.Hc()};var cr=function(a){this.l=_.u(a)};_.x(cr,_.H);var dr=function(a){this.l=_.u(a)};_.x(dr,_.H);var er=functio
2024-12-10 13:21:32 UTC	1936	IN	Data Raw: 39 6d 64 57 35 6b 61 57 35 6e 59 32 68 76 61 57 4e 6c 63 32 31 6c 63 33 4e 68 5a 32 56 7a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 69 58 53 78 62 49 6d 5a 69 55 47 68 76 64 47 39 54 62 6d 39 33 59 6d 39 34 51 57 52 7a 49 47 4a 70 5a 30 46 6b 64 6b 31 70 5a 47 52 73 5a 53 42 68 5a 48 4e 75 61 58 42 77 5a 58 52 66 64 32 6c 6b 5a 32 56 30 49 47 46 6b 64 6d 56 79 64 46 39 69 62 47 39 6a 61 79 42 7a 61 57 52 6c 59 6d 46 79 4c 54 4d 79 4d 46 39 66 59 6d 39 34 58 32 46 6b 64 69 49 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 33 42 68 5a 32 56 68 5a 43 39 76 63 32 51 75 61 6e 4d 5c 2f Data Ascii: 9mdW5kaW5nY2hvaWNlc21lc3NhZ2VzLmdvb2dsZS5jb20iXSxbImZiUGhvdG9Tbm93Ym94QWRzIGJpZ0Fkdk1pZGRsZSBhZHNuaXBwZXRfd2lkZ2V0IGFkdmVydF9ibG9jayBzaWRlYmFyLTMyMF9fYm94X2FkdiIsW251bGwsbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL3BhZ2VhZC9vc2QuanM\/
2024-12-10 13:21:32 UTC	711	IN	Data Raw: 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6a 5a 6a 5a 44 51 79 4e 54 67 35 5a 47 45 7a 4d 32 49 33 5a 54 6b 69 4c 47 35 31 62 47 77 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 66 4c 30 4e 76 62 6e 52 79 61 57 4a 31 64 47 39 79 55 32 56 79 64 6d 6c 75 5a 31 64 6c 59 6c 4e 33 61 58 52 6a 61 47 4a 76 59 58 4a 6b 53 48 52 30 63 43 39 71 63 32 56 79 63 6d 39 79 49 6c 31 64 58 51 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 32 68 74 74 Data Ascii: bGwsbnVsbCxudWxsLG51bGwsIjZjZDQyNTg5ZGEzM2I3ZTkiLG51bGwsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9fL0NvbnRyaWJ1dG9yU2VydmluZ1dlYlN3aXRjaGJvYXJkSHR0cC9qc2Vycm9yIl1dXQ\\u003d\\u003d\x22\x5d\x5d,\x5bnull,null,null,\x22htt
2024-12-10 13:21:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.10	50083	172.217.19.226	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:31 UTC	1868	OUT	GET /pagead/sodar?id=sodar2&v=232&t=2&li=gda_r20241205&jk=2276850004632465&bg=!BQalBknNAAbFeMsx5Xg7ADQBe5WfOD2J0DfeE_kpNaJLBubDbyp_JHxEIydZ_h6hcFIIAzn5EpVJE3rAt111EmhBsJUDAgAAAzFSAAAABmgBB34ANqZMyRnaBCEUAe350vR_2nOWXJNDSRSCvr5YuzHioS-RmMgvqT612mWljAbEk6hJ3FFei5U2qQoAiuEiqXxNSqulAuLHsphQKF9uX8iFigtqLDmsyaFVePbJS6pHb7KxnCioNdu1z5Gi3KL8beSaPZfWAUGTD7Zk1CJyHV-Upi7peMw5RR7ovt7MRch31KTjHLWFVP6nUq4M5RnD7oddC3_02UBeuQ4dMMKTyZxjgH55BapG6_rRtDKaqJ9hrl1vFoWk75kCd4FlPbDfOAcXmeFtTxPlZoPzAISFoQDshJq_0YpHa4523UV4eV_6LNmX_j4zepSPeL5mpIMvk1ClRhIHb9fncEVk5Mo35ai5puwuX5FgS1S3QWKBthO3nv2iKoQN3e4pdy3gtb7Jiaw9JK5M6h3nLwcNaFlq2U5Hs347PWmWxZaIygbOiK-Uyh5K1EcxjQHGlgxKmGmNexuA0wNSel905oeynUTIHmhmQVmZRAjOUzspAsfALvccSFRgsckjZ8BvsBXYHZaitsIv9EJhiXR_1dxPejwCVEkX8t_3TKya08P6KVbhbiCougesDfZBjGXHAhozU7Waq0Bevoi7XJJ6zqmyQpvHZP2U7MSowDctiDeQFUAYP_vxWKeV3ILX15MF1HYQ-faE9oFpYy9PJmPP0c_VoEb0qiXtHGErstNYNLvEhV8Akax6DMhJx52Mu0xwkZciZhJW3LbOuG9LmyhqHoDWwzxR2cIGOo4Z2caDaxvoeHZOIp4S9KJwCj0F_jH4IupI1pVv4Pm7L6tTY45MD0wj6tn68aNG4Iu_VeItldj0J32iCpRZpxGsM [TRUNCATED] Host: ep1.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.ly/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 13:21:32 UTC	451	IN	HTTP/1.1 204 No Content P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 10 Dec 2024 13:21:31 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.10	50088	172.217.17.34	443	6564	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 13:21:31 UTC	822	OUT	GET /pixel?google_nid=openx&google_hm=NGU5ZTY2Y2EtOTU3Yy0yNTEyLWYxZjItYmE2MDcyMWJiNTc0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmnwjYbAxnLbRxn6gMfCyPJX-7IM494OonHjcJ59Tan7ShTJzB3YOsBTU7U; ar_debug=1; APC=AfxxVi7T-yvA7uFyV0FDIm8QBxkBxVfyL2Gub5nA-tHAKxvG9pIIMA
2024-12-10 13:21:32 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 13:21:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 13:21:32 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Target ID:	0
Start time:	08:20:48
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:20:51
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2424,i,13418119353792489953,16204478221804853054,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:20:57
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.ly/8cSDx"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://t.ly/8cSDx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Windows Analysis Report
https://t.ly/8cSDx